Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
File: odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft (raw, json)
Hash identifier: 7MzC1hJfZ1FmXvJRHphpkJcFNAf/vH1LZXg9i6b1LRk=
Subject key identifier: 28:EF:90:E5:A1:27:9C:8B:87:CB:DF:F1:8B:60:C2:38:CA:58:D8:E4
Authority key identifier: A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
Certificate issuer: /CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Certificate serial: 0194C4D136D4D21EAA70C847A8B2C44DD753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 04:00:32 +0000
Manifest this update: Sun 02 Feb 2025 04:00:32 +0000
Manifest next update: Mon 03 Feb 2025 04:00:32 +0000
Files and hashes: 1: FGv164p9oNmasj4tz9FMT-yTJe8.roa (hash: 2RdxitfGw59b2KF3BO+RbESKDdD8hgmB641at2eVQlk=)
2: odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl (hash: x6peaEh4JpVVRFJkBG+GSb1CSSi1hBnaEt08byK5wWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:36:d4:d2:1e:aa:70:c8:47:a8:b2:c4:4d:d7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Validity
Not Before: Feb 2 04:00:32 2025 GMT
Not After : Feb 3 04:00:32 2025 GMT
Subject: CN=28ef90e5a1279c8b87cbdff18b60c238ca58d8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:44:52:ae:da:0b:28:58:40:7b:54:d7:0c:
cd:08:75:ea:1e:13:12:94:c8:8c:23:11:d4:3f:36:
74:5d:ad:cf:61:e0:fd:2a:2c:a2:f7:d5:56:8c:0a:
a0:d4:7d:72:6b:58:40:7c:06:4f:62:76:7b:da:66:
b9:8f:e2:0f:67:c4:6e:d5:d5:7a:26:0a:f7:44:f2:
62:d6:92:91:e4:ca:d4:e9:59:74:35:17:b7:bf:0f:
64:e1:a3:76:98:db:8b:90:94:bb:dd:68:cc:d2:f3:
ac:ef:e6:79:31:05:0f:40:74:4e:70:89:c0:c9:bb:
38:d5:70:ae:f0:1c:ba:67:a7:db:01:4f:9e:9b:1c:
a7:0c:07:1d:38:02:9e:b3:70:24:ef:23:21:58:36:
19:9c:4b:c5:a6:8e:75:1a:c1:05:bf:53:26:fe:5c:
b4:c4:dc:3c:de:25:53:19:b4:f8:f3:28:ca:1a:e4:
f3:02:2f:0a:56:68:aa:bf:e7:4f:d7:ff:12:38:df:
5f:60:0d:54:cd:0b:14:4c:70:c8:a6:ed:9d:d4:59:
8c:dd:02:7f:11:b4:3c:6f:3c:5c:af:db:03:df:36:
e7:fb:1b:05:09:95:e5:30:f3:c8:8a:43:97:66:77:
6b:9c:8d:2b:45:b7:05:60:3e:ea:0f:0d:21:d2:a2:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EF:90:E5:A1:27:9C:8B:87:CB:DF:F1:8B:60:C2:38:CA:58:D8:E4
X509v3 Authority Key Identifier:
keyid:A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:50:ac:56:55:bf:5d:46:96:35:21:cf:40:d6:e6:e1:93:1b:
26:4c:07:7d:7e:33:9a:ce:44:2c:5b:e6:a5:a9:70:52:45:09:
