Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
File: rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft (raw, json)
Hash identifier: WJv73SN3P4p9V013ErQMHdV/9/r6oFiPThim1rTPNEM=
Subject key identifier: 3A:C6:FB:93:A3:3A:E7:A8:A4:E6:5A:B7:E6:57:E5:A7:ED:D0:7A:CB
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 019511A28DE607582538A2CB4AC15B12C4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
Manifest number: 146F
Signing time: Mon 17 Feb 2025 02:00:20 +0000
Manifest this update: Mon 17 Feb 2025 02:00:20 +0000
Manifest next update: Tue 18 Feb 2025 02:00:20 +0000
Files and hashes: 1: 1xef8JB14kgVdYbFNM-Oq6W7NWA.roa (hash: 2TgMpFsN8snCYIhnDbb3K1R/JLwOpv09B4vLRv33njY=)
2: 30aIeplMe8B5nuWPNxNW6K-OtBY.roa (hash: 3pRxuzSCfGIU8i4yLQxNrHj04RZktWd0aRH2mX3pOUo=)
3: 5R2_zC5O_WNYOAGlu7by2_fhzYo.roa (hash: Eq+hBI8YGdr0edeJFDWardc1U5Cf7U1rPC+h2snaoOY=)
4: mG-NGr5UJw8Bdsm31xr0LARp3LM.roa (hash: Ez+x2KZ41CLnIqO9c7EUA1U/u9pzX46TWaq6peZ65/4=)
5: nqdZW8VS3cJABsENIPnwko2Hihc.roa (hash: IhzETIut1wHzF58gkob1Irj0rHur1kgwouWb5+riuAI=)
6: nrBcJclJWWQmSFgHdkkN2rl4iMo.roa (hash: LHzeWYsmA5iX5RkIBuodpJrYuHeqFeRrX4/36Bp1azQ=)
7: rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl (hash: WKpkBNumxcVrzacgfHg/NKlyKBY34QEXOFqAPMo5vuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:8d:e6:07:58:25:38:a2:cb:4a:c1:5b:12:c4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Feb 17 02:00:20 2025 GMT
Not After : Feb 18 02:00:20 2025 GMT
Subject: CN=3ac6fb93a33ae7a8a4e65ab7e657e5a7edd07acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:77:fd:29:bc:91:19:c9:a6:f5:60:cd:a4:
59:c5:12:f3:f2:b4:67:08:56:c1:a8:ad:d5:be:e0:
39:40:27:93:20:cc:c3:be:00:ea:43:0d:f1:3d:1a:
d3:56:29:4e:7d:df:bd:a7:dc:be:7a:e5:97:9d:14:
0f:cb:29:42:a0:58:41:22:05:e4:64:6e:27:b4:ae:
36:03:95:fa:41:db:5a:d6:b6:50:3b:d3:59:7e:ca:
90:49:fe:9b:d9:80:9a:b3:6b:cc:ae:db:05:c3:9a:
a5:ef:b9:db:4c:10:df:3f:cc:16:d0:3f:44:36:82:
01:d8:d4:1a:00:ad:2d:4d:81:fd:15:86:dd:23:7d:
c1:e7:f2:41:ee:c2:e7:e7:6a:0f:65:01:39:fa:f9:
3a:9f:b5:15:ef:1e:28:a4:22:d8:f2:8b:8d:82:b7:
16:a5:26:ab:f9:49:a0:36:83:77:7f:26:21:48:7a:
11:13:8f:26:58:21:bd:e8:20:5c:6c:e8:70:d7:6f:
ce:e2:b9:e5:d8:32:6f:d7:80:92:8a:1c:12:2a:de:
96:67:a7:a3:06:21:f4:00:27:95:1b:7b:db:6b:e3:
32:3f:d1:f8:81:de:48:43:df:ea:f9:de:80:58:65:
