Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: 1RMvP6L2R+xtofR/udBrg/Okq9veh4vBLJaxHvWfaic=
Subject key identifier: E5:8E:15:77:28:BD:CF:DC:11:08:6A:AC:2C:CF:D8:24:03:B1:BA:C7
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 01951210D54F3039D8E96D811A067A6ED7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 145D
Signing time: Mon 17 Feb 2025 04:00:47 +0000
Manifest this update: Mon 17 Feb 2025 04:00:47 +0000
Manifest next update: Tue 18 Feb 2025 04:00:47 +0000
Files and hashes: 1: 95gfeORrzFU1baOm9FNRF4z-Awc.roa (hash: yu0lodJztF5C/Epqr7ypdXxVzEpgYNXlQQQ9uDXoMnU=)
2: bZrVS8WuW53ASxE4okDBpBOCwh0.roa (hash: w2PEwykH39C/1+UmhN82v6h+HaE/QVQsyCE9ab/AZNI=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: LDqj/z/2dFzyxx1V+8EaA+JGRH3GHsSfelcD6BL8mSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:d5:4f:30:39:d8:e9:6d:81:1a:06:7a:6e:d7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Feb 17 04:00:47 2025 GMT
Not After : Feb 18 04:00:47 2025 GMT
Subject: CN=e58e157728bdcfdc11086aac2ccfd82403b1bac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ad:fc:2c:7c:a9:65:8d:80:82:f6:d2:eb:72:
53:3a:bf:34:e8:af:0f:fc:a1:7e:08:75:03:c0:0d:
68:a0:67:1d:35:fe:3b:18:cb:1a:19:16:98:5e:9f:
cd:43:4b:7a:46:af:f2:ca:be:d7:0b:32:2b:fd:2f:
9b:02:08:cf:39:ad:45:53:cb:7b:58:10:0c:13:e3:
b5:74:46:99:ef:6a:f3:04:17:23:5f:37:fd:58:66:
7e:ba:d2:4f:b2:30:a9:57:de:6a:51:cf:ec:5b:0a:
0e:52:2a:be:ce:09:aa:99:ae:ff:40:3a:1c:97:4f:
a6:53:a5:e6:63:89:e9:5c:af:b3:e6:51:d9:5d:60:
30:4a:fe:ad:87:ac:4b:6a:23:9b:53:ed:67:de:0e:
bc:08:48:c0:a6:8f:34:86:59:ef:f1:66:61:b2:10:
68:41:31:cc:06:5e:bf:bc:1f:71:2c:f0:45:27:ce:
15:3f:3d:eb:7e:16:f9:66:1f:04:51:c7:90:07:70:
4c:be:39:ac:f1:fe:b4:23:44:ce:bd:2e:e2:a1:4f:
ae:9d:cb:4a:ad:64:cb:3d:f7:0e:6a:0f:c8:0b:c9:
58:4a:25:3b:1a:29:60:bd:e0:27:35:d7:02:05:47:
4d:8c:42:98:73:8f:81:40:2d:85:0b:23:5d:7a:3b:
bc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8E:15:77:28:BD:CF:DC:11:08:6A:AC:2C:CF:D8:24:03:B1:BA:C7
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:28:d4:3d:af:b8:8c:96:0a:09:31:3f:3c:7a:85:3e:83:8e:
af:d4:ec:64:09:8a:88:dd:df:f8:9e:c2:f2:97:42:55:dc:56:
33:26:bc:c5:22:a5:86:92:cd:dc:18:e1:8e:ba:bc:f6:55:f3:
2d:6d:bc:34:a5:b3:c4:b8:9f:56:73:2a:1f:28:16:f4:40:82:
09:5b:e7:52:9d:2b:22:09:22:55:da:10:93:9c:78:f3:65:13:
b2:d0:89:c8:10:ec:b1:23:2d:bd:55:62:a7:b2:5b:e9:7e:48:
1a:73:8e:aa:76:16:58:78:25:cf:cc:07:26:54:e0:93:12:41:
8a:c4:99:76:50:b8:58:e6:a6:bd:16:90:1a:b8:ba:d5:8d:5b:
7b:ce:78:cf:ff:5a:4c:90:de:99:8c:a1:5b:5a:ed:7a:db:d2:
42:58:13:10:40:ef:1e:d0:3c:cd:b1:98:70:88:5a:31:c0:f3:
ab:aa:65:5d:46:8a:41:80:ec:ce:ac:93:71:ba:ad:b5:c6:65:
6b:03:1c:e2:cd:79:c2:45:91:da:0d:cc:a6:33:98:cf:ed:14:
e1:3c:09:73:31:d2:b1:c9:6d:c9:05:d1:60:ec:75:61:99:5e:
b7:66:39:24:e5:3d:3e:17:ae:f1:aa:61:d8:5b:d2:24:dc:75:
64:e8:9c:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSENVPMDnY6W2BGgZ6bteuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2
YWU4NzMwHhcNMjUwMjE3MDQwMDQ3WhcNMjUwMjE4MDQwMDQ3WjAzMTEwLwYDVQQD
EyhlNThlMTU3NzI4YmRjZmRjMTEwODZhYWMyY2NmZDgyNDAzYjFiYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK38LHypZY2AgvbS63JTOr806K8P
/KF+CHUDwA1ooGcdNf47GMsaGRaYXp/NQ0t6Rq/yyr7XCzIr/S+bAgjPOa1FU8t7
WBAME+O1dEaZ72rzBBcjXzf9WGZ+utJPsjCpV95qUc/sWwoOUiq+zgmqma7/QDoc
l0+mU6XmY4npXK+z5lHZXWAwSv6th6xLaiObU+1n3g68CEjApo80hlnv8WZhshBo
QTHMBl6/vB9xLPBFJ84VPz3rfhb5Zh8EUceQB3BMvjms8f60I0TOvS7ioU+unctK
rWTLPfcOag/IC8lYSiU7GilgveAnNdcCBUdNjEKYc4+BQC2FCyNdeju8wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWOFXcovc/cEQhqrCzP2CQDsbrHMB8GA1UdIwQY
MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt
NDlhNjU0NTc4NmU2LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2
LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtijUPa+4
jJYKCTE/PHqFPoOOr9TsZAmKiN3f+J7C8pdCVdxWMya8xSKlhpLN3Bjhjrq89lXz
LW28NKWzxLifVnMqHygW9ECCCVvnUp0rIgkiVdoQk5x482UTstCJyBDssSMtvVVi
p7Jb6X5IGnOOqnYWWHglz8wHJlTgkxJBisSZdlC4WOamvRaQGri61Y1be854z/9a
TJDemYyhW1rtetvSQlgTEEDvHtA8zbGYcIhaMcDzq6plXUaKQYDszqyTcbqttcZl
awMc4s15wkWR2g3MpjOYz+0U4TwJczHSscltyQXRYOx1YZlet2Y5JOU9Pheu8aph
2FvSJNx1ZOicWA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:48 2025 by rpki-client