Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json)
Hash identifier: GcDe2MQ2eTZQasErK6rYNgLdoPIdsBbk8VdalhN6qbg=
Subject key identifier: E1:BF:AB:9E:BA:89:3A:F5:81:0C:E8:69:3C:76:BC:0A:51:4E:6A:6D
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 019511A2C1592D167F45F814490DE4856044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 02:00:33 +0000
Manifest this update: Mon 17 Feb 2025 02:00:33 +0000
Manifest next update: Tue 18 Feb 2025 02:00:33 +0000
Files and hashes: 1: NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa (hash: FrMf82dKiOwRXnPTbOvJcW2xGJFytZk+POr0sPYgteE=)
2: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: z6KwyKTm2wRMtOq8k6JSNuGnyeW4dLgP6pFRL/0ZgAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:c1:59:2d:16:7f:45:f8:14:49:0d:e4:85:60:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Feb 17 02:00:33 2025 GMT
Not After : Feb 18 02:00:33 2025 GMT
Subject: CN=e1bfab9eba893af5810ce8693c76bc0a514e6a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d9:7e:99:14:3a:ab:ce:98:c0:83:2d:f5:c6:
c4:0c:7f:e2:c8:43:61:a9:84:a4:26:69:51:9a:b4:
c4:5a:c1:78:c5:f5:ed:26:ce:25:b9:56:03:e8:40:
83:59:73:cc:52:35:71:02:2a:3b:1d:22:8d:59:89:
28:11:88:55:6d:ff:55:05:7d:6b:81:3f:94:01:70:
9b:39:a8:ef:43:e0:70:eb:f5:e5:62:e6:79:39:e9:
ae:09:c7:be:de:db:95:04:cb:60:40:a6:8d:8e:8e:
6b:31:2c:18:5f:87:29:23:f0:db:de:6f:db:30:fa:
80:67:27:d2:48:f3:84:71:73:99:49:a9:e6:0d:32:
98:ac:5d:b4:f4:82:f1:a1:4e:5d:0c:8c:fd:5d:55:
84:c8:a2:9e:a3:b0:ac:8c:44:a9:87:6b:26:63:00:
e5:d8:2d:3d:af:12:e0:70:46:b0:ac:36:6e:61:f0:
93:cd:0c:50:8c:fe:00:92:75:6b:6e:4c:f2:c6:e8:
d4:3e:0b:53:ad:1e:51:3b:23:03:1d:88:4e:65:95:
56:55:e0:b9:a3:6d:f0:c3:67:b3:45:3e:c1:9c:4e:
e2:d9:d5:60:a6:24:3a:ed:5a:6f:54:cc:47:5e:5f:
d7:83:91:19:b9:b7:fe:c0:34:18:59:22:ae:a6:fd:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BF:AB:9E:BA:89:3A:F5:81:0C:E8:69:3C:76:BC:0A:51:4E:6A:6D
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b8:fe:36:b1:6a:6f:f8:38:c3:61:ea:e5:10:f4:3c:fd:6d:
c5:99:86:c7:d6:b1:3f:62:5f:dc:38:8f:8d:0a:3f:93:ff:ed:
0f:0d:af:a6:26:71:99:a4:14:5e:56:cf:84:77:b9:1d:9f:a1:
fb:f8:83:43:3a:b4:ae:bd:30:c1:36:08:53:04:60:e9:25:44:
a6:41:79:7d:ae:82:50:54:36:05:16:74:5b:9a:df:80:6b:94:
46:36:2e:f4:41:6b:29:28:e2:c0:15:28:85:b6:f1:43:cc:01:
71:0f:ac:cc:62:4f:b4:f4:6f:e7:96:89:70:01:b2:28:f3:44:
f4:be:23:9c:e5:71:15:8a:07:d8:05:d3:68:9b:62:ce:99:85:
2f:87:4c:a1:b6:77:1a:a2:de:17:01:25:54:09:6e:ab:4f:8e:
a6:17:4d:85:64:b0:db:f8:c6:cc:d9:bb:82:6d:cc:95:1d:31:
94:77:cf:d4:ac:08:7c:f6:e5:f9:1a:08:65:fa:c4:ec:e8:b6:
81:c1:3e:14:11:70:c9:2a:36:dd:c6:da:00:5c:6a:62:24:7b:
19:fb:8b:dc:81:51:fb:d3:8d:9a:be:6a:bb:a6:40:72:29:2f:
c1:0a:7e:a5:71:3c:82:09:4d:25:d9:a9:4a:84:6d:0e:05:32:
48:b7:42:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURosFZLRZ/RfgUSQ3khWBEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzBkZmMwYmI1Y2UwNmQ4NmRmMjRmZTNjYWE0YjRlZjM0
MTc4ZjQwHhcNMjUwMjE3MDIwMDMzWhcNMjUwMjE4MDIwMDMzWjAzMTEwLwYDVQQD
EyhlMWJmYWI5ZWJhODkzYWY1ODEwY2U4NjkzYzc2YmMwYTUxNGU2YTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69l+mRQ6q86YwIMt9cbEDH/iyENh
qYSkJmlRmrTEWsF4xfXtJs4luVYD6ECDWXPMUjVxAio7HSKNWYkoEYhVbf9VBX1r
gT+UAXCbOajvQ+Bw6/XlYuZ5OemuCce+3tuVBMtgQKaNjo5rMSwYX4cpI/Db3m/b
MPqAZyfSSPOEcXOZSanmDTKYrF209ILxoU5dDIz9XVWEyKKeo7CsjESph2smYwDl
2C09rxLgcEawrDZuYfCTzQxQjP4AknVrbkzyxujUPgtTrR5ROyMDHYhOZZVWVeC5
o23ww2ezRT7BnE7i2dVgpiQ67VpvVMxHXl/Xg5EZubf+wDQYWSKupv1szQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG/q566iTr1gQzoaTx2vApRTmptMB8GA1UdIwQY
MBaAFHRw38C7XOBtht8k/jyqS07zQXj0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhEZndMdGM0RzJHM3lULVBLcExUdk5CZVBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wYzYxMTEtNThmNy00Yjc1LWJjYWIt
OTBiYzQ2MjRjN2IyLzEvZEhEZndMdGM0RzJHM3lULVBLcExUdk5CZVBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8wYzYxMTEtNThmNy00Yjc1LWJjYWItOTBiYzQ2MjRjN2Iy
LzEvZEhEZndMdGM0RzJHM3lULVBLcExUdk5CZVBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7j+NrFq
b/g4w2Hq5RD0PP1txZmGx9axP2Jf3DiPjQo/k//tDw2vpiZxmaQUXlbPhHe5HZ+h
+/iDQzq0rr0wwTYIUwRg6SVEpkF5fa6CUFQ2BRZ0W5rfgGuURjYu9EFrKSjiwBUo
hbbxQ8wBcQ+szGJPtPRv55aJcAGyKPNE9L4jnOVxFYoH2AXTaJtizpmFL4dMobZ3
GqLeFwElVAluq0+OphdNhWSw2/jGzNm7gm3MlR0xlHfP1KwIfPbl+RoIZfrE7Oi2
gcE+FBFwySo23cbaAFxqYiR7GfuL3IFR+9ONmr5qu6ZAcikvwQp+pXE8gglNJdmp
SoRtDgUySLdCqw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:55 2025 by rpki-client