Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: PiXgMnnjaKK9O2G9q/MH7SDo0Se3AMomkycUxGuNFjQ=
Subject key identifier: 14:28:0D:1B:FE:6B:DD:DC:F5:FA:5C:A5:21:8D:98:61:B4:93:BE:12
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 0194C463AF139C038A0D0334E5355D112938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 116F
Signing time: Sun 02 Feb 2025 02:00:54 +0000
Manifest this update: Sun 02 Feb 2025 02:00:54 +0000
Manifest next update: Mon 03 Feb 2025 02:00:54 +0000
Files and hashes: 1: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: RUUncAxcufnAktbzxf2JQJaoQDdIQQ+5/z4nSu5ybDc=)
2: vchHJIw7jZ4Wv-xZM5fwqPOc5MI.roa (hash: FaIi1AdW4pumZbm44kEE9unKxXXirWba//1QTHPOeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:af:13:9c:03:8a:0d:03:34:e5:35:5d:11:29:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Feb 2 02:00:54 2025 GMT
Not After : Feb 3 02:00:54 2025 GMT
Subject: CN=14280d1bfe6bdddcf5fa5ca5218d9861b493be12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:c5:d1:c1:7d:78:99:e1:59:3c:4f:75:4a:
b2:98:cb:58:24:6b:8a:21:2d:13:5b:d2:5f:bf:4c:
c4:3c:5b:2e:99:7c:db:ec:40:c5:65:06:20:bc:97:
d5:23:94:9b:30:f8:94:d5:b6:6d:10:92:94:2f:a6:
e7:53:82:fa:25:2b:90:7b:c8:6f:4e:6e:a9:a4:81:
25:53:d3:7b:4d:78:2e:ba:b7:1c:9a:06:28:21:4f:
34:89:f7:53:66:79:44:13:6c:01:02:dc:18:e5:92:
db:61:b9:d0:5c:00:30:99:a4:d4:23:61:ce:f4:0b:
64:3c:f5:be:1e:ba:fd:55:9a:5a:4c:5a:6e:18:f7:
41:63:cf:a3:13:8c:59:d7:6c:f5:07:b0:08:f5:aa:
37:54:eb:3b:c3:a9:88:14:5e:b5:7f:bd:c3:22:00:
d6:39:a7:a1:d1:4a:c7:40:c9:ad:cf:8a:72:1d:23:
e6:98:b7:fb:38:d6:57:cb:03:b1:38:a9:34:87:e2:
f8:e1:7f:38:54:d8:c5:68:d4:f0:65:55:be:f0:6a:
b7:fb:bf:cb:de:87:0d:6f:43:f2:a1:46:fa:07:89:
5b:f5:ed:b7:71:75:77:e9:d0:7e:75:07:56:0a:9d:
7d:10:82:9b:3a:be:20:2b:29:0e:6a:6e:4c:53:b4:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:28:0D:1B:FE:6B:DD:DC:F5:FA:5C:A5:21:8D:98:61:B4:93:BE:12
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f4:28:b1:69:49:0f:06:dc:e3:3b:be:74:b5:77:9f:68:37:
ef:a6:75:e7:f2:bc:35:da:60:28:d1:56:59:49:73:ed:54:b1:
cb:00:63:ec:b4:2e:c2:0b:95:49:56:d9:2c:68:4a:5d:c0:dd:
91:57:6b:f6:c3:99:77:3b:3b:6b:bc:17:be:5b:dd:3b:38:c2:
6d:51:c6:af:66:15:dd:f8:ca:7c:b6:3a:f9:65:e0:cc:03:a7:
94:8d:59:4c:1e:5f:a2:ef:95:28:b5:3b:e4:a1:e9:09:cc:db:
15:cf:9c:4d:6f:87:2e:5c:5f:dd:10:5f:10:f7:ce:1c:c6:bb:
02:93:4b:ac:c5:2c:bb:74:a8:18:bc:f8:cd:ee:ee:4f:8e:7b:
7d:0d:7d:43:2d:0b:80:1a:90:b4:29:82:e1:37:fd:2c:b8:75:
f6:40:99:97:0c:d4:ef:57:2d:05:53:e2:10:66:da:9d:5f:44:
b8:a3:60:3d:5c:02:d2:6b:01:9e:39:bf:0d:ed:86:8b:80:6a:
d7:10:fb:63:da:6d:b2:56:c5:d7:a2:be:3b:39:1e:21:1e:ba:
8f:0a:8f:73:aa:d2:7d:58:7c:84:85:18:50:a1:fd:49:4d:24:
22:7a:d0:b5:a1:90:c8:8e:14:8d:36:90:82:eb:eb:5d:22:55:
52:8e:59:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY68TnAOKDQM05TVdESk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4N2FhYzcxZjE3ZWYwMzNjYjY1MzY3OTUzMzhmZGM3YmMw
ZjIyNjMwHhcNMjUwMjAyMDIwMDU0WhcNMjUwMjAzMDIwMDU0WjAzMTEwLwYDVQQD
EygxNDI4MGQxYmZlNmJkZGRjZjVmYTVjYTUyMThkOTg2MWI0OTNiZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugDF0cF9eJnhWTxPdUqymMtYJGuK
IS0TW9Jfv0zEPFsumXzb7EDFZQYgvJfVI5SbMPiU1bZtEJKUL6bnU4L6JSuQe8hv
Tm6ppIElU9N7TXguurccmgYoIU80ifdTZnlEE2wBAtwY5ZLbYbnQXAAwmaTUI2HO
9AtkPPW+Hrr9VZpaTFpuGPdBY8+jE4xZ12z1B7AI9ao3VOs7w6mIFF61f73DIgDW
Oaeh0UrHQMmtz4pyHSPmmLf7ONZXywOxOKk0h+L44X84VNjFaNTwZVW+8Gq3+7/L
3ocNb0PyoUb6B4lb9e23cXV36dB+dQdWCp19EIKbOr4gKykOam5MU7Q/IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQoDRv+a93c9fpcpSGNmGG0k74SMB8GA1UdIwQY
MBaAFHh6rHHxfvAzy2U2eVM4/ce8DyJjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84NWRkYWUtNTRhNy00ZTdiLTk2ZGEt
ZDEyODY3YjQ2NzMzLzEvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84NWRkYWUtNTRhNy00ZTdiLTk2ZGEtZDEyODY3YjQ2NzMz
LzEvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvQosWlJ
Dwbc4zu+dLV3n2g376Z15/K8NdpgKNFWWUlz7VSxywBj7LQuwguVSVbZLGhKXcDd
kVdr9sOZdzs7a7wXvlvdOzjCbVHGr2YV3fjKfLY6+WXgzAOnlI1ZTB5fou+VKLU7
5KHpCczbFc+cTW+HLlxf3RBfEPfOHMa7ApNLrMUsu3SoGLz4ze7uT457fQ19Qy0L
gBqQtCmC4Tf9LLh19kCZlwzU71ctBVPiEGbanV9EuKNgPVwC0msBnjm/De2Gi4Bq
1xD7Y9ptslbF16K+OzkeIR66jwqPc6rSfVh8hIUYUKH9SU0kInrQtaGQyI4UjTaQ
guvrXSJVUo5Z2A==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:50 2025 by rpki-client