Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
File: 63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json)
Hash identifier: po4aX39LSZkYpLl2TI6kK29Hu2YASbWXOcv6+kG+bH8=
Subject key identifier: F2:DB:EB:C0:1F:A2:1F:94:EA:12:A8:01:E2:31:BE:2C:58:3D:AB:DE
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial: 0195116C289E98CD0F55FEF683091ACDE63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
Manifest number: 02B1
Signing time: Mon 17 Feb 2025 01:00:55 +0000
Manifest this update: Mon 17 Feb 2025 01:00:55 +0000
Manifest next update: Tue 18 Feb 2025 01:00:55 +0000
Files and hashes: 1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: LsnUnluUQJY1Hjojoq2534WDn8B3fBXr+Ka4KP0dL84=)
2: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (hash: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:28:9e:98:cd:0f:55:fe:f6:83:09:1a:cd:e6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Validity
Not Before: Feb 17 01:00:55 2025 GMT
Not After : Feb 18 01:00:55 2025 GMT
Subject: CN=f2dbebc01fa21f94ea12a801e231be2c583dabde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:2d:11:63:c1:95:5a:1f:b9:7b:e0:b9:c8:
a1:39:05:c2:9f:81:c9:20:78:ad:52:66:1f:70:c6:
c3:a9:11:3b:25:a9:7a:b7:af:e6:21:10:74:4c:94:
03:59:af:c5:d0:1a:b3:40:c1:85:c7:b3:a1:01:7f:
0e:d0:e9:97:1c:2b:b3:3a:eb:47:01:16:fb:93:5b:
82:3e:69:28:c0:b9:3e:18:80:0d:b8:f4:63:8b:f7:
b7:c6:52:c9:b9:1c:6b:d8:df:50:db:c9:fc:d9:97:
c4:75:d9:f4:62:6b:ea:ad:37:d9:55:5e:86:58:eb:
1e:90:41:e8:68:fd:e8:e1:e6:71:d4:c3:30:bb:79:
17:64:c3:f3:32:5b:a3:12:b5:d0:d5:6d:c7:17:2f:
d4:59:d6:16:f0:d0:63:a3:e3:bd:73:30:71:a6:63:
c1:c4:fc:79:f7:26:d7:f0:c6:18:af:ff:7c:1f:c3:
7c:5e:f4:c9:de:29:24:89:1f:03:46:f0:ab:2a:6b:
4e:81:20:82:01:08:f3:fc:05:b9:68:6f:88:33:ec:
e0:d4:10:d9:b9:46:ba:c8:43:67:81:d0:de:07:63:
e9:c9:d2:ec:67:15:be:6a:9e:40:17:66:60:6a:3d:
2b:97:1e:51:ff:5e:15:13:93:73:56:23:63:8a:73:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DB:EB:C0:1F:A2:1F:94:EA:12:A8:01:E2:31:BE:2C:58:3D:AB:DE
X509v3 Authority Key Identifier:
keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c2:a5:d9:88:3e:6c:81:dd:19:40:55:88:63:80:08:c1:54:
48:8e:80:12:a0:ca:48:ae:78:7d:f5:67:fc:79:2f:4e:16:a1:
97:67:84:58:fd:35:07:9e:2f:67:24:5c:a9:7a:01:db:ba:af:
e0:3c:9c:f9:db:be:8c:33:df:e3:8c:96:3f:d1:e1:56:66:b7:
52:82:13:79:12:6b:df:93:6f:d9:09:e3:23:10:5a:8f:50:34:
e1:c1:69:55:00:8a:c2:60:c1:c1:b7:90:9c:23:40:e8:d3:3a:
5b:8a:11:11:b4:48:39:a1:86:41:cd:31:9b:f8:cb:45:bb:d3:
16:2a:68:d4:ef:70:a6:1b:46:96:10:80:30:c0:09:90:59:79:
fe:e0:7b:71:4a:28:df:21:c6:d3:d8:80:12:55:ad:da:ba:27:
2a:99:c8:f3:f1:4f:da:63:01:4a:54:23:4d:c3:a6:83:9b:65:
98:2a:5a:98:2a:a6:73:42:30:33:8d:4a:06:f3:20:c6:49:02:
89:2c:5d:6a:38:63:5b:36:1d:2b:a8:3a:d6:81:5a:80:b7:04:
10:ae:24:3a:d1:be:3c:f9:06:67:9c:b4:8b:54:41:3c:a4:32:
8c:3b:bb:b1:4b:85:d9:6c:3a:9c:3b:21:8f:c6:c4:92:50:1e:
27:43:8e:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURbCiemM0PVf72gwkazeY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViN2Y4Y2UyMTU4YzNkZjk1MDUzOTE3MWQ5ZWM1MmRmZDUx
NTYzZTQwHhcNMjUwMjE3MDEwMDU1WhcNMjUwMjE4MDEwMDU1WjAzMTEwLwYDVQQD
EyhmMmRiZWJjMDFmYTIxZjk0ZWExMmE4MDFlMjMxYmUyYzU4M2RhYmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIwtEWPBlVofuXvgucihOQXCn4HJ
IHitUmYfcMbDqRE7Jal6t6/mIRB0TJQDWa/F0BqzQMGFx7OhAX8O0OmXHCuzOutH
ARb7k1uCPmkowLk+GIANuPRji/e3xlLJuRxr2N9Q28n82ZfEddn0YmvqrTfZVV6G
WOsekEHoaP3o4eZx1MMwu3kXZMPzMlujErXQ1W3HFy/UWdYW8NBjo+O9czBxpmPB
xPx59ybX8MYYr/98H8N8XvTJ3ikkiR8DRvCrKmtOgSCCAQjz/AW5aG+IM+zg1BDZ
uUa6yENngdDeB2PpydLsZxW+ap5AF2Zgaj0rlx5R/14VE5NzViNjinMhCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLb68Afoh+U6hKoAeIxvixYPaveMB8GA1UdIwQY
MBaAFOt/jOIVjD35UFORcdnsUt/VFWPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQt
MzY2OGYwMDA4NjQ4LzEvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQtMzY2OGYwMDA4NjQ4
LzEvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsKl2Yg+
bIHdGUBViGOACMFUSI6AEqDKSK54ffVn/HkvThahl2eEWP01B54vZyRcqXoB27qv
4Dyc+du+jDPf44yWP9HhVma3UoITeRJr35Nv2QnjIxBaj1A04cFpVQCKwmDBwbeQ
nCNA6NM6W4oREbRIOaGGQc0xm/jLRbvTFipo1O9wphtGlhCAMMAJkFl5/uB7cUoo
3yHG09iAElWt2ronKpnI8/FP2mMBSlQjTcOmg5tlmCpamCqmc0IwM41KBvMgxkkC
iSxdajhjWzYdK6g61oFagLcEEK4kOtG+PPkGZ5y0i1RBPKQyjDu7sUuF2Ww6nDsh
j8bEklAeJ0OOAw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:33 2025 by rpki-client