Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: f8197sG0m8+B9CmScENHgg/30+Ag9kco1B5GL91ymDE=
Subject key identifier: 2D:C0:F2:D9:5F:96:48:9A:B0:73:E9:6F:FA:05:39:DD:54:2B:FD:2E
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 0194C387A2DDD756C3A968AD762D84073D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: B7
Signing time: Sat 01 Feb 2025 22:00:33 +0000
Manifest this update: Sat 01 Feb 2025 22:00:33 +0000
Manifest next update: Sun 02 Feb 2025 22:00:33 +0000
Files and hashes: 1: 2DxOeFRwGr0ZkLmLFLoh-xJZObE.roa (hash: aeAg8fL5FqA68LiiZmemChuMc/666QpvAefI6BAnFLU=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: N1/cTJY5EcRABr+UGBbVDRqiTIhGDa2+ZEPpkoGE310=)
3: QubVM_6N5lx1EgDJtxcjPI_RV3o.roa (hash: 0U5OEeLVzA3Fo3jdio9FkyyDkZiO1CmcUt6CGyuWF74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:a2:dd:d7:56:c3:a9:68:ad:76:2d:84:07:3d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Feb 1 22:00:33 2025 GMT
Not After : Feb 2 22:00:33 2025 GMT
Subject: CN=2dc0f2d95f96489ab073e96ffa0539dd542bfd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:23:75:20:ad:5f:aa:fe:cc:ce:6c:7f:38:
1f:be:00:8d:dd:19:28:ee:f6:9d:ba:17:1f:76:71:
02:2e:f9:bc:b0:3d:5e:1c:e8:95:a6:3e:13:42:15:
5f:2f:ea:16:50:48:d9:e9:d0:7c:80:d6:b8:d0:e5:
c0:2c:92:37:38:ca:6d:d9:58:9e:fa:3d:21:a7:8a:
40:eb:d6:ab:fe:e4:14:00:80:51:7d:6f:c9:14:b4:
09:85:fe:7b:a9:6d:6f:6c:70:ce:80:b8:bb:2d:71:
98:91:30:49:63:ba:b4:21:b8:26:61:55:b3:c9:31:
22:cf:8b:eb:fd:25:f6:20:75:63:d0:3d:1e:bb:2e:
e9:d2:30:c0:16:92:c6:07:a2:fc:f1:05:dd:42:5f:
29:34:e3:7d:f6:b9:31:56:ce:9b:86:14:7b:69:f6:
33:2c:1f:bd:a1:da:a1:5d:40:0b:d8:2d:f6:30:93:
d7:fa:b3:50:f2:e9:27:01:4b:60:dd:cd:c2:cf:29:
79:67:87:5e:13:b4:b1:6c:6e:db:08:10:f6:d0:44:
dd:16:56:7d:10:6e:6f:69:c9:16:07:ed:ac:11:2b:
0b:c2:8d:50:78:eb:0b:87:9e:cc:da:be:d6:c1:bf:
55:93:2c:29:d8:6a:69:82:d8:8f:96:2b:f6:94:38:
7d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C0:F2:D9:5F:96:48:9A:B0:73:E9:6F:FA:05:39:DD:54:2B:FD:2E
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:38:f3:3d:24:a8:3a:56:a4:cc:f5:26:65:10:95:8a:3f:bb:
19:a8:f3:45:c3:66:6c:bb:5c:27:6c:2d:89:75:0b:f9:34:70:
4a:4e:72:16:44:53:97:51:57:a9:bc:04:50:1f:16:1d:58:4d:
47:29:5b:30:a2:cf:8f:b3:92:21:11:67:36:da:35:76:9e:2c:
8c:2d:e6:e4:c3:06:69:3e:de:7b:6a:4e:55:40:c5:54:4e:35:
18:f7:81:37:2e:ca:7a:1a:e3:ce:0e:92:2b:a3:03:6e:cb:61:
7d:e2:05:93:b1:5c:62:5e:50:25:25:98:a9:a0:96:59:82:4b:
2a:c8:b3:2a:b8:05:47:fb:a1:9f:84:3c:8b:01:1a:67:b1:66:
10:7f:5b:25:f3:7b:41:58:a8:71:cf:27:c4:3c:ca:b3:ce:aa:
b1:59:87:68:61:92:9b:c8:f3:b1:bb:e1:f5:ae:1a:38:7a:98:
eb:c8:a0:09:3a:cd:b2:3d:da:de:6c:af:80:21:d8:fa:5b:b3:
0d:ae:1a:86:94:2d:aa:b7:b2:6b:70:61:eb:84:23:94:28:18:
cd:3c:b8:bb:fc:1a:b9:93:5c:ae:e2:84:b2:4c:69:0d:8b:cd:
71:a7:90:ce:92:e1:82:b8:ca:40:6f:7e:15:24:c8:ad:c2:8a:
a2:61:7d:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh6Ld11bDqWitdi2EBz19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTFmYmE0M2Y1N2FiMDQ0NWU1NDJmY2VlY2I4NzY4MTY1
N2NjZjMwHhcNMjUwMjAxMjIwMDMzWhcNMjUwMjAyMjIwMDMzWjAzMTEwLwYDVQQD
EygyZGMwZjJkOTVmOTY0ODlhYjA3M2U5NmZmYTA1MzlkZDU0MmJmZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHojdSCtX6r+zM5sfzgfvgCN3Rko
7vaduhcfdnECLvm8sD1eHOiVpj4TQhVfL+oWUEjZ6dB8gNa40OXALJI3OMpt2Vie
+j0hp4pA69ar/uQUAIBRfW/JFLQJhf57qW1vbHDOgLi7LXGYkTBJY7q0IbgmYVWz
yTEiz4vr/SX2IHVj0D0euy7p0jDAFpLGB6L88QXdQl8pNON99rkxVs6bhhR7afYz
LB+9odqhXUAL2C32MJPX+rNQ8uknAUtg3c3Czyl5Z4deE7SxbG7bCBD20ETdFlZ9
EG5vackWB+2sESsLwo1QeOsLh57M2r7Wwb9Vkywp2GppgtiPliv2lDh9hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3A8tlflkiasHPpb/oFOd1UK/0uMB8GA1UdIwQY
MBaAFD0R+6Q/V6sEReVC/O7Lh2gWV8zzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYt
YzVkZDM4NTdhNGQyLzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYtYzVkZDM4NTdhNGQy
LzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzjzPSSo
OlakzPUmZRCVij+7GajzRcNmbLtcJ2wtiXUL+TRwSk5yFkRTl1FXqbwEUB8WHVhN
RylbMKLPj7OSIRFnNto1dp4sjC3m5MMGaT7ee2pOVUDFVE41GPeBNy7Kehrjzg6S
K6MDbsthfeIFk7FcYl5QJSWYqaCWWYJLKsizKrgFR/uhn4Q8iwEaZ7FmEH9bJfN7
QViocc8nxDzKs86qsVmHaGGSm8jzsbvh9a4aOHqY68igCTrNsj3a3myvgCHY+luz
Da4ahpQtqreya3Bh64QjlCgYzTy4u/wauZNcruKEskxpDYvNcaeQzpLhgrjKQG9+
FSTIrcKKomF9NQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:16 2025 by rpki-client