Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: oo60z3Y98Bbczl24xE4fm5j++NNxJbKuu3T6ChDjbu4=
Subject key identifier: C1:8A:7A:F5:DA:53:7B:CE:81:3F:85:EE:81:DA:4E:18:A8:13:A7:04
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 0194C463C3E3B2F6940C9A671A62610C09C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 6F
Signing time: Sun 02 Feb 2025 02:01:00 +0000
Manifest this update: Sun 02 Feb 2025 02:01:00 +0000
Manifest next update: Mon 03 Feb 2025 02:01:00 +0000
Files and hashes: 1: 2n3afJDZ2VaAW1ICi9wuuluJH-s.roa (hash: n7gdmzqfRPjhPckkIN46JD6+pmnsuH8Fvwcad0thHWk=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: +WPNBaW47/8ZfMi/zxwYUtH7m0qzD7LV7cbGN+jXrLQ=)
3: NI9PA3DeuJZ8C4Z38jjkQp55Z9M.roa (hash: myYnnl24PT+xu1fTWXRtQwS1Z11gqqABXPED52Nni8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:c3:e3:b2:f6:94:0c:9a:67:1a:62:61:0c:09:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Feb 2 02:01:00 2025 GMT
Not After : Feb 3 02:01:00 2025 GMT
Subject: CN=c18a7af5da537bce813f85ee81da4e18a813a704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d1:c9:24:ac:06:bd:6b:8e:17:b6:64:cb:9c:
28:cb:d0:4a:b1:42:bd:64:85:94:e3:3e:70:8f:b6:
3d:ca:8a:04:23:fe:35:8b:0b:e9:e3:81:93:a3:ad:
cd:04:97:28:c6:a2:8d:16:cd:e3:91:01:99:3a:28:
35:08:4f:8e:9b:34:cf:64:b6:a2:4c:53:c0:53:cf:
2f:29:29:3e:df:80:49:98:bd:2b:29:7c:4a:3b:03:
c7:70:57:99:08:4b:7e:5d:3f:03:5c:c7:31:7f:08:
35:a0:e2:e7:bc:16:c2:e0:5b:80:d6:b9:a7:10:88:
6c:df:54:49:11:92:27:54:74:77:a3:81:ff:9e:0f:
96:1f:02:dd:02:8a:2c:a2:80:59:88:47:ec:f5:40:
aa:c0:16:d1:0f:a9:56:43:91:46:ef:7f:e9:95:c7:
8b:f9:7a:ed:96:05:b4:07:e1:60:be:5c:68:cb:9e:
17:73:02:9d:4c:b3:12:61:82:d4:aa:85:36:38:d3:
e0:02:8d:5f:fe:08:b2:0c:0b:45:34:59:5b:6d:3c:
b7:17:04:cb:65:32:60:45:91:16:c7:ce:96:e4:13:
b8:ef:72:6d:00:ae:14:8d:e0:52:e3:b8:77:75:dd:
2d:2c:88:61:02:ec:0c:b2:81:35:e6:64:89:31:d4:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8A:7A:F5:DA:53:7B:CE:81:3F:85:EE:81:DA:4E:18:A8:13:A7:04
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8f:1e:2c:84:ad:5f:a2:38:e8:49:aa:5a:95:eb:c6:62:23:
c0:45:95:21:e3:bd:b5:77:e0:fa:7a:8e:6a:7d:fc:e3:05:f3:
be:96:fd:55:01:03:9c:62:db:41:9d:7c:8d:29:e9:8e:5a:f6:
27:b3:d7:46:bf:5d:09:6a:4f:12:c7:b3:71:62:a7:b5:3a:14:
77:0d:eb:a0:bf:cf:11:c3:92:bf:2e:2d:80:74:c9:26:5f:9f:
b4:b6:ef:de:2f:04:88:8b:2c:69:fc:f6:c7:40:09:8e:e2:97:
e1:e3:6e:24:df:25:41:dc:1a:ab:ff:83:b6:27:7a:ce:a8:eb:
46:3e:cf:5b:8f:13:8e:8c:91:fd:bd:82:08:3e:9d:09:51:e6:
3a:da:2f:55:82:b7:0c:f2:3e:18:2a:36:b5:98:23:ea:53:ec:
43:9d:63:bb:ae:62:d1:41:81:ce:aa:ce:db:8f:a8:d8:71:bb:
33:a1:83:87:22:0e:6c:c1:ce:89:21:55:44:29:94:e5:b2:75:
1d:b4:3f:10:43:ee:be:fa:d7:13:9e:a1:fc:04:08:eb:4e:39:
8b:f5:da:cc:37:84:3c:20:98:30:1d:f1:7d:67:8a:da:7c:ac:
6d:21:f7:db:a4:b1:2c:33:cd:f3:35:48:ad:d2:72:fa:76:98:
30:1b:db:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY8PjsvaUDJpnGmJhDAnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOWRhNzgzY2RmYjNjYjZkOWJjODJjMTkyZDZkNzJhYmI0
YTMzNmQwHhcNMjUwMjAyMDIwMTAwWhcNMjUwMjAzMDIwMTAwWjAzMTEwLwYDVQQD
EyhjMThhN2FmNWRhNTM3YmNlODEzZjg1ZWU4MWRhNGUxOGE4MTNhNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NHJJKwGvWuOF7Zky5woy9BKsUK9
ZIWU4z5wj7Y9yooEI/41iwvp44GTo63NBJcoxqKNFs3jkQGZOig1CE+OmzTPZLai
TFPAU88vKSk+34BJmL0rKXxKOwPHcFeZCEt+XT8DXMcxfwg1oOLnvBbC4FuA1rmn
EIhs31RJEZInVHR3o4H/ng+WHwLdAoosooBZiEfs9UCqwBbRD6lWQ5FG73/plceL
+XrtlgW0B+Fgvlxoy54XcwKdTLMSYYLUqoU2ONPgAo1f/giyDAtFNFlbbTy3FwTL
ZTJgRZEWx86W5BO473JtAK4UjeBS47h3dd0tLIhhAuwMsoE15mSJMdQhpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGKevXaU3vOgT+F7oHaThioE6cEMB8GA1UdIwQY
MBaAFCCdp4PN+zy22byCwZLW1yq7SjNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZDU5YzYtZjA4OS00NTMwLWEwOTct
Mjg0NjFiZTg5NzQwLzEvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81ZDU5YzYtZjA4OS00NTMwLWEwOTctMjg0NjFiZTg5NzQw
LzEvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAro8eLISt
X6I46EmqWpXrxmIjwEWVIeO9tXfg+nqOan384wXzvpb9VQEDnGLbQZ18jSnpjlr2
J7PXRr9dCWpPEsezcWKntToUdw3roL/PEcOSvy4tgHTJJl+ftLbv3i8EiIssafz2
x0AJjuKX4eNuJN8lQdwaq/+Dtid6zqjrRj7PW48TjoyR/b2CCD6dCVHmOtovVYK3
DPI+GCo2tZgj6lPsQ51ju65i0UGBzqrO24+o2HG7M6GDhyIObMHOiSFVRCmU5bJ1
HbQ/EEPuvvrXE56h/AQI6045i/XazDeEPCCYMB3xfWeK2nysbSH326SxLDPN8zVI
rdJy+naYMBvbzw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:40 2025 by rpki-client