Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: aFm/CyaoFBZ1OkOoj62CAxjyclFtotwdIWwfYyO2o94=
Subject key identifier: 52:27:B9:C5:C3:3E:E9:C3:2F:46:AA:E8:1D:AA:26:41:6C:C9:DF:B0
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 0194C4639BC4D13F5407AAEDB2055B5E6EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 88
Signing time: Sun 02 Feb 2025 02:00:49 +0000
Manifest this update: Sun 02 Feb 2025 02:00:49 +0000
Manifest next update: Mon 03 Feb 2025 02:00:49 +0000
Files and hashes: 1: EZBWVER6RlsPS5zwpSfeXDYY4_4.roa (hash: TmP6HB2vfugTxNqU8/mbrbGgjAkZNuZVMOPZ6v4m2ZU=)
2: UWM-Kz1OP0UjWcYPffeOWK62TZs.roa (hash: lnPff/3R3t0peMh+icEOeZMrkDG2dfoemotH4CHOKR8=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: zetv0XXEbjTXzNUK0Exd4SC7vs9at4stJq3iw6xyupI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:9b:c4:d1:3f:54:07:aa:ed:b2:05:5b:5e:6e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Feb 2 02:00:49 2025 GMT
Not After : Feb 3 02:00:49 2025 GMT
Subject: CN=5227b9c5c33ee9c32f46aae81daa26416cc9dfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:20:2c:ea:f4:ed:ce:cf:2c:45:4f:e1:80:83:
27:f4:a8:56:11:e8:cc:35:c4:3a:28:c8:c2:e0:bd:
b4:da:de:84:d3:93:db:a5:3b:21:8f:a3:a7:9c:d3:
30:2b:2d:0b:22:03:b6:7d:d1:2a:8f:88:20:34:c5:
4f:fa:8c:e8:af:00:02:6c:bb:84:0f:3e:d2:ad:3d:
07:d8:d1:7c:a5:b3:64:5b:8e:3f:d2:d2:8e:f3:4a:
ba:0f:22:10:36:2a:7c:f8:13:9c:f3:a7:05:93:53:
a3:32:75:3f:97:29:65:16:06:a5:3c:74:3b:58:c4:
f7:ba:b1:38:d1:86:12:85:95:b0:48:95:30:80:4f:
79:81:0d:d7:e0:cd:b4:f0:c5:7c:dc:5f:44:36:e2:
10:40:44:59:f6:fd:04:ca:6e:11:73:0d:9d:51:3f:
1c:8f:ab:83:fb:06:14:3d:8b:34:b3:32:a6:cd:3f:
ee:d8:c3:18:35:ff:5d:68:ec:8c:67:e1:0b:13:ad:
e0:b4:8e:c1:72:62:0e:0b:ca:9e:ec:c1:cc:95:e7:
1f:a5:ea:dc:a4:f8:6a:c5:37:24:5e:c8:02:a8:55:
54:30:c9:de:4c:61:fd:bb:61:bc:12:9a:d9:7f:fd:
81:95:f0:fe:a1:fa:2d:cf:6a:ec:a5:77:db:ff:15:
6e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:27:B9:C5:C3:3E:E9:C3:2F:46:AA:E8:1D:AA:26:41:6C:C9:DF:B0
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8a:99:dc:62:05:1a:28:61:f8:9b:d9:5d:e4:53:f2:fa:fb:
1d:1f:22:e2:53:bd:a3:b4:a1:19:18:4f:81:88:2d:20:bd:cb:
dc:76:55:ad:b6:d2:18:04:fe:81:f0:ff:d8:75:2c:37:76:b0:
49:fe:81:29:7a:f1:eb:fd:58:25:cc:63:81:23:8e:9e:0c:ee:
ce:90:b7:12:7f:7b:ca:bf:e7:9f:fa:67:5f:ca:14:ea:59:12:
f1:34:ce:44:93:69:ed:5c:8f:6f:89:6d:81:07:98:45:23:93:
20:ce:a4:04:54:5f:8b:b3:cf:68:b7:9a:29:68:aa:20:75:97:
b6:9b:3c:4a:63:d7:7e:9f:a1:db:33:d2:02:dd:fa:17:2f:a3:
90:fe:90:76:50:13:35:a8:7c:02:ff:db:71:2e:a7:44:70:ef:
ef:aa:ff:9a:52:70:53:bc:f6:5d:b5:c0:01:ff:93:98:c3:8e:
fa:35:db:b4:8b:7e:77:d6:5b:7d:47:26:02:f2:60:41:74:60:
c6:b1:5c:e4:22:13:51:c5:39:fc:06:3c:54:99:bc:ad:e4:42:
c9:fe:5d:67:5e:68:e2:73:a9:7a:52:85:56:b5:c3:80:06:90:
a5:62:3b:b1:95:a5:48:3b:69:fe:aa:07:af:b5:02:b2:93:09:
d4:b9:8e:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY5vE0T9UB6rtsgVbXm7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYWQzMDNiYzcwYjEyZjgzZGJmODlmYzE0ODljYjQ2MTJj
ZjU1MjYwHhcNMjUwMjAyMDIwMDQ5WhcNMjUwMjAzMDIwMDQ5WjAzMTEwLwYDVQQD
Eyg1MjI3YjljNWMzM2VlOWMzMmY0NmFhZTgxZGFhMjY0MTZjYzlkZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SAs6vTtzs8sRU/hgIMn9KhWEejM
NcQ6KMjC4L202t6E05PbpTshj6OnnNMwKy0LIgO2fdEqj4ggNMVP+ozorwACbLuE
Dz7SrT0H2NF8pbNkW44/0tKO80q6DyIQNip8+BOc86cFk1OjMnU/lyllFgalPHQ7
WMT3urE40YYShZWwSJUwgE95gQ3X4M208MV83F9ENuIQQERZ9v0Eym4Rcw2dUT8c
j6uD+wYUPYs0szKmzT/u2MMYNf9daOyMZ+ELE63gtI7BcmIOC8qe7MHMlecfperc
pPhqxTckXsgCqFVUMMneTGH9u2G8EprZf/2BlfD+ofotz2rspXfb/xVuMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFInucXDPunDL0aq6B2qJkFsyd+wMB8GA1UdIwQY
MBaAFIytMDvHCxL4Pb+J/BSJy0YSz1UmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYt
NDgyNTU1NDUyODMxLzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYtNDgyNTU1NDUyODMx
LzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYqZ3GIF
Gihh+JvZXeRT8vr7HR8i4lO9o7ShGRhPgYgtIL3L3HZVrbbSGAT+gfD/2HUsN3aw
Sf6BKXrx6/1YJcxjgSOOngzuzpC3En97yr/nn/pnX8oU6lkS8TTORJNp7VyPb4lt
gQeYRSOTIM6kBFRfi7PPaLeaKWiqIHWXtps8SmPXfp+h2zPSAt36Fy+jkP6QdlAT
Nah8Av/bcS6nRHDv76r/mlJwU7z2XbXAAf+TmMOO+jXbtIt+d9ZbfUcmAvJgQXRg
xrFc5CITUcU5/AY8VJm8reRCyf5dZ15o4nOpelKFVrXDgAaQpWI7sZWlSDtp/qoH
r7UCspMJ1LmOpw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:01 2025 by rpki-client