Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
File: I06fdccyb3ZciWbC7cAKmCpep_A.mft (raw, json)
Hash identifier: ln9TE+P43As5IOkrujioA8mpMhaia422CAn51gpl0W8=
Subject key identifier: E4:52:66:E8:C3:01:9E:C2:6A:7A:31:08:DE:E8:AE:F2:FA:36:ED:38
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 0195127E4DDFEA0E467BD638B415FC19AE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
Manifest number: 11C5
Signing time: Mon 17 Feb 2025 06:00:21 +0000
Manifest this update: Mon 17 Feb 2025 06:00:21 +0000
Manifest next update: Tue 18 Feb 2025 06:00:21 +0000
Files and hashes: 1: I06fdccyb3ZciWbC7cAKmCpep_A.crl (hash: N+KV3Jq4P799nqGrJ5zk0Zzbar/yqZimgQwS33lQxa4=)
2: _abtUqDmMxDQ2RmQqkGL8N8DjTE.roa (hash: CRHU3YWrzulAziPCk+beyoXQoDHAl8oOT3cyglDGbAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:4d:df:ea:0e:46:7b:d6:38:b4:15:fc:19:ae:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Feb 17 06:00:21 2025 GMT
Not After : Feb 18 06:00:21 2025 GMT
Subject: CN=e45266e8c3019ec26a7a3108dee8aef2fa36ed38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:f2:82:82:ef:d4:c0:a4:65:c5:48:67:14:
9f:55:be:cf:15:43:df:18:7f:21:15:cd:90:72:72:
92:1f:7f:7c:9e:b7:09:a1:ac:6d:f3:4e:ac:da:c2:
5f:38:23:5a:23:2b:b9:da:0b:9b:b3:a4:46:b1:24:
87:2a:ce:20:36:a6:83:46:74:fb:8f:20:e0:52:3d:
de:72:86:0d:b4:94:44:6c:dd:b2:49:16:60:9b:73:
54:48:be:9e:92:c1:20:3e:b9:0a:83:df:dc:97:1f:
29:11:21:23:65:d0:7b:03:0e:d0:af:85:de:e9:6b:
68:e0:c9:c5:f8:27:fc:dc:d1:70:c3:f2:68:f2:0f:
ad:b3:a4:18:72:5f:70:2b:ce:f5:4d:7c:5b:23:01:
74:a5:64:a8:fc:de:a5:8c:96:63:dd:32:7d:e8:bd:
66:38:f1:8e:45:0f:1f:12:63:29:1b:51:9f:c2:f9:
74:98:59:22:2d:c1:80:78:ee:d7:45:9e:50:e3:be:
97:bb:4f:99:f3:a1:73:f3:f2:a4:cc:87:50:e5:2c:
2d:a7:4c:51:6e:10:f7:f7:81:45:63:87:98:63:0c:
65:63:9b:10:21:7a:04:a6:4d:6d:9d:26:f6:85:d8:
fb:7f:18:e1:34:dd:6e:4a:6f:96:9a:70:19:2d:f7:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:52:66:E8:C3:01:9E:C2:6A:7A:31:08:DE:E8:AE:F2:FA:36:ED:38
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:01:e4:2d:df:66:ad:4d:88:d9:e7:0b:52:ff:92:86:58:b0:
15:7f:45:bb:7b:42:b7:af:d1:68:6b:c9:5f:86:8e:84:a3:de:
72:18:a5:a8:72:c4:32:88:54:9d:83:f4:8a:87:9e:91:e0:7b:
26:e6:55:29:ae:83:e7:82:48:97:ca:2b:88:cf:50:5c:b6:b5:
c3:17:40:56:68:35:13:4e:38:67:c3:2d:b9:e5:82:9e:4e:f6:
a4:59:9a:75:07:d1:48:75:da:10:48:50:95:6e:60:a5:01:da:
57:6d:ca:05:8f:76:1e:50:3d:93:ce:bf:a9:ab:d5:7f:5c:c1:
4b:9b:73:eb:20:40:5d:71:8f:14:46:32:50:68:39:14:bf:06:
f5:ee:f6:3b:04:e1:44:c7:2a:ca:0c:00:cf:a5:3e:05:58:16:
6f:e3:71:de:06:5c:53:69:f1:7f:dd:d6:f9:99:4f:39:69:8c:
7b:8f:d6:2f:72:ae:06:e1:48:63:b5:12:69:82:ab:61:25:01:
e2:f7:89:a9:70:76:ef:b0:b7:71:1b:35:5f:83:e3:60:09:21:
20:86:82:ed:8c:c2:2b:4d:7a:04:ea:b4:79:b6:2b:6d:9e:aa:
a7:45:71:5e:68:26:39:f3:bc:d7:b3:26:63:ae:87:04:b0:11:
4d:8b:79:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfk3f6g5Ge9Y4tBX8Ga5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGU5Zjc1YzczMjZmNzY1Yzg5NjZjMmVkYzAwYTk4MmE1
ZWE3ZjAwHhcNMjUwMjE3MDYwMDIxWhcNMjUwMjE4MDYwMDIxWjAzMTEwLwYDVQQD
EyhlNDUyNjZlOGMzMDE5ZWMyNmE3YTMxMDhkZWU4YWVmMmZhMzZlZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9nygoLv1MCkZcVIZxSfVb7PFUPf
GH8hFc2QcnKSH398nrcJoaxt806s2sJfOCNaIyu52gubs6RGsSSHKs4gNqaDRnT7
jyDgUj3ecoYNtJREbN2ySRZgm3NUSL6eksEgPrkKg9/clx8pESEjZdB7Aw7Qr4Xe
6Wto4MnF+Cf83NFww/Jo8g+ts6QYcl9wK871TXxbIwF0pWSo/N6ljJZj3TJ96L1m
OPGORQ8fEmMpG1Gfwvl0mFkiLcGAeO7XRZ5Q476Xu0+Z86Fz8/KkzIdQ5Swtp0xR
bhD394FFY4eYYwxlY5sQIXoEpk1tnSb2hdj7fxjhNN1uSm+WmnAZLffIEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORSZujDAZ7CanoxCN7orvL6Nu04MB8GA1UdIwQY
MBaAFCNOn3XHMm92XIlmwu3ACpgqXqfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQt
NzdkZWUyZDc5YWU0LzEvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQtNzdkZWUyZDc5YWU0
LzEvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgHkLd9m
rU2I2ecLUv+ShliwFX9Fu3tCt6/RaGvJX4aOhKPechilqHLEMohUnYP0ioeekeB7
JuZVKa6D54JIl8oriM9QXLa1wxdAVmg1E044Z8MtueWCnk72pFmadQfRSHXaEEhQ
lW5gpQHaV23KBY92HlA9k86/qavVf1zBS5tz6yBAXXGPFEYyUGg5FL8G9e72OwTh
RMcqygwAz6U+BVgWb+Nx3gZcU2nxf93W+ZlPOWmMe4/WL3KuBuFIY7USaYKrYSUB
4veJqXB277C3cRs1X4PjYAkhIIaC7YzCK016BOq0ebYrbZ6qp0VxXmgmOfO817Mm
Y66HBLARTYt5tg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:25 2025 by rpki-client