0a:f3:8c:4c:25:c2:7d:3c:b9:53:5c:ce:95:28:c6:76:a6:60:
2d:df:4f:f0:79:19:93:84:e3:1b:ae:cf:dc:22:e9:f0:0b:25:
fe:c6:12:5c:03:ee:92:aa:4f:d0:37:b7:5e:6a:ae:e4:cb:1a:
94:57:77:ed:af:2a:c8:f0:15:9a:25:b2:86:13:9c:38:b0:a6:
34:45:ca:59:4b:82:51:50:5e:dc:f2:ff:b7:c3:cf:74:27:e3:
e9:6c:fa:9a:60:0f:13:6e:e2:4d:99:a5:90:6c:16:68:eb:6c:
3b:58:ee:69:a5:18:c9:dd:ac:74:ff:80:3f:85:96:25:0c:01:
4c:59:44:2e:9f:fb:ab:c4:61:07:21:5c:ef:e1:4b:55:18:26:
8e:bd:8d:ba:be:89:e5:83:82:93:59:b0:e2:f4:84:26:fb:ee:
5f:8f:ae:86:28:13:5e:3b:62:82:75:af:c2:5e:1f:41:fb:b0:
ce:f8:2a:55:e1:63:27:4d:a3:74:b0:99:9a:58:51:70:6f:39:
0d:39:e3:66:5d:00:3c:96:7d:1e:49:e5:9a:ba:83:56:ff:c3:
b8:3a:f8:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0TbU0h6qcMhHqLLETddTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDliMzViYzNlOWYyNDkzYzY0ZDA2ZjViMmQ0YTk5YzVm
MjUxZTkwHhcNMjUwMjAyMDQwMDMyWhcNMjUwMjAzMDQwMDMyWjAzMTEwLwYDVQQD
EygyOGVmOTBlNWExMjc5YzhiODdjYmRmZjE4YjYwYzIzOGNhNThkOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzlEUq7aCyhYQHtU1wzNCHXqHhMS
lMiMIxHUPzZ0Xa3PYeD9Kiyi99VWjAqg1H1ya1hAfAZPYnZ72ma5j+IPZ8Ru1dV6
Jgr3RPJi1pKR5MrU6Vl0NRe3vw9k4aN2mNuLkJS73WjM0vOs7+Z5MQUPQHROcInA
ybs41XCu8By6Z6fbAU+emxynDAcdOAKes3Ak7yMhWDYZnEvFpo51GsEFv1Mm/ly0
xNw83iVTGbT48yjKGuTzAi8KVmiqv+dP1/8SON9fYA1UzQsUTHDIpu2d1FmM3QJ/
EbQ8bzxcr9sD3zbn+xsFCZXlMPPIikOXZndrnI0rRbcFYD7qDw0h0qJvPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjvkOWhJ5yLh8vf8YtgwjjKWNjkMB8GA1UdIwQY
MBaAFKHZs1vD6fJJPGTQb1stSpnF8lHpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2Rtelc4UHA4a2s4Wk5Cdld5MUttY1h5VWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80NjU2ZjctMDA1NC00OGQ0LTk2MWEt
NmRiZGVjNTExNjhkLzEvb2Rtelc4UHA4a2s4Wk5Cdld5MUttY1h5VWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80NjU2ZjctMDA1NC00OGQ0LTk2MWEtNmRiZGVjNTExNjhk
LzEvb2Rtelc4UHA4a2s4Wk5Cdld5MUttY1h5VWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxVCsVlW/
XUaWNSHPQNbm4ZMbJkwHfX4zms5ELFvmpalwUkUJCvOMTCXCfTy5U1zOlSjGdqZg
Ld9P8HkZk4TjG67P3CLp8Asl/sYSXAPukqpP0De3Xmqu5MsalFd37a8qyPAVmiWy
hhOcOLCmNEXKWUuCUVBe3PL/t8PPdCfj6Wz6mmAPE27iTZmlkGwWaOtsO1juaaUY
yd2sdP+AP4WWJQwBTFlELp/7q8RhByFc7+FLVRgmjr2Nur6J5YOCk1mw4vSEJvvu
X4+uhigTXjtignWvwl4fQfuwzvgqVeFjJ02jdLCZmlhRcG85DTnjZl0APJZ9Hknl
mrqDVv/DuDr46g==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:18 2025 by rpki-client