Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: cMO0b431NQGgGDj+kccl+klNF46hU4IjOMb1juDMI5s=
Subject key identifier: 38:50:EE:38:DC:96:6F:E3:88:DC:7F:A0:5E:68:20:E2:83:71:B0:8A
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 0194C3F55F5BB7B4C5B98B17DAFC7FB5CFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 00:00:25 +0000
Manifest this update: Sun 02 Feb 2025 00:00:25 +0000
Manifest next update: Mon 03 Feb 2025 00:00:25 +0000
Files and hashes: 1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: sIjV0zNw/EVnqjtpzhh30Ip3dV9DekGD8lNIRYkN37g=)
2: b8cMShMrRsZNeCR-DHToKJSbSFc.roa (hash: Xs+2pmDsikwjys7lR2WnXyOpx7FAM2jx9740akpfIYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:5f:5b:b7:b4:c5:b9:8b:17:da:fc:7f:b5:cf:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Feb 2 00:00:25 2025 GMT
Not After : Feb 3 00:00:25 2025 GMT
Subject: CN=3850ee38dc966fe388dc7fa05e6820e28371b08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:ab:f1:7c:77:cb:d6:e5:8e:8c:29:a5:d4:
fb:2a:c3:be:70:58:02:13:a4:5d:1a:fc:c6:45:f5:
fe:c9:90:cc:96:5a:17:95:c3:a5:b1:c7:e2:de:d1:
0f:a7:ce:bb:54:73:26:38:db:44:4b:85:32:15:82:
f7:9f:e5:f5:37:c3:22:52:fc:31:43:b6:1e:4e:49:
22:b0:cf:57:53:83:54:32:2c:9f:db:5f:e2:bd:f6:
63:0f:51:78:25:fb:e3:bf:11:d3:2e:5f:35:ae:71:
ea:d0:f3:5d:17:7e:92:d4:44:63:23:16:7a:65:8d:
ac:69:d6:3f:4c:0e:1d:f6:cb:1e:2e:c3:6d:af:76:
f5:9b:bb:6f:fb:c6:73:d7:d7:5a:09:b3:56:b0:a4:
b1:21:6b:fb:cb:ee:cf:c2:52:83:5d:9f:3e:57:d7:
f5:d5:54:f4:7f:2a:30:f4:97:3c:c8:e2:cf:61:be:
6a:82:de:c2:55:51:38:de:e8:73:70:51:5a:13:4b:
61:01:16:5d:ca:7a:1b:65:21:2b:8c:4e:d3:c9:87:
93:d3:a8:93:db:4c:d4:38:a5:6a:cc:80:fe:68:ce:
2d:09:8f:40:4a:6d:0f:b1:5d:fc:d9:8a:0a:40:03:
f5:9c:1f:2f:c8:b3:9b:e6:33:7b:a1:09:f6:dc:f6:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:50:EE:38:DC:96:6F:E3:88:DC:7F:A0:5E:68:20:E2:83:71:B0:8A
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0c:c3:c9:e6:90:f3:52:ab:97:1c:02:b9:c0:20:c7:09:c1:
2d:a1:45:64:10:1d:c3:ac:b6:f4:87:2f:9f:60:0c:bc:d9:f4:
6b:0f:72:65:e5:85:6d:e9:9a:d0:64:07:f7:79:03:de:7e:8d:
96:d8:1d:fb:52:44:63:ff:80:e2:08:53:c3:23:91:8d:24:f4:
7d:6b:a2:c7:2f:0a:65:a6:ca:a7:1f:c0:1b:7e:d5:10:18:13:
2c:f6:b4:92:ab:1a:39:2f:b3:b1:b3:fa:4d:7e:d8:11:bd:fe:
1b:93:43:5a:b0:c3:dc:d2:5d:76:05:81:dd:ad:ad:85:aa:58:
ea:53:a2:2b:b6:6c:ab:cf:ed:f2:df:47:64:04:64:28:52:a4:
8e:e5:2f:c3:c4:fb:54:f3:63:82:3a:35:5f:3c:36:ea:1c:6b:
1f:7f:0c:1a:cf:88:c2:7e:d2:86:e2:dc:84:9d:df:0a:d2:da:
a2:23:9a:c5:d5:13:13:b0:be:bf:7a:6a:a6:e9:99:ba:67:b2:
80:bf:83:f9:63:f6:55:43:be:4b:05:f1:a6:79:b9:ad:07:69:
5c:76:d0:af:7c:c1:67:e8:db:4a:d5:7d:94:fa:fc:ab:38:c1:
b0:79:0e:5d:d3:b1:cb:c0:93:ba:1f:e1:d6:84:20:7b:9b:76:
34:c3:43:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9V9bt7TFuYsX2vx/tc/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZGY1MTZjOTVkZDZlYjJkMWQ5ZGQ0ZTBlMDMyODZjMTkx
MWY2ZTEwHhcNMjUwMjAyMDAwMDI1WhcNMjUwMjAzMDAwMDI1WjAzMTEwLwYDVQQD
EygzODUwZWUzOGRjOTY2ZmUzODhkYzdmYTA1ZTY4MjBlMjgzNzFiMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYOr8Xx3y9bljowppdT7KsO+cFgC
E6RdGvzGRfX+yZDMlloXlcOlscfi3tEPp867VHMmONtES4UyFYL3n+X1N8MiUvwx
Q7YeTkkisM9XU4NUMiyf21/ivfZjD1F4JfvjvxHTLl81rnHq0PNdF36S1ERjIxZ6
ZY2sadY/TA4d9sseLsNtr3b1m7tv+8Zz19daCbNWsKSxIWv7y+7PwlKDXZ8+V9f1
1VT0fyow9Jc8yOLPYb5qgt7CVVE43uhzcFFaE0thARZdynobZSErjE7TyYeT06iT
20zUOKVqzID+aM4tCY9ASm0PsV382YoKQAP1nB8vyLOb5jN7oQn23PbtdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhQ7jjclm/jiNx/oF5oIOKDcbCKMB8GA1UdIwQY
MBaAFF/fUWyV3W6y0dndTg4DKGwZEfbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NjVkN2QtZDE3MC00ZGY3LWFjYzct
YmYzZjc5NTFjNWVhLzEvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82NjVkN2QtZDE3MC00ZGY3LWFjYzctYmYzZjc5NTFjNWVh
LzEvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAzDyeaQ
81KrlxwCucAgxwnBLaFFZBAdw6y29Icvn2AMvNn0aw9yZeWFbema0GQH93kD3n6N
ltgd+1JEY/+A4ghTwyORjST0fWuixy8KZabKpx/AG37VEBgTLPa0kqsaOS+zsbP6
TX7YEb3+G5NDWrDD3NJddgWB3a2thapY6lOiK7Zsq8/t8t9HZARkKFKkjuUvw8T7
VPNjgjo1Xzw26hxrH38MGs+Iwn7ShuLchJ3fCtLaoiOaxdUTE7C+v3pqpumZumey
gL+D+WP2VUO+SwXxpnm5rQdpXHbQr3zBZ+jbStV9lPr8qzjBsHkOXdOxy8CTuh/h
1oQge5t2NMNDPA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:29 2025 by rpki-client