Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
File: pSNBhTlzXL2bC6PCeew1V9cmJlo.mft (raw, json)
Hash identifier: l8HTom69lKDYwqfZmMcTHRtmZBFBN+B5ZNMirfbxyqU=
Subject key identifier: 05:6F:14:8A:06:76:C1:32:AA:0C:DC:25:23:EF:89:5E:44:4F:35:47
Authority key identifier: A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
Certificate issuer: /CN=a523418539735cbd9b0ba3c279ec3557d726265a
Certificate serial: 019512479E828776714CD88AFCF9F673FADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
Manifest number: 120D
Signing time: Mon 17 Feb 2025 05:00:38 +0000
Manifest this update: Mon 17 Feb 2025 05:00:38 +0000
Manifest next update: Tue 18 Feb 2025 05:00:38 +0000
Files and hashes: 1: 8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa (hash: Ub5Ka+iibeNMtT5d651FP9y1wedTUH3xQXSWP3OHFL0=)
2: pSNBhTlzXL2bC6PCeew1V9cmJlo.crl (hash: WI+/mEoQ3Z9ZHziNH0kjYVmswoM7pp016fjfRgWHSOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:9e:82:87:76:71:4c:d8:8a:fc:f9:f6:73:fa:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a523418539735cbd9b0ba3c279ec3557d726265a
Validity
Not Before: Feb 17 05:00:38 2025 GMT
Not After : Feb 18 05:00:38 2025 GMT
Subject: CN=056f148a0676c132aa0cdc2523ef895e444f3547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:2f:19:1c:65:95:1a:69:59:f3:cd:cb:3c:
d6:e9:fd:0f:86:24:be:29:ef:d7:75:98:9a:e8:59:
25:61:5c:91:9f:0d:ab:69:a6:d9:05:92:99:a2:b4:
79:88:05:18:4e:6a:94:03:23:5b:48:25:33:f1:8b:
be:eb:c3:5b:0d:1a:59:c1:ea:b6:92:b5:74:79:8b:
4b:cc:8a:44:14:ee:28:06:79:3e:68:87:a2:2b:6e:
f9:50:76:ec:03:53:a0:9c:5e:5f:ab:1b:b1:95:51:
d4:4a:2d:da:10:75:2a:71:59:2f:35:bf:c1:f9:68:
c4:db:85:98:7b:c0:d7:37:cc:f8:94:85:ad:4a:d5:
2e:e3:7a:09:c3:9d:bd:09:f0:91:f1:2b:c5:5c:a6:
71:e3:4d:5c:72:5b:0b:44:8b:34:ec:b0:9a:3b:df:
5c:2a:ac:57:81:f4:b8:b2:4d:e7:4d:3a:4b:b5:0b:
d4:3b:3a:51:76:fb:15:a0:4d:28:88:62:a9:b2:be:
08:59:18:1f:57:2d:7a:91:be:7f:0b:49:e4:55:5e:
de:67:91:a4:ea:e5:66:69:9b:96:e0:e3:d5:ed:5d:
d7:04:d2:5f:88:07:f1:e5:8a:f8:b7:6c:c8:47:0c:
db:6c:73:ba:e3:f2:07:4e:f1:01:e1:6d:d4:c3:d9:
c2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6F:14:8A:06:76:C1:32:AA:0C:DC:25:23:EF:89:5E:44:4F:35:47
X509v3 Authority Key Identifier:
keyid:A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a1:92:74:1b:38:40:78:c3:01:44:c4:69:51:74:aa:57:57:
95:ee:c0:a9:c4:7f:be:7e:b4:88:e6:95:37:40:7e:20:90:41:
