Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier: LFbm7UKJdraq1XKNaJDXeHRkhRe+V+Eo7trvRXqKVD0=
Subject key identifier: 12:02:A8:EF:B0:88:2A:96:2A:33:78:62:0A:C0:3B:FD:91:38:95:D8
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial: 01951134FEED055F0B484A3F4BA6D523BE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number: 0C1B
Signing time: Mon 17 Feb 2025 00:00:40 +0000
Manifest this update: Mon 17 Feb 2025 00:00:40 +0000
Manifest next update: Tue 18 Feb 2025 00:00:40 +0000
Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: 9mKLWR2/ASIojwEW4xXAfj4/d6ilIvc/jqjhUWCk714=)
2: GO5PY0agBoKkma7NteMSdFbX44k.roa (hash: jwM1qR7KbSYH5wU03Z7/YrapkXuYuB0WPqYmk8E3608=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:fe:ed:05:5f:0b:48:4a:3f:4b:a6:d5:23:be:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Validity
Not Before: Feb 17 00:00:40 2025 GMT
Not After : Feb 18 00:00:40 2025 GMT
Subject: CN=1202a8efb0882a962a3378620ac03bfd913895d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:b7:74:28:3a:3b:f7:d4:df:03:b4:ab:c5:
86:d3:74:b3:0f:69:c3:ff:e2:0c:45:b5:f1:e5:92:
b0:8a:1a:38:5e:78:cd:43:3a:ca:89:bf:34:67:23:
77:5d:a0:15:32:b6:6f:3e:5e:3f:cc:92:0c:ed:7a:
6a:eb:07:98:55:39:a8:4f:42:67:6b:25:5c:78:2e:
9c:f4:2f:b1:64:4a:cc:1f:ed:d5:ff:3b:04:fb:d7:
73:a8:6f:77:e1:2e:9f:e5:03:4d:3f:31:30:6c:55:
a3:84:bb:8c:99:d4:28:db:ad:92:a7:d7:7c:e5:05:
79:5a:81:c2:11:cd:cc:2b:eb:44:2c:a2:f8:67:fc:
97:d0:26:63:92:98:2c:55:cd:cd:24:68:55:a9:60:
50:33:56:28:da:c4:a5:92:78:4d:bd:c8:cd:dc:65:
20:08:72:83:3b:37:1f:5f:28:b1:3b:20:76:cd:7c:
40:a1:c8:08:c6:ca:d2:f8:82:85:a1:ba:36:63:62:
fa:1e:6f:e5:84:77:38:16:77:48:1d:52:9b:4f:69:
4f:3e:3e:c3:c5:6b:a6:fe:42:bd:af:cb:9d:81:dd:
f8:f6:d9:1d:e3:73:4e:5f:63:7a:ae:fd:a8:3a:8a:
69:aa:1a:8c:94:58:7a:0b:88:86:f0:3c:14:a5:61:
17:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:02:A8:EF:B0:88:2A:96:2A:33:78:62:0A:C0:3B:FD:91:38:95:D8
X509v3 Authority Key Identifier:
keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e1:ec:b3:26:3a:82:f0:27:c5:05:6a:16:fb:69:6f:95:6d:
3b:10:d2:f7:da:d7:7c:3e:db:aa:3d:cd:57:fe:35:d2:c0:58:
21:a9:05:8d:97:9a:9d:48:0e:94:cf:a2:5a:f5:36:31:04:92:
2b:3a:04:29:8a:46:0b:bb:59:7d:66:ec:b3:17:b9:be:0e:c7:
40:45:9a:80:7b:98:51:7f:e0:9e:c3:54:7f:c3:7d:99:69:33:
2b:d2:15:c0:6a:1c:8e:0f:97:ab:4b:e6:f9:bf:e8:a2:eb:1b:
81:86:92:6c:16:d1:b3:07:15:43:9b:96:e3:83:6b:69:6a:e7:
10:80:11:1f:d5:ab:38:a5:b5:3d:72:86:65:b9:4d:a2:53:41:
1e:d8:29:b4:fa:0a:db:66:9c:7e:f0:4f:83:6a:37:bf:16:0c:
6d:c7:a6:33:3d:e1:df:26:7f:09:ec:f4:99:ae:50:00:c6:7e:
62:34:db:9b:e8:c5:34:01:c2:6f:26:4f:a8:b6:79:79:24:12:
7c:f0:db:25:12:8d:d7:54:f0:e5:16:7b:42:e6:33:8a:af:a6:
d9:ad:31:36:e0:97:f3:1e:c6:3e:12:5f:71:a8:78:34:61:05:
8d:81:71:99:ec:ff:fa:3d:68:21:3a:4d:27:f4:3d:6a:88:66:
83:d6:c1:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNP7tBV8LSEo/S6bVI75LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNzM5YzBjMDRhNDI3MWI1YWFkNjJjMTE5MjI5ZTE4ZmFk
YTVmZDMwHhcNMjUwMjE3MDAwMDQwWhcNMjUwMjE4MDAwMDQwWjAzMTEwLwYDVQQD
EygxMjAyYThlZmIwODgyYTk2MmEzMzc4NjIwYWMwM2JmZDkxMzg5NWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBu3dCg6O/fU3wO0q8WG03SzD2nD
/+IMRbXx5ZKwiho4XnjNQzrKib80ZyN3XaAVMrZvPl4/zJIM7Xpq6weYVTmoT0Jn
ayVceC6c9C+xZErMH+3V/zsE+9dzqG934S6f5QNNPzEwbFWjhLuMmdQo262Sp9d8
5QV5WoHCEc3MK+tELKL4Z/yX0CZjkpgsVc3NJGhVqWBQM1Yo2sSlknhNvcjN3GUg
CHKDOzcfXyixOyB2zXxAocgIxsrS+IKFobo2Y2L6Hm/lhHc4FndIHVKbT2lPPj7D
xWum/kK9r8udgd349tkd43NOX2N6rv2oOoppqhqMlFh6C4iG8DwUpWEXCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBICqO+wiCqWKjN4YgrAO/2ROJXYMB8GA1UdIwQY
MBaAFO9znAwEpCcbWq1iwRkinhj62l/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUt
OTllZTRhODk4NWMzLzEvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUtOTllZTRhODk4NWMz
LzEvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+HssyY6
gvAnxQVqFvtpb5VtOxDS99rXfD7bqj3NV/410sBYIakFjZeanUgOlM+iWvU2MQSS
KzoEKYpGC7tZfWbssxe5vg7HQEWagHuYUX/gnsNUf8N9mWkzK9IVwGocjg+Xq0vm
+b/oousbgYaSbBbRswcVQ5uW44NraWrnEIARH9WrOKW1PXKGZblNolNBHtgptPoK
22acfvBPg2o3vxYMbcemMz3h3yZ/Cez0ma5QAMZ+YjTbm+jFNAHCbyZPqLZ5eSQS
fPDbJRKN11Tw5RZ7QuYziq+m2a0xNuCX8x7GPhJfcah4NGEFjYFxmez/+j1oITpN
J/Q9aohmg9bBzA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:30 2025 by rpki-client