Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: cuEJh2j8fwzsQKS4lpN2WeyWylaovefj0cIlgFlNlOY=
Subject key identifier: 99:17:1B:4E:1C:8D:2F:A1:71:EF:8B:0A:49:43:8D:5B:06:FF:7A:09
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 0194C4D1393E7F6A527BE1DE10455E048B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 0EE5
Signing time: Sun 02 Feb 2025 04:00:33 +0000
Manifest this update: Sun 02 Feb 2025 04:00:33 +0000
Manifest next update: Mon 03 Feb 2025 04:00:33 +0000
Files and hashes: 1: As6vwkWGZxruqh4uQQnrE0_5Wkc.roa (hash: +uKniDECqLf36Ns+Ibc2IgSroQKNM4uwIuCwreWx2Qo=)
2: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: BOq02TWwTWUBuk4kVfhWQu7cPH4U4dea5x4Kp7w4WLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:39:3e:7f:6a:52:7b:e1:de:10:45:5e:04:8b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: Feb 2 04:00:33 2025 GMT
Not After : Feb 3 04:00:33 2025 GMT
Subject: CN=99171b4e1c8d2fa171ef8b0a49438d5b06ff7a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:1c:b1:ac:e7:33:05:6f:a9:58:e2:63:20:
72:17:67:75:55:55:0a:72:06:5c:dc:3e:fa:a7:9d:
fd:30:e6:eb:07:d2:29:f6:be:b4:96:ef:42:7f:32:
2f:5d:92:09:b6:84:ac:c3:54:d6:93:34:02:39:07:
16:12:67:68:19:c9:a9:b3:f8:cb:8f:a0:5b:78:11:
ff:fb:bd:b7:80:b6:ef:c8:08:e1:da:c9:d1:51:5e:
13:56:1a:39:51:c5:6d:e9:3f:03:9b:2b:d0:8b:75:
5f:95:d0:37:fd:49:a8:08:7c:84:f9:1b:4e:3a:5a:
76:c8:07:65:df:05:d1:26:c1:fc:11:7d:84:9d:4a:
94:39:17:07:0d:e7:dc:ac:ab:6f:55:9d:00:a1:85:
b6:c5:ba:9c:b0:69:5a:15:b2:9f:ea:05:b2:4f:13:
b8:c4:99:72:ed:ab:07:65:ab:5c:bd:e9:5a:fd:2b:
6d:7a:b8:5e:96:fa:21:e9:d4:2f:c2:d2:34:46:bd:
c0:69:5e:aa:c6:ab:dc:4d:74:75:a3:31:54:70:66:
4a:1d:bf:c1:17:e4:e8:d4:9f:f7:54:f5:04:f0:4c:
75:3f:dd:39:9e:19:50:66:48:0b:c7:b2:eb:2f:0b:
48:35:dd:89:77:e1:43:4c:9b:94:f4:06:79:47:bc:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:17:1B:4E:1C:8D:2F:A1:71:EF:8B:0A:49:43:8D:5B:06:FF:7A:09
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c0:ab:33:88:32:b8:ff:83:53:57:c3:b4:a7:8c:76:f8:da:
9b:67:40:e0:8a:b3:a3:87:18:36:6d:ae:f5:03:6f:5c:51:62:
ab:be:39:c9:f7:7e:99:8e:06:76:89:c2:b0:3b:1e:84:2d:89:
51:6d:02:f1:25:c8:be:bb:ad:b1:0c:17:8b:9d:ea:d5:0e:b7:
50:ff:60:4f:90:0f:ef:73:a3:4b:9e:75:9b:03:e6:40:40:18:
8e:b0:62:1d:ca:07:cc:f0:41:2c:47:9c:0b:32:c4:49:35:85:
60:d2:40:cb:9f:61:14:ac:fd:56:9c:68:c9:ff:c9:a5:86:fb:
0b:8f:08:37:26:4a:36:b7:9e:84:d3:80:d7:68:ae:96:dc:13:
3a:5d:bf:d3:f8:2b:0c:25:93:52:3d:5f:7f:38:8a:01:c0:0f:
6e:bc:7c:06:57:48:20:c8:42:93:20:1f:36:2f:8a:80:e7:7e:
9c:4e:8a:a0:36:25:b7:58:07:a0:d7:e8:5c:c6:e6:07:3a:29:
33:83:80:ff:d8:eb:14:d8:ac:cf:bc:77:53:f2:ab:f9:cd:10:
fb:63:c9:c3:1c:2d:9c:09:28:9a:94:39:bd:a2:e6:c3:87:f3:
6f:d9:11:a5:d1:27:97:ee:28:c4:ce:56:62:74:64:e6:25:83:
55:e6:5f:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0Tk+f2pSe+HeEEVeBIsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTBlNGQxMTgyNTE1YzQ3ZGYzNmExMDAxYjdmNjgxZTJk
Y2Y0MTQwHhcNMjUwMjAyMDQwMDMzWhcNMjUwMjAzMDQwMDMzWjAzMTEwLwYDVQQD
Eyg5OTE3MWI0ZTFjOGQyZmExNzFlZjhiMGE0OTQzOGQ1YjA2ZmY3YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5McsaznMwVvqVjiYyByF2d1VVUK
cgZc3D76p539MObrB9Ip9r60lu9CfzIvXZIJtoSsw1TWkzQCOQcWEmdoGcmps/jL
j6BbeBH/+723gLbvyAjh2snRUV4TVho5UcVt6T8DmyvQi3VfldA3/UmoCHyE+RtO
Olp2yAdl3wXRJsH8EX2EnUqUORcHDefcrKtvVZ0AoYW2xbqcsGlaFbKf6gWyTxO4
xJly7asHZatcvela/Stterhelvoh6dQvwtI0Rr3AaV6qxqvcTXR1ozFUcGZKHb/B
F+To1J/3VPUE8Ex1P905nhlQZkgLx7LrLwtINd2Jd+FDTJuU9AZ5R7wU3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkXG04cjS+hce+LCklDjVsG/3oJMB8GA1UdIwQY
MBaAFCQQ5NEYJRXEffNqEAG39oHi3PQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMt
YTI5OWIwMjJkODRlLzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMtYTI5OWIwMjJkODRl
LzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMCrM4gy
uP+DU1fDtKeMdvjam2dA4Iqzo4cYNm2u9QNvXFFiq745yfd+mY4GdonCsDsehC2J
UW0C8SXIvrutsQwXi53q1Q63UP9gT5AP73OjS551mwPmQEAYjrBiHcoHzPBBLEec
CzLESTWFYNJAy59hFKz9Vpxoyf/JpYb7C48INyZKNreehNOA12iultwTOl2/0/gr
DCWTUj1ffziKAcAPbrx8BldIIMhCkyAfNi+KgOd+nE6KoDYlt1gHoNfoXMbmBzop
M4OA/9jrFNisz7x3U/Kr+c0Q+2PJwxwtnAkompQ5vaLmw4fzb9kRpdEnl+4oxM5W
YnRk5iWDVeZf3Q==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:04 2025 by rpki-client