Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: mnePH1B0X0st+6vRPy0jgkwElF97pFjfTk+JUsytGik=
Subject key identifier: DF:5A:75:A7:FC:78:B9:C8:95:DB:EE:C8:D6:77:97:61:D2:97:FC:5E
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 0194C42C8DEF56833F561F771A3F8D0ED6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 01:00:41 +0000
Manifest this update: Sun 02 Feb 2025 01:00:41 +0000
Manifest next update: Mon 03 Feb 2025 01:00:41 +0000
Files and hashes: 1: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: N03tSwTwxQdpKVsoyhi9mBQ9JUU1qDf0f9MCbdNNo/M=)
2: z-LF5XIt0VeWFhY7GK5O7xZnBBE.roa (hash: 1pZ4XtZFpZvLcxR/iScQRob6NYsKteymu5FeNxuRtO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:8d:ef:56:83:3f:56:1f:77:1a:3f:8d:0e:d6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Feb 2 01:00:41 2025 GMT
Not After : Feb 3 01:00:41 2025 GMT
Subject: CN=df5a75a7fc78b9c895dbeec8d6779761d297fc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:db:3c:21:a4:27:77:b1:8c:8a:fe:cf:d1:
d6:72:fd:f1:64:ef:63:69:3e:ee:25:24:e4:b8:e4:
1f:1a:8c:cb:ab:53:39:54:63:02:30:0a:61:fa:2f:
60:1a:23:26:f6:63:8a:76:6c:d4:04:7c:72:11:ed:
25:49:7c:0e:0d:05:a8:d7:dc:bf:07:f5:ac:0d:19:
73:21:b1:33:f5:8e:d1:8d:0d:52:bd:b5:90:46:4f:
92:7d:c4:1f:00:ea:61:17:b8:be:88:3e:62:73:2d:
69:69:3c:d6:16:59:8f:b3:a8:d7:b5:79:cb:d3:4c:
eb:be:2d:49:f8:18:9c:19:ed:b9:4c:69:84:40:ac:
01:21:49:46:fa:7b:d4:78:b9:cd:45:84:c0:cb:3d:
46:ec:4f:bf:68:90:08:59:6b:b8:7a:74:45:85:dd:
96:60:20:6d:bd:d9:71:5b:e9:f1:14:28:76:8f:92:
e5:36:2f:17:79:82:56:61:a8:2a:ec:2d:77:e5:d7:
97:4a:e9:bc:c0:21:3b:00:b2:ea:07:a2:f2:16:e8:
76:27:d2:b6:d6:59:03:9a:6e:01:63:40:37:93:5a:
f3:da:7d:24:32:ad:2a:10:b7:76:f5:ab:20:a6:19:
1b:c8:ec:84:3f:b4:f0:9e:ab:2a:18:2b:1d:9e:49:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5A:75:A7:FC:78:B9:C8:95:DB:EE:C8:D6:77:97:61:D2:97:FC:5E
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bd:a5:2b:e5:c8:1e:e9:82:55:df:0a:cd:6f:f1:94:ad:9c:
74:c3:11:ec:7b:28:6c:60:7d:69:8a:ce:ad:70:b9:35:da:15:
3b:27:9c:7e:5e:fe:41:25:36:94:89:b2:b9:99:16:37:69:18:
e6:3d:a6:60:ac:d6:1f:bf:ad:d4:28:6d:ee:c1:d7:5b:78:85:
e0:90:d6:5f:ef:9a:77:8f:4c:49:e6:cb:2f:7c:0b:72:10:8e:
bb:83:53:7a:b1:a2:bd:12:cc:6a:b9:ba:d8:18:e0:01:9d:6e:
a0:01:31:96:15:21:0d:8f:a2:0c:f7:ee:ab:db:49:9e:20:00:
f9:c9:aa:a0:89:3b:33:ea:f1:15:ec:c4:71:0f:34:2e:6b:3d:
17:79:fc:50:15:a0:3e:0d:5c:34:11:a8:28:ba:d1:1b:66:cd:
fe:c3:47:6a:c3:3a:25:8c:8b:69:a5:4f:26:76:80:ee:f7:23:
b8:ea:a8:ac:84:88:a8:53:9e:d9:c1:3d:49:36:14:a7:2e:8a:
22:ce:87:e1:5f:d7:2f:cc:84:d7:37:0c:f3:91:3f:67:2b:b4:
fe:6e:59:cb:40:b9:f2:f5:5e:b6:2a:91:d1:0d:74:d8:4a:ad:
3d:45:dd:38:0a:1c:26:38:94:01:be:58:b2:86:5e:a5:71:1d:
1a:a7:b9:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELI3vVoM/Vh93Gj+NDtbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTU4NDQ0NzI4ZjVhYjdhYTgyNmY0Mzc4MDA1Y2U2Nzky
MDBkNTIwHhcNMjUwMjAyMDEwMDQxWhcNMjUwMjAzMDEwMDQxWjAzMTEwLwYDVQQD
EyhkZjVhNzVhN2ZjNzhiOWM4OTVkYmVlYzhkNjc3OTc2MWQyOTdmYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR7bPCGkJ3exjIr+z9HWcv3xZO9j
aT7uJSTkuOQfGozLq1M5VGMCMAph+i9gGiMm9mOKdmzUBHxyEe0lSXwODQWo19y/
B/WsDRlzIbEz9Y7RjQ1SvbWQRk+SfcQfAOphF7i+iD5icy1paTzWFlmPs6jXtXnL
00zrvi1J+BicGe25TGmEQKwBIUlG+nvUeLnNRYTAyz1G7E+/aJAIWWu4enRFhd2W
YCBtvdlxW+nxFCh2j5LlNi8XeYJWYagq7C135deXSum8wCE7ALLqB6LyFuh2J9K2
1lkDmm4BY0A3k1rz2n0kMq0qELd29asgphkbyOyEP7TwnqsqGCsdnkm1YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9adaf8eLnIldvuyNZ3l2HSl/xeMB8GA1UdIwQY
MBaAFKaVhERyj1q3qoJvQ3gAXOZ5IA1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEt
MWI1MTFjNjYzOTc4LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEtMWI1MTFjNjYzOTc4
LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfb2lK+XI
HumCVd8KzW/xlK2cdMMR7HsobGB9aYrOrXC5NdoVOyecfl7+QSU2lImyuZkWN2kY
5j2mYKzWH7+t1Cht7sHXW3iF4JDWX++ad49MSebLL3wLchCOu4NTerGivRLMarm6
2BjgAZ1uoAExlhUhDY+iDPfuq9tJniAA+cmqoIk7M+rxFezEcQ80Lms9F3n8UBWg
Pg1cNBGoKLrRG2bN/sNHasM6JYyLaaVPJnaA7vcjuOqorISIqFOe2cE9STYUpy6K
Is6H4V/XL8yE1zcM85E/Zyu0/m5Zy0C58vVetiqR0Q102EqtPUXdOAocJjiUAb5Y
soZepXEdGqe5gA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:44 2025 by rpki-client