Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
File: is2ygftl8Ci3zcq5xHBup8RZQCI.mft (raw, json)
Hash identifier: TrWI+xsk2oqNW6Q1lVdQOlkJCzwBmYCjh+kII0Us76A=
Subject key identifier: EA:8F:3F:75:86:32:0E:84:A6:2C:A3:29:DF:51:21:63:9A:A3:46:97
Authority key identifier: 8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
Certificate issuer: /CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Certificate serial: 019511354AEF5C3DD5D203D6755F8EEA874F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 00:01:00 +0000
Manifest this update: Mon 17 Feb 2025 00:01:00 +0000
Manifest next update: Tue 18 Feb 2025 00:01:00 +0000
Files and hashes: 1: is2ygftl8Ci3zcq5xHBup8RZQCI.crl (hash: +Z8w2qolB/3SXeiPf2pacx1LCxg9N6oxAz7+kEn8k2w=)
2: uTaWQEqkT3VDsjoAhq5gw8mVwOQ.roa (hash: xB2IQW+JC30VMfZ+n3Kl+A7lkKJJ7MAH//Df7ex6gzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:4a:ef:5c:3d:d5:d2:03:d6:75:5f:8e:ea:87:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acdb281fb65f028b7cdcab9c4706ea7c4594022
Validity
Not Before: Feb 17 00:01:00 2025 GMT
Not After : Feb 18 00:01:00 2025 GMT
Subject: CN=ea8f3f7586320e84a62ca329df5121639aa34697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:50:8c:44:dd:46:92:35:81:5a:cf:6c:fb:
28:22:f0:8c:e1:42:1a:26:c2:25:dd:a6:59:78:66:
a7:0d:98:e3:75:c8:f1:07:2a:97:71:f6:78:b2:97:
17:a8:a6:76:fe:16:32:19:15:1e:72:33:30:8b:0a:
4c:84:90:69:85:32:6c:b7:0f:0a:37:cd:30:d5:91:
41:2e:b8:c6:fd:89:18:1f:ce:2f:22:7d:10:59:d8:
23:bb:a5:2a:1b:ea:c1:38:23:df:0f:56:83:00:2d:
01:24:76:13:80:86:98:dc:32:77:d3:86:8c:e3:34:
8c:09:47:72:01:2b:58:fe:b9:c5:f3:f7:8e:b0:c7:
89:e5:c0:d4:93:77:f5:32:e1:92:c9:6e:2a:0f:8f:
7e:a2:f7:34:a2:d3:62:73:52:0e:bd:e1:ed:d8:58:
15:6e:26:b2:9c:29:72:19:4c:05:16:dc:f5:c7:1f:
38:8f:fd:1c:90:0b:b9:5f:c3:4f:2f:9d:7b:dc:8b:
d4:49:a5:91:5c:f4:dd:d0:1f:4e:fe:33:0c:6c:c4:
fe:83:95:d8:77:c0:8d:e2:94:24:e9:bf:d2:36:49:
f5:e2:c2:24:01:94:77:a8:aa:aa:a4:64:7d:84:1d:
84:49:0f:e7:07:80:0a:5b:be:32:10:06:20:bc:d5:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8F:3F:75:86:32:0E:84:A6:2C:A3:29:DF:51:21:63:9A:A3:46:97
X509v3 Authority Key Identifier:
keyid:8A:CD:B2:81:FB:65:F0:28:B7:CD:CA:B9:C4:70:6E:A7:C4:59:40:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is2ygftl8Ci3zcq5xHBup8RZQCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f7a6a3-71f3-4482-b0c5-fac346400369/1/is2ygftl8Ci3zcq5xHBup8RZQCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:43:d6:74:6d:6f:de:6c:76:56:d3:f2:7b:56:1b:07:9c:53:
