Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File: 5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier: IBhFrwFJv63Ahvtx65QTWRDt7ztcnaALShVM5mBPLkc=
Subject key identifier: 63:5F:DF:73:68:4F:ED:F6:70:73:02:65:A2:65:7D:5D:7D:BB:47:9C
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer: /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial: 019511A28C4B9480A20E72D1A34684ECCE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number: 0430
Signing time: Mon 17 Feb 2025 02:00:20 +0000
Manifest this update: Mon 17 Feb 2025 02:00:20 +0000
Manifest next update: Tue 18 Feb 2025 02:00:20 +0000
Files and hashes: 1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: wUpCTKGYHExCu7bGo8MTu3xKe4ievqKZjINKMJEkup4=)
2: DhNK6wzjByDnasFkDiVozXApAMA.roa (hash: axPPgHJK+DsZDTes1Z8jvmiFkJ86vZLUMhnI7D0ebHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:8c:4b:94:80:a2:0e:72:d1:a3:46:84:ec:ce:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
Validity
Not Before: Feb 17 02:00:20 2025 GMT
Not After : Feb 18 02:00:20 2025 GMT
Subject: CN=635fdf73684fedf670730265a2657d5d7dbb479c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:78:6c:b3:fd:f9:8e:d8:8e:60:d1:ff:38:
d3:36:39:7d:91:34:2a:56:a4:1a:3d:af:2d:fc:07:
71:b5:70:a7:e7:af:66:32:6e:58:85:52:55:6c:4e:
59:e9:75:d7:51:39:94:46:8a:f7:b0:d2:15:95:35:
87:00:ed:5e:0f:94:a4:02:80:0f:d0:1f:9b:7d:bc:
9b:b1:81:c5:0d:b0:b3:41:85:a0:bb:8b:d1:be:5b:
0f:f4:50:54:ec:f7:44:f4:1f:ce:2a:19:d4:38:8f:
91:b6:7d:ad:86:6e:fa:f8:fd:14:d5:e1:f1:ff:c6:
9a:14:b8:51:c3:54:67:c9:fb:b1:60:9a:38:fa:c1:
1d:38:f3:60:0b:ed:dd:51:88:ab:55:bb:65:58:b0:
1a:57:32:79:57:f3:e6:bf:31:15:dc:ff:87:dd:53:
92:cf:a7:0e:8e:a4:6d:4e:b7:ea:f3:54:19:b9:e4:
8e:0e:4d:f7:a2:9f:77:eb:20:4b:13:f3:19:cf:df:
ae:2b:d1:de:7c:9e:2d:74:4d:92:8a:5f:f9:7d:2f:
63:f5:e7:90:3c:fd:ba:88:70:ca:20:1c:77:be:ac:
f9:ae:ba:05:e3:8a:2f:d8:cf:32:b8:36:aa:fa:b0:
00:93:ac:8c:d1:db:b8:de:1c:80:9d:14:2c:35:cb:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5F:DF:73:68:4F:ED:F6:70:73:02:65:A2:65:7D:5D:7D:BB:47:9C
X509v3 Authority Key Identifier:
keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d0:53:c5:37:53:56:f1:b3:97:59:b1:92:15:2d:7c:ec:bc:
89:7b:4a:50:2a:1e:46:e1:57:41:02:a3:e5:88:90:e1:7b:d1:
09:c1:89:a5:96:6d:c5:90:10:c1:ee:29:76:97:da:a5:6c:3c:
13:a3:0b:c9:81:01:4d:5e:76:c5:bb:4d:57:20:1b:b3:b5:9f:
6b:b6:11:6b:08:0b:a9:ed:a3:84:a0:14:70:fc:45:2c:e2:db:
33:08:a3:95:1b:3d:a6:ec:f5:54:82:78:72:99:8b:5a:eb:95:
02:f9:60:51:9d:ca:16:55:e4:78:ea:31:3f:e6:82:cd:14:79:
10:cf:ca:79:50:63:1f:34:47:3f:23:a1:bf:27:30:1c:b1:44:
ad:bd:00:6c:54:e4:5c:24:12:24:63:68:fb:63:03:c4:2f:f5:
da:f3:72:93:fe:73:5a:9e:d7:95:62:e1:9c:2e:6b:d3:b8:17:
0f:57:8f:75:be:50:8d:af:fe:5b:48:6a:9a:6b:fd:0e:76:20:
f8:ed:c0:65:4f:83:0b:0a:5c:9b:34:3a:85:54:5a:75:2c:e5:
b2:5b:f6:09:c4:6b:d6:b3:f7:28:38:81:d3:e1:cc:fe:60:ca:
b5:93:78:04:29:ff:fa:77:8f:b1:d4:44:01:23:b6:7a:5c:33:
f4:da:4f:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURooxLlICiDnLRo0aE7M5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODBhNTYxMDExMmRmMjAzOTg3ZjMyZjBlNWUxNWFkMzVl
NzEwZDIwHhcNMjUwMjE3MDIwMDIwWhcNMjUwMjE4MDIwMDIwWjAzMTEwLwYDVQQD
Eyg2MzVmZGY3MzY4NGZlZGY2NzA3MzAyNjVhMjY1N2Q1ZDdkYmI0NzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn094bLP9+Y7YjmDR/zjTNjl9kTQq
VqQaPa8t/AdxtXCn569mMm5YhVJVbE5Z6XXXUTmURor3sNIVlTWHAO1eD5SkAoAP
0B+bfbybsYHFDbCzQYWgu4vRvlsP9FBU7PdE9B/OKhnUOI+Rtn2thm76+P0U1eHx
/8aaFLhRw1RnyfuxYJo4+sEdOPNgC+3dUYirVbtlWLAaVzJ5V/PmvzEV3P+H3VOS
z6cOjqRtTrfq81QZueSODk33op936yBLE/MZz9+uK9HefJ4tdE2Sil/5fS9j9eeQ
PP26iHDKIBx3vqz5rroF44ov2M8yuDaq+rAAk6yM0du43hyAnRQsNcsv3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNf33NoT+32cHMCZaJlfV19u0ecMB8GA1UdIwQY
MBaAFOaApWEBEt8gOYfzLw5eFa015xDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDBkMjUtZjQ0NC00ZjYwLWIxNjIt
ZDE1MDJmN2NmMjM0LzEvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iNDBkMjUtZjQ0NC00ZjYwLWIxNjItZDE1MDJmN2NmMjM0
LzEvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltBTxTdT
VvGzl1mxkhUtfOy8iXtKUCoeRuFXQQKj5YiQ4XvRCcGJpZZtxZAQwe4pdpfapWw8
E6MLyYEBTV52xbtNVyAbs7Wfa7YRawgLqe2jhKAUcPxFLOLbMwijlRs9puz1VIJ4
cpmLWuuVAvlgUZ3KFlXkeOoxP+aCzRR5EM/KeVBjHzRHPyOhvycwHLFErb0AbFTk
XCQSJGNo+2MDxC/12vNyk/5zWp7XlWLhnC5r07gXD1ePdb5Qja/+W0hqmmv9DnYg
+O3AZU+DCwpcmzQ6hVRadSzlslv2CcRr1rP3KDiB0+HM/mDKtZN4BCn/+nePsdRE
ASO2elwz9NpPDQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:35 2025 by rpki-client