Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier: HpSV17oYHEK8jXfqc8WSIu+4ZgKEWFxynnBUxr9RAtg=
Subject key identifier: A4:2C:79:36:95:CF:1D:3D:87:2E:47:31:F5:59:C7:89:67:BA:DB:22
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial: 0195121085FBD10638339B490CF801C23440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number: 06A8
Signing time: Mon 17 Feb 2025 04:00:27 +0000
Manifest this update: Mon 17 Feb 2025 04:00:27 +0000
Manifest next update: Tue 18 Feb 2025 04:00:27 +0000
Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: rzlP1dh9AAy/s3rY/4gZ2XW72EeUeSGcyYEoWv9MAaA=)
2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:85:fb:d1:06:38:33:9b:49:0c:f8:01:c2:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Validity
Not Before: Feb 17 04:00:27 2025 GMT
Not After : Feb 18 04:00:27 2025 GMT
Subject: CN=a42c793695cf1d3d872e4731f559c78967badb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:96:fe:7f:cf:8b:16:eb:9d:f7:47:de:79:
af:39:92:cb:b2:41:da:0e:e1:19:ae:57:a0:c3:ed:
02:ce:34:59:02:f3:80:3a:60:43:a1:ad:3a:2a:1e:
65:ee:15:a7:66:2d:5f:60:75:b6:28:63:7e:72:c2:
39:80:ef:e1:71:ac:5c:ce:4a:02:59:e4:22:0a:45:
be:91:db:b0:88:96:3b:8a:77:28:fa:fd:8f:67:aa:
84:3b:6f:7c:f1:f9:8f:64:1d:a2:2a:27:e5:93:4a:
c7:12:ed:30:cd:d3:71:6e:b3:0f:59:80:57:a3:a2:
00:dd:d9:1b:0a:77:99:97:6a:43:5f:28:f1:f6:83:
88:80:8b:fc:83:63:6d:ca:c7:a4:21:cd:d8:e8:4f:
62:2b:f1:38:95:94:a3:9d:70:2c:84:df:e4:34:e5:
7b:5e:ba:2e:0b:d0:f2:cc:7f:43:91:8f:86:a5:4a:
e8:81:49:67:3f:6f:2c:e9:c1:28:13:a9:f8:19:3c:
b1:bf:96:89:4d:9c:95:32:c2:2a:61:1c:bc:33:e1:
83:6f:77:ff:35:bc:3b:be:83:d8:7a:37:55:22:23:
f0:44:bd:8b:d2:5c:69:25:a0:e5:cb:b3:4a:26:98:
d3:05:bc:ce:e7:82:43:2a:b2:61:23:3e:8b:e3:c5:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2C:79:36:95:CF:1D:3D:87:2E:47:31:F5:59:C7:89:67:BA:DB:22
X509v3 Authority Key Identifier:
keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a9:de:a6:9b:13:3d:99:5d:cf:c5:af:6a:ff:e2:a5:d8:48:
1f:13:c2:1e:7e:0c:9b:e7:d1:ee:6b:9e:3c:75:86:67:0c:36:
6a:e8:e4:b9:ad:9e:fd:34:ee:03:af:0b:ed:11:ec:5f:17:4c:
3d:1d:35:35:a8:f3:f7:a7:b8:48:bc:b6:46:14:de:73:b2:96:
5b:22:58:ee:33:d1:ff:60:d7:7d:8d:fd:93:4b:51:04:eb:bf:
ff:c6:e2:ef:17:c5:7a:26:df:07:17:6e:8f:7b:38:5f:10:40:
5f:41:29:84:97:73:45:97:8e:3f:98:89:28:45:c9:39:45:0d:
6f:4b:f4:b0:bb:98:77:58:ee:0f:15:92:8d:9d:de:47:00:3e:
7b:9f:cf:6d:fa:d2:3a:ce:03:02:e2:e1:21:a0:bb:59:60:ae:
a1:bd:d0:3a:de:f8:6c:b5:60:26:1f:84:63:c7:b7:2b:6f:e1:
5c:dc:f3:8c:16:da:66:cd:af:dc:7b:f8:39:86:ee:26:cf:8c:
5c:3a:19:f0:91:b6:f2:9c:5b:cc:c5:73:01:39:6f:58:04:21:
47:d0:5d:13:6c:80:43:67:1c:f9:d1:b8:48:f9:45:45:6f:b6:
0d:b5:fc:c3:cd:f0:89:ca:57:8f:b7:12:32:01:52:f0:3f:9c:
4d:31:30:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEIX70QY4M5tJDPgBwjRAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGIyOTFiMTZmNmQ5NmM4MGFkN2QzMTI5MmY1NjBkNGZh
YWViZjAwHhcNMjUwMjE3MDQwMDI3WhcNMjUwMjE4MDQwMDI3WjAzMTEwLwYDVQQD
EyhhNDJjNzkzNjk1Y2YxZDNkODcyZTQ3MzFmNTU5Yzc4OTY3YmFkYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/qW/n/PixbrnfdH3nmvOZLLskHa
DuEZrlegw+0CzjRZAvOAOmBDoa06Kh5l7hWnZi1fYHW2KGN+csI5gO/hcaxczkoC
WeQiCkW+kduwiJY7inco+v2PZ6qEO2988fmPZB2iKiflk0rHEu0wzdNxbrMPWYBX
o6IA3dkbCneZl2pDXyjx9oOIgIv8g2NtysekIc3Y6E9iK/E4lZSjnXAshN/kNOV7
XrouC9DyzH9DkY+GpUrogUlnP28s6cEoE6n4GTyxv5aJTZyVMsIqYRy8M+GDb3f/
Nbw7voPYejdVIiPwRL2L0lxpJaDly7NKJpjTBbzO54JDKrJhIz6L48UKmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQseTaVzx09hy5HMfVZx4lnutsiMB8GA1UdIwQY
MBaAFNSLKRsW9tlsgK19MSkvVg1PquvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4Nzgt
N2Y4YmZhYzczOTc3LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4NzgtN2Y4YmZhYzczOTc3
LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKneppsT
PZldz8Wvav/ipdhIHxPCHn4Mm+fR7muePHWGZww2aujkua2e/TTuA68L7RHsXxdM
PR01Najz96e4SLy2RhTec7KWWyJY7jPR/2DXfY39k0tRBOu//8bi7xfFeibfBxdu
j3s4XxBAX0EphJdzRZeOP5iJKEXJOUUNb0v0sLuYd1juDxWSjZ3eRwA+e5/PbfrS
Os4DAuLhIaC7WWCuob3QOt74bLVgJh+EY8e3K2/hXNzzjBbaZs2v3Hv4OYbuJs+M
XDoZ8JG28pxbzMVzATlvWAQhR9BdE2yAQ2cc+dG4SPlFRW+2DbX8w83wicpXj7cS
MgFS8D+cTTEw4A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:05 2025 by rpki-client