cf:75:ca:a5:db:f3:93:1d:a1:c7:1a:42:d2:5c:8e:4a:8f:d1:
64:ee:67:57:94:c2:39:8e:46:db:98:f5:c1:d3:ce:4d:96:70:
f5:38:12:fd:91:19:fd:c2:88:c5:d6:d1:e4:79:b8:b8:ce:07:
30:45:a5:62:c7:a6:0a:80:75:71:ba:45:cb:44:af:2e:05:f2:
1a:7b:2d:84:41:ab:a2:7f:0a:9e:de:da:87:a7:72:58:73:5f:
4f:79:c7:47:9b:7f:27:41:65:6b:8d:07:37:d1:ea:7b:8e:8a:
be:0b:c7:34:21:9a:39:8e:fe:79:f1:c3:93:b2:48:8b:78:66:
c8:1a:0f:3c:c9:3f:00:ca:4d:68:f9:d2:55:8d:7a:8f:c8:65:
b8:97:62:ed:fc:dc:53:52:59:9b:21:62:21:d2:1c:2d:31:4f:
32:99:85:c2:5e:f8:5a:14:08:52:a9:f9:a3:20:36:44:f2:62:
d2:0e:7c:05:89:66:37:1b:69:5b:26:10:15:c4:4c:4b:45:99:
52:e1:c7:80:f5:63:25:a7:70:7e:be:0a:65:96:67:38:23:fa:
1e:d9:34:b5:cf:33:41:4f:b1:bc:19:99:49:39:4c:7f:80:97:
2e:eb:de:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNUrvXD3V0gPWdV+O6odPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhY2RiMjgxZmI2NWYwMjhiN2NkY2FiOWM0NzA2ZWE3YzQ1
OTQwMjIwHhcNMjUwMjE3MDAwMTAwWhcNMjUwMjE4MDAwMTAwWjAzMTEwLwYDVQQD
EyhlYThmM2Y3NTg2MzIwZTg0YTYyY2EzMjlkZjUxMjE2MzlhYTM0Njk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mdQjETdRpI1gVrPbPsoIvCM4UIa
JsIl3aZZeGanDZjjdcjxByqXcfZ4spcXqKZ2/hYyGRUecjMwiwpMhJBphTJstw8K
N80w1ZFBLrjG/YkYH84vIn0QWdgju6UqG+rBOCPfD1aDAC0BJHYTgIaY3DJ304aM
4zSMCUdyAStY/rnF8/eOsMeJ5cDUk3f1MuGSyW4qD49+ovc0otNic1IOveHt2FgV
biaynClyGUwFFtz1xx84j/0ckAu5X8NPL5173IvUSaWRXPTd0B9O/jMMbMT+g5XY
d8CN4pQk6b/SNkn14sIkAZR3qKqqpGR9hB2ESQ/nB4AKW74yEAYgvNUXSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqPP3WGMg6EpiyjKd9RIWOao0aXMB8GA1UdIwQY
MBaAFIrNsoH7ZfAot83KucRwbqfEWUAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXMyeWdmdGw4Q2kzemNxNXhIQnVwOFJaUUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mN2E2YTMtNzFmMy00NDgyLWIwYzUt
ZmFjMzQ2NDAwMzY5LzEvaXMyeWdmdGw4Q2kzemNxNXhIQnVwOFJaUUNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mN2E2YTMtNzFmMy00NDgyLWIwYzUtZmFjMzQ2NDAwMzY5
LzEvaXMyeWdmdGw4Q2kzemNxNXhIQnVwOFJaUUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREPWdG1v
3mx2VtPye1YbB5xTz3XKpdvzkx2hxxpC0lyOSo/RZO5nV5TCOY5G25j1wdPOTZZw
9TgS/ZEZ/cKIxdbR5Hm4uM4HMEWlYsemCoB1cbpFy0SvLgXyGnsthEGron8Knt7a
h6dyWHNfT3nHR5t/J0Fla40HN9Hqe46KvgvHNCGaOY7+efHDk7JIi3hmyBoPPMk/
AMpNaPnSVY16j8hluJdi7fzcU1JZmyFiIdIcLTFPMpmFwl74WhQIUqn5oyA2RPJi
0g58BYlmNxtpWyYQFcRMS0WZUuHHgPVjJadwfr4KZZZnOCP6Htk0tc8zQU+xvBmZ
STlMf4CXLuve2A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:35 2025 by rpki-client