23:0f:6b:eb:d9:59:63:fd:58:f6:c9:5a:5f:95:98:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C6:FB:93:A3:3A:E7:A8:A4:E6:5A:B7:E6:57:E5:A7:ED:D0:7A:CB
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f6:5d:20:29:37:6e:7e:d7:de:11:7b:e7:76:94:c6:45:37:
e7:cd:7b:26:01:81:79:4e:d3:ec:0f:d3:eb:fb:26:ba:bb:50:
b7:d9:d1:de:9e:ad:b2:69:ce:27:ff:0e:ad:0f:20:76:f3:a7:
22:26:63:a4:d7:46:2c:56:e5:e3:a1:22:99:c0:b1:3b:5c:a5:
a7:92:4e:6e:b9:78:1d:8b:4f:c5:cd:4b:90:bc:be:bc:2a:d8:
50:c5:dc:80:4c:52:aa:3b:fa:4b:e3:41:a8:a5:52:c9:cf:a2:
77:2d:36:10:d7:1e:5a:48:71:ef:6a:37:1d:81:98:47:fc:f1:
a0:1b:5d:94:af:0d:86:9c:19:07:8c:79:83:3b:5e:c0:1b:6c:
2f:23:f4:13:e6:42:6a:3f:18:81:93:94:61:c7:7e:04:35:19:
73:bf:1a:63:6d:ab:8c:3e:8c:aa:18:d4:33:be:68:2c:10:26:
eb:82:0f:c5:d8:9f:e8:74:d3:57:60:f1:d2:18:72:26:1d:3b:
1d:a5:6e:15:83:e5:2f:91:dc:2e:b3:19:4b:85:29:25:75:61:
ee:b4:b4:ca:6e:51:41:6d:83:d9:3a:61:35:03:6d:82:82:23:
1f:83:e3:d3:8b:da:53:3d:b7:1d:85:0e:bb:1a:d0:45:98:bc:
11:cc:9f:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURoo3mB1glOKLLSsFbEsTHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlN2Y3NDdkZjVmMjQzNTMxNTRkYzRkNGJmNzBkMmRkY2I1
M2U5MDAwHhcNMjUwMjE3MDIwMDIwWhcNMjUwMjE4MDIwMDIwWjAzMTEwLwYDVQQD
EygzYWM2ZmI5M2EzM2FlN2E4YTRlNjVhYjdlNjU3ZTVhN2VkZDA3YWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovN3/Sm8kRnJpvVgzaRZxRLz8rRn
CFbBqK3VvuA5QCeTIMzDvgDqQw3xPRrTVilOfd+9p9y+euWXnRQPyylCoFhBIgXk
ZG4ntK42A5X6Qdta1rZQO9NZfsqQSf6b2YCas2vMrtsFw5ql77nbTBDfP8wW0D9E
NoIB2NQaAK0tTYH9FYbdI33B5/JB7sLn52oPZQE5+vk6n7UV7x4opCLY8ouNgrcW
pSar+UmgNoN3fyYhSHoRE48mWCG96CBcbOhw12/O4rnl2DJv14CSihwSKt6WZ6ej
BiH0ACeVG3vba+MyP9H4gd5IQ9/q+d6AWGUjD2vr2Vlj/Vj2yVpflZge7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrG+5OjOueopOZat+ZX5aft0HrLMB8GA1UdIwQY
MBaAFK5/dH318kNTFU3E1L9w0t3LU+kAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2Et
YzZmMWU2YWM5YmE5LzEvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2EtYzZmMWU2YWM5YmE5
LzEvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtvZdICk3
bn7X3hF753aUxkU35817JgGBeU7T7A/T6/smurtQt9nR3p6tsmnOJ/8OrQ8gdvOn
IiZjpNdGLFbl46EimcCxO1ylp5JObrl4HYtPxc1LkLy+vCrYUMXcgExSqjv6S+NB
qKVSyc+idy02ENceWkhx72o3HYGYR/zxoBtdlK8NhpwZB4x5gztewBtsLyP0E+ZC
aj8YgZOUYcd+BDUZc78aY22rjD6MqhjUM75oLBAm64IPxdif6HTTV2Dx0hhyJh07
HaVuFYPlL5HcLrMZS4UpJXVh7rS0ym5RQW2D2TphNQNtgoIjH4Pj04vaUz23HYUO
uxrQRZi8EcyfXg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:12 2025 by rpki-client