Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: O1qRX+gMxR8RzR014/Icn2Pe9m0XPFIuRL2m4TJ04kM=
Subject key identifier: 35:CA:A1:C1:2D:26:89:74:01:08:69:77:77:98:4F:DC:E3:EE:B6:D6
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 019510FDB1DB7EE74999816F6C77A90AC2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 0CCB
Signing time: Sun 16 Feb 2025 23:00:16 +0000
Manifest this update: Sun 16 Feb 2025 23:00:16 +0000
Manifest next update: Mon 17 Feb 2025 23:00:16 +0000
Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=)
2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: dwFAZwYW8HzYw4tbYM0Ae0rbJ15BQ5iiMyuEJvrcHL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:b1:db:7e:e7:49:99:81:6f:6c:77:a9:0a:c2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Feb 16 23:00:16 2025 GMT
Not After : Feb 17 23:00:16 2025 GMT
Subject: CN=35caa1c12d2689740108697777984fdce3eeb6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:de:d5:87:2c:7c:60:6c:d3:f0:6f:95:9d:
ba:07:68:f2:3f:f4:53:10:5c:61:ec:0b:85:68:ad:
90:7d:41:43:fb:19:fe:8b:7f:7c:8c:05:7a:d5:75:
1b:89:72:e0:50:3b:3c:b1:df:71:67:16:b9:79:19:
e4:8e:3a:68:59:5f:5d:5b:72:a6:2e:c3:df:01:17:
21:88:bc:f0:1b:90:6a:a2:03:2c:59:ff:84:03:2e:
c2:ce:d0:d2:bf:f1:bf:02:aa:fa:62:b8:7c:4b:a9:
23:11:23:a8:86:03:18:64:c3:07:07:18:99:d5:9a:
08:83:26:c4:c6:f2:f0:d1:f5:4a:95:f4:aa:30:b9:
71:99:6d:eb:3b:bf:fd:6b:c4:c6:b9:73:6a:a0:e0:
86:49:42:52:8f:05:88:0e:4e:e7:03:cc:49:49:84:
26:34:8a:6a:d6:ab:27:41:88:ca:c1:08:c2:c8:40:
58:43:ec:bf:01:64:18:bc:04:03:e5:c9:62:59:06:
e7:d5:0d:4e:44:f2:a0:80:e3:fb:6e:d2:0f:df:9f:
bf:24:a0:60:9b:64:30:46:1d:72:6e:c3:0f:65:4c:
02:90:cf:89:c7:69:96:74:16:6f:20:ee:be:b9:97:
09:46:2c:e5:d9:cf:dc:ac:48:55:e5:cf:67:c0:0b:
cd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:A1:C1:2D:26:89:74:01:08:69:77:77:98:4F:DC:E3:EE:B6:D6
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:71:0c:65:6f:d2:9b:ce:82:c3:27:5a:e0:00:c6:1d:ac:99:
46:3d:ba:25:db:27:ca:10:b1:75:14:48:00:f1:7b:74:aa:d8:
8c:6f:31:94:38:d3:f7:f3:dc:25:2f:89:8c:ff:25:b9:ff:b3:
30:1f:de:e5:2c:48:3f:ae:85:e9:be:ea:03:70:61:e6:6d:79:
7f:fa:74:1d:9e:cf:6f:cc:bc:10:73:44:51:7e:d2:69:71:2b:
78:a8:fd:3f:ff:32:61:d9:19:aa:83:8a:0d:89:01:fc:11:c2:
cf:12:5a:53:5c:7d:31:20:b5:19:47:43:c6:f6:fa:00:6b:25:
94:6e:92:fd:81:73:fc:68:b0:1d:10:22:63:a8:e6:cf:a0:be:
d7:4d:00:5d:be:3c:b2:5b:0d:24:43:03:52:a0:23:78:1c:19:
c8:7a:ef:53:be:be:e2:bb:65:28:46:9f:c4:70:e5:f0:71:41:
d0:a4:9c:45:fd:30:cc:2b:0f:f0:c8:8d:59:e6:26:82:2a:b6:
72:d8:d4:89:b1:6e:76:72:f4:24:10:7c:ab:3c:7f:d1:d9:fb:
7d:1d:8c:8c:af:14:5e:12:4b:48:4a:2e:70:de:1e:09:00:31:
85:9f:30:9c:13:38:fe:3e:77:69:d0:a3:08:04:d9:bd:35:ec:
60:24:db:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/bHbfudJmYFvbHepCsLvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YzM2MzNhY2JmNjNjMmVjYjEwMjA1YjliOTI1ODBhYmI0
ZWI4N2UwHhcNMjUwMjE2MjMwMDE2WhcNMjUwMjE3MjMwMDE2WjAzMTEwLwYDVQQD
EygzNWNhYTFjMTJkMjY4OTc0MDEwODY5Nzc3Nzk4NGZkY2UzZWViNmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEze1YcsfGBs0/BvlZ26B2jyP/RT
EFxh7AuFaK2QfUFD+xn+i398jAV61XUbiXLgUDs8sd9xZxa5eRnkjjpoWV9dW3Km
LsPfARchiLzwG5BqogMsWf+EAy7CztDSv/G/Aqr6Yrh8S6kjESOohgMYZMMHBxiZ
1ZoIgybExvLw0fVKlfSqMLlxmW3rO7/9a8TGuXNqoOCGSUJSjwWIDk7nA8xJSYQm
NIpq1qsnQYjKwQjCyEBYQ+y/AWQYvAQD5cliWQbn1Q1ORPKggOP7btIP35+/JKBg
m2QwRh1ybsMPZUwCkM+Jx2mWdBZvIO6+uZcJRizl2c/crEhV5c9nwAvNGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXKocEtJol0AQhpd3eYT9zj7rbWMB8GA1UdIwQY
MBaAFLnDYzrL9jwuyxAgW5uSWAq7Trh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUt
OTllY2E1NjUxMDIzLzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUtOTllY2E1NjUxMDIz
LzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnEMZW/S
m86Cwyda4ADGHayZRj26JdsnyhCxdRRIAPF7dKrYjG8xlDjT9/PcJS+JjP8luf+z
MB/e5SxIP66F6b7qA3Bh5m15f/p0HZ7Pb8y8EHNEUX7SaXEreKj9P/8yYdkZqoOK
DYkB/BHCzxJaU1x9MSC1GUdDxvb6AGsllG6S/YFz/GiwHRAiY6jmz6C+100AXb48
slsNJEMDUqAjeBwZyHrvU76+4rtlKEafxHDl8HFB0KScRf0wzCsP8MiNWeYmgiq2
ctjUibFudnL0JBB8qzx/0dn7fR2MjK8UXhJLSEoucN4eCQAxhZ8wnBM4/j53adCj
CATZvTXsYCTb1g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:16 2025 by rpki-client