Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: 4F7p4LBUFfoWdK/m1dcF5b2ePY/o69SIlNBngpNXZdI=
Subject key identifier: 1B:BF:38:84:1D:7A:12:9C:6D:3A:B3:72:74:BB:1D:70:65:D3:7F:B8
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 0194C4D167C7CFF7B72CA1448EB0DB3B41E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 24
Signing time: Sun 02 Feb 2025 04:00:45 +0000
Manifest this update: Sun 02 Feb 2025 04:00:45 +0000
Manifest next update: Mon 03 Feb 2025 04:00:45 +0000
Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=)
2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: Lc7lwB415oT3DDlctxAvy+oOTpmsX8noZ4Tj7OC0IFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:67:c7:cf:f7:b7:2c:a1:44:8e:b0:db:3b:41:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Feb 2 04:00:45 2025 GMT
Not After : Feb 3 04:00:45 2025 GMT
Subject: CN=1bbf38841d7a129c6d3ab37274bb1d7065d37fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:31:dd:6c:9f:bd:b4:03:b8:91:7f:73:8a:
b5:2d:17:8f:52:39:01:05:92:1d:ad:5c:d1:e3:56:
03:b1:6f:ed:92:bd:40:07:af:2e:15:64:43:9e:e5:
11:f4:80:2e:46:ea:fe:82:0c:03:06:ef:e0:ea:9b:
df:ab:1f:63:cc:cd:26:b1:57:fa:30:ca:e3:23:6b:
16:a8:b7:97:9f:bd:a2:a9:26:bc:43:a3:24:41:2a:
47:02:cc:3d:0b:55:b4:ea:52:0c:e2:1e:06:26:20:
e0:1d:80:4d:07:47:22:e6:5a:0a:8c:e3:9e:c1:1a:
1b:8c:e8:7b:fa:e1:3e:54:d4:07:5c:21:cd:7d:c0:
d5:be:b4:13:58:67:32:e0:50:47:38:70:a6:8f:2e:
56:b5:a7:c0:41:d8:6d:74:85:7a:69:66:e8:9a:07:
c5:37:66:9e:71:c3:b4:5c:af:4a:4b:8b:fe:0d:e0:
f4:27:28:81:4a:61:de:12:6f:aa:6b:ca:c3:9b:30:
44:84:36:47:f6:b0:da:3d:f0:d3:d1:94:71:ca:65:
39:b1:d7:bc:31:c9:4d:73:37:4a:69:c1:48:da:c2:
bf:23:39:de:32:32:29:2c:29:73:0f:fe:e8:34:81:
6d:c9:e7:2e:21:45:81:a0:bd:37:74:7b:f5:8a:e0:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BF:38:84:1D:7A:12:9C:6D:3A:B3:72:74:BB:1D:70:65:D3:7F:B8
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:dc:a9:ac:7f:fa:07:ec:90:e3:df:9d:fd:54:79:59:86:a7:
b7:67:53:45:dc:c5:5d:f2:d9:39:ff:0e:5f:f6:8e:2b:8e:6b:
07:39:bf:fc:91:61:6b:f0:d3:7a:8e:4a:10:20:aa:f7:99:e8:
7d:0a:40:08:1e:4e:d1:09:e6:a9:64:33:01:51:7e:63:01:a4:
61:2a:02:dd:6e:4b:aa:c2:99:c4:f7:33:3c:cc:cf:b2:81:20:
bd:87:8f:58:41:64:f0:c6:83:7e:eb:ee:06:ac:7b:03:a6:da:
00:d3:b2:54:01:23:79:06:de:b1:c0:54:13:9f:b9:eb:70:5e:
3c:90:63:92:48:26:fa:d1:98:b4:a6:6f:b7:31:22:d1:1b:6c:
ad:5e:bd:0b:fb:7f:2a:89:1e:1c:3c:c0:16:66:da:59:1f:82:
8d:e9:03:c6:99:57:c0:3e:a8:4c:1d:e2:f3:cf:81:d8:68:cc:
ff:c8:58:28:26:dd:a7:ec:0d:6d:41:fd:24:6f:fb:87:86:6e:
82:87:38:83:11:40:4f:9a:ba:d2:a9:c2:c9:79:84:a5:f0:b0:
09:59:fb:1c:1a:6f:30:7d:7c:97:ae:be:2c:3f:46:d0:8f:57:
05:c7:e4:48:d7:21:41:5a:04:da:8b:5c:df:c6:30:34:cb:ef:
06:5b:1e:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0WfHz/e3LKFEjrDbO0HlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNmYyNjIyZTY1YzJlZTg2MzUwMWQ3NzIxNDc1YTA1ZWY1
MzQzZmIwHhcNMjUwMjAyMDQwMDQ1WhcNMjUwMjAzMDQwMDQ1WjAzMTEwLwYDVQQD
EygxYmJmMzg4NDFkN2ExMjljNmQzYWIzNzI3NGJiMWQ3MDY1ZDM3ZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww8x3WyfvbQDuJF/c4q1LRePUjkB
BZIdrVzR41YDsW/tkr1AB68uFWRDnuUR9IAuRur+ggwDBu/g6pvfqx9jzM0msVf6
MMrjI2sWqLeXn72iqSa8Q6MkQSpHAsw9C1W06lIM4h4GJiDgHYBNB0ci5loKjOOe
wRobjOh7+uE+VNQHXCHNfcDVvrQTWGcy4FBHOHCmjy5WtafAQdhtdIV6aWbomgfF
N2aeccO0XK9KS4v+DeD0JyiBSmHeEm+qa8rDmzBEhDZH9rDaPfDT0ZRxymU5sde8
MclNczdKacFI2sK/IzneMjIpLClzD/7oNIFtyecuIUWBoL03dHv1iuAJcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu/OIQdehKcbTqzcnS7HXBl03+4MB8GA1UdIwQY
MBaAFJ5vJiLmXC7oY1AddyFHWgXvU0P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2Qt
YjFkYjcwMDcxZGRlLzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2QtYjFkYjcwMDcxZGRl
LzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdyprH/6
B+yQ49+d/VR5WYant2dTRdzFXfLZOf8OX/aOK45rBzm//JFha/DTeo5KECCq95no
fQpACB5O0QnmqWQzAVF+YwGkYSoC3W5LqsKZxPczPMzPsoEgvYePWEFk8MaDfuvu
Bqx7A6baANOyVAEjeQbescBUE5+563BePJBjkkgm+tGYtKZvtzEi0RtsrV69C/t/
KokeHDzAFmbaWR+CjekDxplXwD6oTB3i88+B2GjM/8hYKCbdp+wNbUH9JG/7h4Zu
goc4gxFAT5q60qnCyXmEpfCwCVn7HBpvMH18l66+LD9G0I9XBcfkSNchQVoE2otc
38YwNMvvBlsezw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:04 2025 by rpki-client