Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: 1vFxbIQkHRyV/vc5cXOW/K0oyNf5vCwjPepcl41Rb64=
Subject key identifier: D8:7A:B8:9F:46:CF:20:97:CC:B3:18:67:AA:08:79:31:A5:03:6F:99
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 0194C38805636C715CD81E883DF1DDA70E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 03D9
Signing time: Sat 01 Feb 2025 22:00:58 +0000
Manifest this update: Sat 01 Feb 2025 22:00:58 +0000
Manifest next update: Sun 02 Feb 2025 22:00:58 +0000
Files and hashes: 1: NdI4eek8jOjsWz1VECAlKFSlieY.roa (hash: KdGGoQzPMHoGucfApjzpne/EBBMfi+F0OYkvglIdCSE=)
2: OEhtadn0DUNS84bfQrg1WlzSzCQ.roa (hash: HF+3GH/+d8FVR6v6MNdyNa599Q4jMft4g5RBqFNqn7s=)
3: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: 3uk8S0nfsssiY5p5nC9EFumRAoM0UXYLMtlSqJikXhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:05:63:6c:71:5c:d8:1e:88:3d:f1:dd:a7:0e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Feb 1 22:00:58 2025 GMT
Not After : Feb 2 22:00:58 2025 GMT
Subject: CN=d87ab89f46cf2097ccb31867aa087931a5036f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:53:26:98:1e:9e:c5:c2:f8:89:32:59:2f:3f:
59:28:79:d5:89:98:f5:d8:dc:f2:c6:31:d0:ae:33:
a8:96:7a:36:a2:4b:ed:f5:26:50:c1:44:fa:4d:61:
d8:8a:86:c8:56:a3:bb:46:4f:f5:73:77:7d:45:db:
f6:bb:45:1b:3d:58:55:ba:c1:f1:0e:11:ed:4e:54:
b6:aa:19:18:b3:4b:cb:b2:51:70:27:c7:46:46:1c:
a6:ba:07:06:79:7d:5d:dd:50:b9:b6:08:03:34:22:
c4:dc:7f:8b:7b:95:22:7f:16:4c:1c:ab:1f:fb:12:
52:18:bf:51:f9:e3:6e:22:19:1f:74:ca:71:df:1b:
a0:de:7b:35:ce:bb:6c:24:ec:12:17:37:a9:de:a4:
f7:c9:a3:3b:55:35:76:73:68:df:1a:0a:8b:fd:2b:
cf:74:ef:e1:3a:86:c4:34:14:af:10:7f:82:d3:10:
2b:0d:02:f6:5a:a2:14:6c:e6:24:d5:5c:98:a8:fe:
c2:e2:ba:9a:14:e3:3b:6c:e0:fb:0c:66:e7:de:9a:
ab:44:44:00:a7:05:ac:c4:b2:90:bd:4d:4b:e3:aa:
85:85:18:51:de:c0:80:3a:c1:2c:ce:4d:cf:f2:77:
2a:ab:7f:f9:98:a2:63:d0:47:3a:bf:d2:1e:cb:75:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7A:B8:9F:46:CF:20:97:CC:B3:18:67:AA:08:79:31:A5:03:6F:99
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:66:ed:fc:9d:7e:fb:54:2c:06:00:99:a6:78:92:ad:b3:bf:
aa:20:5a:57:be:ce:aa:24:fe:e9:c3:9e:89:16:b1:62:01:1d:
ae:6e:1c:24:73:14:fd:b1:e9:50:01:9f:d3:a2:36:15:3f:99:
c4:22:55:8f:d5:09:91:fa:05:f3:75:af:e2:e9:c8:a5:d1:4b:
bd:f9:44:77:31:56:ea:e8:37:bc:8c:0c:7d:4e:e0:de:9b:4b:
2b:fb:fc:1d:1d:b4:5a:02:cc:5f:47:20:00:ef:bd:44:5b:51:
94:59:d5:c3:b5:01:d0:3e:5f:0f:f9:e0:b7:d6:03:b1:e8:14:
1d:24:5b:18:a8:ea:49:86:13:2d:d4:2f:ee:9c:66:0d:dd:1c:
ef:18:cc:1b:65:4f:4b:1e:2b:5b:34:67:03:a0:df:61:9b:04:
f2:da:dc:09:df:4c:9c:57:b5:39:d7:56:d7:5d:8d:a5:6f:53:
9d:69:46:38:f6:e8:2a:3e:96:53:57:76:50:65:58:9f:37:c0:
19:08:f4:2f:c5:dc:ae:10:a1:ba:c7:65:3f:bd:d8:58:67:26:
81:56:a2:7e:dc:6a:de:78:3e:41:ba:ed:df:6c:2d:82:0e:8b:
8c:68:a2:fe:b5:db:1f:c5:d6:f8:ff:f9:25:4b:1e:2c:1c:4b:
23:c0:cb:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDiAVjbHFc2B6IPfHdpw4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMjljMmY1NzIzZjI5ZWM1ZTBlNzkzZTczYWI1NWI4YTFj
ODZiYTkwHhcNMjUwMjAxMjIwMDU4WhcNMjUwMjAyMjIwMDU4WjAzMTEwLwYDVQQD
EyhkODdhYjg5ZjQ2Y2YyMDk3Y2NiMzE4NjdhYTA4NzkzMWE1MDM2Zjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VMmmB6excL4iTJZLz9ZKHnViZj1
2NzyxjHQrjOolno2okvt9SZQwUT6TWHYiobIVqO7Rk/1c3d9Rdv2u0UbPVhVusHx
DhHtTlS2qhkYs0vLslFwJ8dGRhymugcGeX1d3VC5tggDNCLE3H+Le5UifxZMHKsf
+xJSGL9R+eNuIhkfdMpx3xug3ns1zrtsJOwSFzep3qT3yaM7VTV2c2jfGgqL/SvP
dO/hOobENBSvEH+C0xArDQL2WqIUbOYk1VyYqP7C4rqaFOM7bOD7DGbn3pqrREQA
pwWsxLKQvU1L46qFhRhR3sCAOsEszk3P8ncqq3/5mKJj0Ec6v9Iey3XQfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh6uJ9GzyCXzLMYZ6oIeTGlA2+ZMB8GA1UdIwQY
MBaAFHwpwvVyPynsXg55PnOrVbihyGupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUt
ZjE5NTIyM2QwM2IzLzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUtZjE5NTIyM2QwM2Iz
LzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGbt/J1+
+1QsBgCZpniSrbO/qiBaV77OqiT+6cOeiRaxYgEdrm4cJHMU/bHpUAGf06I2FT+Z
xCJVj9UJkfoF83Wv4unIpdFLvflEdzFW6ug3vIwMfU7g3ptLK/v8HR20WgLMX0cg
AO+9RFtRlFnVw7UB0D5fD/ngt9YDsegUHSRbGKjqSYYTLdQv7pxmDd0c7xjMG2VP
Sx4rWzRnA6DfYZsE8trcCd9MnFe1OddW112NpW9TnWlGOPboKj6WU1d2UGVYnzfA
GQj0L8XcrhChusdlP73YWGcmgVaiftxq3ng+Qbrt32wtgg6LjGii/rXbH8XW+P/5
JUseLBxLI8DLZg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:54 2025 by rpki-client