Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
File: ilUqhuMbaeXVMg7egdNLsSikXO4.mft (raw, json)
Hash identifier: 4O5hG9xUxEUnf22cOA2bqYrSmNNOjuouhD7Ma/I9b+k=
Subject key identifier: 4D:68:CF:97:26:4A:FF:D2:C3:2E:4A:B8:FB:06:07:3F:D9:55:31:05
Authority key identifier: 8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
Certificate issuer: /CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Certificate serial: 019511D9B50C5ACF8217F4992CFC9BFFAB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 03:00:35 +0000
Manifest this update: Mon 17 Feb 2025 03:00:35 +0000
Manifest next update: Tue 18 Feb 2025 03:00:35 +0000
Files and hashes: 1: gx1SCX17EN8yNFFOaZKqHyy38bg.roa (hash: y86l006aIRQbh6g6sMv1/V04L9sTmUKHfB0xrZAQk4Q=)
2: ilUqhuMbaeXVMg7egdNLsSikXO4.crl (hash: zkGnoAGIYBHiROlErcnnMsXyMAuzxQdQ1TC+cg9RWPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:b5:0c:5a:cf:82:17:f4:99:2c:fc:9b:ff:ab:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Validity
Not Before: Feb 17 03:00:35 2025 GMT
Not After : Feb 18 03:00:35 2025 GMT
Subject: CN=4d68cf97264affd2c32e4ab8fb06073fd9553105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:65:ca:89:b0:41:e6:94:e3:9b:8f:89:06:
bf:08:de:3d:c3:b7:8e:c2:e8:7c:76:9c:f1:0b:c5:
51:d9:ef:22:d2:83:b4:39:98:04:f7:94:b1:3c:3e:
6d:4a:09:28:2a:a8:27:b5:c7:49:04:a5:fe:8a:ac:
50:4f:40:ed:f4:c3:ff:8e:63:51:cc:57:7e:71:51:
30:91:d8:30:7e:89:28:4a:21:8f:df:ef:66:68:91:
d5:06:c4:e4:95:1f:30:2f:95:8a:46:2c:2c:2d:a4:
c1:cb:31:83:fe:cf:7f:c1:3d:d7:8d:3f:f5:83:eb:
1f:1c:2e:a5:3c:c7:88:58:e9:a1:b2:93:01:5b:bc:
35:9a:e8:b3:80:a3:f5:a5:13:05:e4:3c:b9:3e:4c:
17:7e:9c:27:3d:71:63:c0:2f:b9:be:75:d0:8c:d0:
d1:e0:46:d4:25:79:72:e0:6a:62:66:2c:b2:06:00:
20:0c:12:d4:8f:dc:26:2a:99:f0:fd:3f:12:c1:9d:
f2:e3:ce:f6:0b:c9:25:7a:c8:94:56:3a:e1:1a:89:
27:12:e1:48:10:fe:99:01:f5:d6:97:c3:2e:15:f3:
a7:94:77:e3:6c:c5:cc:e4:a7:78:bf:5a:37:69:cd:
e1:a4:64:2a:37:9a:8c:41:3c:8a:88:55:cf:a9:94:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:68:CF:97:26:4A:FF:D2:C3:2E:4A:B8:FB:06:07:3F:D9:55:31:05
X509v3 Authority Key Identifier:
keyid:8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:06:6c:46:5b:cb:d5:03:74:03:8e:43:28:66:96:79:83:b6:
5e:19:8f:8b:6e:86:51:b0:d5:57:5d:29:89:e7:6d:f2:69:6e:
a0:fd:af:c9:1b:10:3c:8c:69:2a:0d:8a:1e:45:ae:ec:81:e8:
f6:24:a6:a0:76:df:cd:fd:d6:62:13:a9:2e:cd:fc:bc:0c:ec:
58:62:45:5a:f8:cf:34:ba:5e:67:3d:94:fb:27:c2:6a:d5:44:
42:25:a6:2d:0e:f7:99:2b:b2:c1:f3:99:c5:b0:11:db:ac:98:
7e:8a:50:8f:17:ce:36:6c:1f:95:ff:28:fe:5e:21:bb:33:26:
94:23:6e:f9:8c:23:25:63:59:06:a0:0a:49:8f:18:10:1f:2c:
dd:0e:e5:10:06:9c:ee:a5:86:ba:81:28:d0:c0:d4:9a:97:10:
cc:44:47:50:a0:7b:f4:3b:ba:ef:27:13:df:64:0d:5b:b6:47:
04:7c:88:0a:36:d8:4d:f2:b8:05:08:20:b4:2f:50:f5:b1:d5:
2a:47:29:93:e0:a2:24:d4:12:9e:5c:32:d3:6a:b4:8b:f8:30:
ce:5b:55:be:b7:29:00:78:2f:67:16:84:e3:df:81:56:12:ba:
a3:d6:9f:e4:86:f6:ed:1d:4c:35:6d:e9:95:06:38:e2:bd:36:
90:c2:58:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2bUMWs+CF/SZLPyb/6txMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNTUyYTg2ZTMxYjY5ZTVkNTMyMGVkZTgxZDM0YmIxMjhh
NDVjZWUwHhcNMjUwMjE3MDMwMDM1WhcNMjUwMjE4MDMwMDM1WjAzMTEwLwYDVQQD
Eyg0ZDY4Y2Y5NzI2NGFmZmQyYzMyZTRhYjhmYjA2MDczZmQ5NTUzMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ1lyomwQeaU45uPiQa/CN49w7eO
wuh8dpzxC8VR2e8i0oO0OZgE95SxPD5tSgkoKqgntcdJBKX+iqxQT0Dt9MP/jmNR
zFd+cVEwkdgwfokoSiGP3+9maJHVBsTklR8wL5WKRiwsLaTByzGD/s9/wT3XjT/1
g+sfHC6lPMeIWOmhspMBW7w1muizgKP1pRMF5Dy5PkwXfpwnPXFjwC+5vnXQjNDR
4EbUJXly4GpiZiyyBgAgDBLUj9wmKpnw/T8SwZ3y4872C8klesiUVjrhGoknEuFI
EP6ZAfXWl8MuFfOnlHfjbMXM5Kd4v1o3ac3hpGQqN5qMQTyKiFXPqZSrbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1oz5cmSv/Swy5KuPsGBz/ZVTEFMB8GA1UdIwQY
MBaAFIpVKobjG2nl1TIO3oHTS7EopFzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lOTU0YjktODczOC00NDk2LTg5YWQt
NzhhMTI2YmYwYWRjLzEvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lOTU0YjktODczOC00NDk2LTg5YWQtNzhhMTI2YmYwYWRj
LzEvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAygZsRlvL
1QN0A45DKGaWeYO2XhmPi26GUbDVV10piedt8mluoP2vyRsQPIxpKg2KHkWu7IHo
9iSmoHbfzf3WYhOpLs38vAzsWGJFWvjPNLpeZz2U+yfCatVEQiWmLQ73mSuywfOZ
xbAR26yYfopQjxfONmwflf8o/l4huzMmlCNu+YwjJWNZBqAKSY8YEB8s3Q7lEAac
7qWGuoEo0MDUmpcQzERHUKB79Du67ycT32QNW7ZHBHyICjbYTfK4BQggtC9Q9bHV
Kkcpk+CiJNQSnlwy02q0i/gwzltVvrcpAHgvZxaE49+BVhK6o9af5Ib27R1MNW3p
lQY44r02kMJY8A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:50 2025 by rpki-client