Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: emhn8Ftp8wnmoUGShPImh5xyt3LKRwVLMEIR3zIaK5A=
Subject key identifier: 99:F0:F4:7E:D1:1F:05:FE:ED:72:82:FF:78:8D:53:C2:19:5D:32:FE
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 0195127E8D7F261368DE1D62A0FA7344AF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 06:00:38 +0000
Manifest this update: Mon 17 Feb 2025 06:00:38 +0000
Manifest next update: Tue 18 Feb 2025 06:00:38 +0000
Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: fao7sc32sDYoda5Kam7bdrERzt3xB0szMoOlnd5kAjY=)
2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=)
3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:8d:7f:26:13:68:de:1d:62:a0:fa:73:44:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Feb 17 06:00:38 2025 GMT
Not After : Feb 18 06:00:38 2025 GMT
Subject: CN=99f0f47ed11f05feed7282ff788d53c2195d32fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:a3:06:69:2a:d2:ee:88:d9:b4:df:90:56:
4d:76:e9:6b:55:a6:41:a6:95:e2:04:17:b5:f5:1f:
de:47:ae:d3:40:2b:99:c2:03:d5:07:47:fd:d1:f4:
37:ea:12:eb:29:c0:aa:95:e6:27:9f:cd:15:15:96:
eb:76:76:15:54:37:33:df:2e:e5:b9:28:da:2d:3e:
9f:92:c7:46:7e:fc:7c:ff:2c:85:e0:c5:7f:3d:f5:
46:15:b0:02:0d:bc:c7:70:27:db:43:cc:13:f9:fc:
dc:cd:23:aa:70:2d:03:0f:d6:dc:ec:8a:5b:5e:a6:
51:13:1a:03:d1:f2:26:e4:01:28:a8:b5:e0:5c:88:
b1:72:a3:c0:0d:19:45:02:bd:0a:49:e4:94:45:e2:
21:f0:ed:7c:68:56:5c:d4:ce:b8:e6:1a:83:40:57:
b0:2d:ae:90:0a:09:3a:9a:c5:52:2c:51:d1:84:26:
f1:c9:cf:c1:b2:04:e0:68:90:b6:92:fe:73:be:6c:
14:66:60:33:c2:89:94:01:e4:2c:28:51:25:f8:19:
23:e0:43:f0:9e:5e:2a:38:f6:9d:30:06:34:6b:59:
74:e1:36:22:40:ce:44:6e:b3:eb:35:e8:c1:d6:8c:
ae:0e:c7:b6:69:65:93:a4:0e:c0:e9:3d:51:32:d5:
23:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F0:F4:7E:D1:1F:05:FE:ED:72:82:FF:78:8D:53:C2:19:5D:32:FE
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cc:8b:ef:39:3e:02:f8:59:78:e4:63:12:7e:57:ad:68:53:
bf:56:47:51:0e:90:c7:58:0f:a9:40:b2:50:c0:59:35:4d:d3:
3b:8f:92:be:00:45:48:d7:81:9d:a2:4e:4f:bf:de:29:78:86:
b8:86:46:92:e3:e8:41:35:29:ad:40:b5:b4:0b:21:3b:ab:86:
39:22:89:99:89:7d:e4:38:bf:e2:72:82:06:b0:c6:b0:b9:86:
d8:64:c1:41:1f:10:54:2d:88:d9:8e:98:35:10:c2:80:45:a2:
fa:f1:8d:e4:63:a4:55:8d:09:7d:45:06:17:c3:34:8d:f1:e9:
b9:13:23:b7:c3:3f:dc:a7:9c:64:f0:34:dc:68:21:48:66:01:
b2:5c:94:4b:11:5c:9f:d1:6c:3b:60:0d:c9:67:c6:24:06:62:
92:7e:8c:1a:25:a0:8c:ec:e3:fa:cd:b4:fd:0b:46:56:5f:f5:
9d:b3:ef:a5:26:f9:cb:c1:44:e8:33:c6:b3:7b:eb:06:3d:06:
8a:09:4f:36:ce:d0:81:24:d0:64:0c:07:e3:93:45:70:6c:a9:
ae:ff:58:6b:f2:01:3a:93:e7:25:3e:cb:88:fd:bc:91:11:30:
17:8a:2a:1b:92:c4:68:1d:f0:57:c0:35:ff:98:9e:f1:d0:b5:
3c:39:ed:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfo1/JhNo3h1ioPpzRK8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNmYyZTQ5YTMxZThkZjljNWFhMDhhYWYyNDBiNWM4MzJi
OWNiOTMwHhcNMjUwMjE3MDYwMDM4WhcNMjUwMjE4MDYwMDM4WjAzMTEwLwYDVQQD
Eyg5OWYwZjQ3ZWQxMWYwNWZlZWQ3MjgyZmY3ODhkNTNjMjE5NWQzMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7CjBmkq0u6I2bTfkFZNdulrVaZB
ppXiBBe19R/eR67TQCuZwgPVB0f90fQ36hLrKcCqleYnn80VFZbrdnYVVDcz3y7l
uSjaLT6fksdGfvx8/yyF4MV/PfVGFbACDbzHcCfbQ8wT+fzczSOqcC0DD9bc7Ipb
XqZRExoD0fIm5AEoqLXgXIixcqPADRlFAr0KSeSUReIh8O18aFZc1M645hqDQFew
La6QCgk6msVSLFHRhCbxyc/BsgTgaJC2kv5zvmwUZmAzwomUAeQsKFEl+Bkj4EPw
nl4qOPadMAY0a1l04TYiQM5EbrPrNejB1oyuDse2aWWTpA7A6T1RMtUjfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnw9H7RHwX+7XKC/3iNU8IZXTL+MB8GA1UdIwQY
MBaAFF1vLkmjHo35xaoIqvJAtcgyucuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgt
MmU5ZGUyNTJkMWY2LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgtMmU5ZGUyNTJkMWY2
LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8yL7zk+
AvhZeORjEn5XrWhTv1ZHUQ6Qx1gPqUCyUMBZNU3TO4+SvgBFSNeBnaJOT7/eKXiG
uIZGkuPoQTUprUC1tAshO6uGOSKJmYl95Di/4nKCBrDGsLmG2GTBQR8QVC2I2Y6Y
NRDCgEWi+vGN5GOkVY0JfUUGF8M0jfHpuRMjt8M/3KecZPA03GghSGYBslyUSxFc
n9FsO2ANyWfGJAZikn6MGiWgjOzj+s20/QtGVl/1nbPvpSb5y8FE6DPGs3vrBj0G
iglPNs7QgSTQZAwH45NFcGyprv9Ya/IBOpPnJT7LiP28kREwF4oqG5LEaB3wV8A1
/5ie8dC1PDntSA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:55 2025 by rpki-client