d1:cb:38:1a:c4:da:14:0a:85:7f:59:8f:7c:47:1b:fe:8b:ea:
59:f1:a0:aa:95:00:ad:21:d5:ef:9f:2a:0a:f1:11:ae:30:04:
01:a8:d0:13:49:d5:08:10:0d:e2:10:50:90:12:40:9a:fc:05:
c0:0b:a5:ac:36:a2:3c:0e:d7:f5:75:1c:2b:e5:52:da:55:c1:
81:aa:fb:1e:9d:a9:d8:24:b6:19:ad:93:f8:78:8b:a1:15:9c:
62:09:fe:bb:5b:ea:13:58:8c:c3:2c:cf:9a:15:08:74:a2:e5:
10:33:e4:7d:8f:fb:39:a7:92:46:58:f1:44:55:0c:32:9a:2d:
e5:d5:94:cf:8b:da:30:8d:55:e3:09:be:f3:69:f5:06:29:c3:
a7:9a:cd:ea:f5:1e:3d:3c:41:de:67:4f:46:a0:de:1d:c0:b3:
d9:ea:c0:09:a2:3b:ad:b1:23:3a:81:37:a8:7d:f3:58:61:c5:
90:ca:95:4a:b9:74:d3:47:fa:9b:d7:ae:17:25:41:fc:be:c3:
c5:53:10:fd:cc:42:62:10:a4:bb:18:54:74:04:55:ae:c4:b4:
60:0c:8a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSR56Ch3ZxTNiK/Pn2c/rbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MjM0MTg1Mzk3MzVjYmQ5YjBiYTNjMjc5ZWMzNTU3ZDcy
NjI2NWEwHhcNMjUwMjE3MDUwMDM4WhcNMjUwMjE4MDUwMDM4WjAzMTEwLwYDVQQD
EygwNTZmMTQ4YTA2NzZjMTMyYWEwY2RjMjUyM2VmODk1ZTQ0NGYzNTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrsvGRxllRppWfPNyzzW6f0PhiS+
Ke/XdZia6FklYVyRnw2raabZBZKZorR5iAUYTmqUAyNbSCUz8Yu+68NbDRpZweq2
krV0eYtLzIpEFO4oBnk+aIeiK275UHbsA1OgnF5fqxuxlVHUSi3aEHUqcVkvNb/B
+WjE24WYe8DXN8z4lIWtStUu43oJw529CfCR8SvFXKZx401cclsLRIs07LCaO99c
KqxXgfS4sk3nTTpLtQvUOzpRdvsVoE0oiGKpsr4IWRgfVy16kb5/C0nkVV7eZ5Gk
6uVmaZuW4OPV7V3XBNJfiAfx5Yr4t2zIRwzbbHO64/IHTvEB4W3Uw9nCIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVvFIoGdsEyqgzcJSPviV5ETzVHMB8GA1UdIwQY
MBaAFKUjQYU5c1y9mwujwnnsNVfXJiZaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFNOQmhUbHpYTDJiQzZQQ2VldzFWOWNtSmxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81OGQxNGQtNmQ2Mi00M2UxLWI2YmIt
N2NiMjZiYzFkNGQwLzEvcFNOQmhUbHpYTDJiQzZQQ2VldzFWOWNtSmxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81OGQxNGQtNmQ2Mi00M2UxLWI2YmItN2NiMjZiYzFkNGQw
LzEvcFNOQmhUbHpYTDJiQzZQQ2VldzFWOWNtSmxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKGSdBs4
QHjDAUTEaVF0qldXle7AqcR/vn60iOaVN0B+IJBB0cs4GsTaFAqFf1mPfEcb/ovq
WfGgqpUArSHV758qCvERrjAEAajQE0nVCBAN4hBQkBJAmvwFwAulrDaiPA7X9XUc
K+VS2lXBgar7Hp2p2CS2Ga2T+HiLoRWcYgn+u1vqE1iMwyzPmhUIdKLlEDPkfY/7
OaeSRljxRFUMMpot5dWUz4vaMI1V4wm+82n1BinDp5rN6vUePTxB3mdPRqDeHcCz
2erACaI7rbEjOoE3qH3zWGHFkMqVSrl000f6m9euFyVB/L7DxVMQ/cxCYhCkuxhU
dARVrsS0YAyKqw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:14 2025 by rpki-client