Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File: ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier: XFzJe/o9sgOTYxP+50XsZWkS8+OAKtgQet1WnN8WiOc=
Subject key identifier: 03:6A:9E:A0:EC:C7:19:60:46:85:60:C6:12:E9:1F:08:F5:03:2E:BD
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer: /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial: 019511D9650B8A8D89ABCAD5B28114F5F03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 03:00:14 +0000
Manifest this update: Mon 17 Feb 2025 03:00:14 +0000
Manifest next update: Tue 18 Feb 2025 03:00:14 +0000
Files and hashes: 1: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: HRrMRC2k28U2QsgUSpvIo2pf/AQqa0HLNaWLil/ADNw=)
2: oEjv28BsSkkrSjhugPUpAGGwetU.roa (hash: CWIq+nR2seFkMvcAwstaiubts3JwM88PnSz1tCIk0CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:65:0b:8a:8d:89:ab:ca:d5:b2:81:14:f5:f0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Validity
Not Before: Feb 17 03:00:14 2025 GMT
Not After : Feb 18 03:00:14 2025 GMT
Subject: CN=036a9ea0ecc71960468560c612e91f08f5032ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:ac:99:40:36:45:4c:19:e8:11:af:a8:f4:
5a:3d:a4:e4:9f:ab:85:a3:fb:dc:89:22:ef:4b:c1:
7a:85:d2:5f:df:0e:0a:11:b2:1a:bf:42:7c:fa:e6:
35:e9:3d:50:2a:45:ee:b8:c7:00:9f:2e:ce:f5:5d:
9e:70:92:7c:44:65:b5:ad:f3:05:7d:79:c0:22:65:
c7:18:13:fd:6d:bc:bd:b9:99:6b:c4:58:03:b6:b3:
7f:19:e9:22:ca:9c:05:bb:9f:f0:67:8c:f0:5b:70:
be:a4:da:fd:8b:bf:8c:0b:b6:e2:24:4d:9e:e0:7f:
1e:33:21:ef:39:7b:d6:82:9d:6f:f0:91:f6:16:81:
6a:95:53:19:f9:d2:7e:4f:a6:78:23:b3:18:ee:c7:
33:d5:2c:1b:0c:43:12:36:59:51:e9:ab:50:e6:1e:
1b:2f:5c:ab:1f:77:22:f5:c7:d9:6a:3c:a0:24:57:
50:d1:f6:ab:0f:d5:62:a9:6a:e5:bc:14:fb:50:c5:
f2:7c:3a:75:76:cd:86:9a:5e:72:b1:08:63:f2:28:
dc:19:6b:98:db:90:bd:36:5f:5a:b0:de:56:54:3d:
95:e5:a8:c4:cc:a2:39:cf:a9:0e:1e:5c:7f:52:e4:
e0:24:3f:d5:da:bd:c3:72:40:20:a3:ce:d6:74:be:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:9E:A0:EC:C7:19:60:46:85:60:C6:12:E9:1F:08:F5:03:2E:BD
X509v3 Authority Key Identifier:
keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8e:54:8b:45:0d:cf:ad:02:8d:88:7f:f2:fa:ca:16:a3:10:
dd:1e:c7:b9:e9:18:fa:ec:74:af:dd:80:d1:41:c0:11:48:81:
8b:e3:80:12:49:17:d8:5b:d0:e5:a8:2d:d0:02:57:df:4f:71:
32:4d:3c:fe:5a:ce:cb:6c:72:d5:7d:8f:1d:e6:0c:e8:37:29:
95:3c:c7:cc:76:db:37:ea:bf:26:13:5a:85:da:8d:cb:80:8f:
fe:d7:d0:bf:06:2e:32:b6:9d:1c:23:da:21:a2:ae:f7:2e:4c:
a4:5e:50:4d:cc:5c:46:85:11:a7:31:f7:8c:4e:cb:c8:f2:2c:
27:17:34:08:bd:28:20:05:1f:4f:8c:ff:8f:a5:1d:5a:55:cc:
f0:81:d1:f8:82:13:b2:65:4a:a8:27:cc:ad:f9:ba:40:7e:a6:
cf:92:be:e4:38:56:2e:2e:8a:0d:b2:ce:b7:97:c1:1f:c3:82:
e8:b2:38:47:13:dc:29:f4:05:6b:7b:2b:63:47:17:b3:93:51:
9d:50:a1:24:e6:e0:f9:07:41:be:31:05:f9:2f:7c:fe:f1:75:
20:50:a1:a8:92:d9:86:b0:1f:d0:65:c1:71:76:36:77:cc:c3:
78:cf:d3:ca:73:8d:bd:d2:13:f4:4c:36:33:e2:4c:98:3d:3c:
d8:16:a1:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2WULio2Jq8rVsoEU9fA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDYxYWU4NDcyYzVjOGZjZDgxMzc1NmMxNjRjMmYxODY0
ZDNjOTAwHhcNMjUwMjE3MDMwMDE0WhcNMjUwMjE4MDMwMDE0WjAzMTEwLwYDVQQD
EygwMzZhOWVhMGVjYzcxOTYwNDY4NTYwYzYxMmU5MWYwOGY1MDMyZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nGsmUA2RUwZ6BGvqPRaPaTkn6uF
o/vciSLvS8F6hdJf3w4KEbIav0J8+uY16T1QKkXuuMcAny7O9V2ecJJ8RGW1rfMF
fXnAImXHGBP9bby9uZlrxFgDtrN/GekiypwFu5/wZ4zwW3C+pNr9i7+MC7biJE2e
4H8eMyHvOXvWgp1v8JH2FoFqlVMZ+dJ+T6Z4I7MY7scz1SwbDEMSNllR6atQ5h4b
L1yrH3ci9cfZajygJFdQ0farD9ViqWrlvBT7UMXyfDp1ds2Gml5ysQhj8ijcGWuY
25C9Nl9asN5WVD2V5ajEzKI5z6kOHlx/UuTgJD/V2r3DckAgo87WdL7sFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANqnqDsxxlgRoVgxhLpHwj1Ay69MB8GA1UdIwQY
MBaAFJXWGuhHLFyPzYE3VsFkwvGGTTyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEt
MmM3YTExYzFmYmFmLzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZTQ3NDgtNGVhYi00ZTU1LWI2NGEtMmM3YTExYzFmYmFm
LzEvbGRZYTZFY3NYSV9OZ1RkV3dXVEM4WVpOUEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALY5Ui0UN
z60CjYh/8vrKFqMQ3R7HuekY+ux0r92A0UHAEUiBi+OAEkkX2FvQ5agt0AJX309x
Mk08/lrOy2xy1X2PHeYM6DcplTzHzHbbN+q/JhNahdqNy4CP/tfQvwYuMradHCPa
IaKu9y5MpF5QTcxcRoURpzH3jE7LyPIsJxc0CL0oIAUfT4z/j6UdWlXM8IHR+IIT
smVKqCfMrfm6QH6mz5K+5DhWLi6KDbLOt5fBH8OC6LI4RxPcKfQFa3srY0cXs5NR
nVChJObg+QdBvjEF+S98/vF1IFChqJLZhrAf0GXBcXY2d8zDeM/TynONvdIT9Ew2
M+JMmD082Bah3w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:57 2025 by rpki-client