Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier: TV7JOPZ0tq67frQ4CE3u5xt0MnW/YCiSR7oC0B1epXI=
Subject key identifier: 20:23:24:88:08:93:7C:CD:29:25:30:6F:70:73:B5:B9:26:60:AB:D9
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 0194C463BD030733B39FAC05C6C79AE266B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number: 083C
Signing time: Sun 02 Feb 2025 02:00:58 +0000
Manifest this update: Sun 02 Feb 2025 02:00:58 +0000
Manifest next update: Mon 03 Feb 2025 02:00:58 +0000
Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=)
2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: hwLnzhaynGLC4HYQopLu+8z183Rir482C4JjOvCQrSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:bd:03:07:33:b3:9f:ac:05:c6:c7:9a:e2:66:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: Feb 2 02:00:58 2025 GMT
Not After : Feb 3 02:00:58 2025 GMT
Subject: CN=2023248808937ccd2925306f7073b5b92660abd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:6a:2d:46:e6:f1:f9:73:a9:74:9c:3f:d9:
bb:7b:e4:4d:20:d5:98:48:c5:f0:0f:d4:56:3c:0c:
9f:44:72:e7:96:07:99:f6:d6:a5:fe:63:32:05:fc:
da:95:da:86:4b:c2:be:20:af:21:27:95:e5:51:9d:
51:39:e5:63:0f:0d:bc:dc:d9:f7:dc:95:e4:f1:54:
9d:34:af:c3:9b:3d:4e:ba:c2:d0:32:96:c0:89:b3:
23:a5:00:d4:62:7a:53:b1:0b:8a:20:80:df:e1:b2:
8b:b0:b2:3f:4f:f3:de:a1:52:01:ba:b8:c0:cd:82:
1a:ee:77:c3:60:50:05:f9:c9:66:d6:8a:7a:82:b6:
af:cd:17:ae:19:3a:ce:0b:7e:78:99:d0:b4:04:cf:
33:0b:49:a3:e4:a8:05:08:d5:24:25:29:66:e0:bc:
a0:eb:40:3f:44:60:61:c3:cb:85:35:d7:d1:b4:af:
0c:72:9c:97:58:98:a0:0e:92:4f:ab:1c:ce:70:c1:
39:36:9d:b6:bd:78:03:43:8f:1c:7b:80:8d:fb:c8:
71:e1:f2:76:db:c6:08:12:6a:db:55:49:a3:1d:97:
be:9b:6d:d5:4a:0f:9e:ca:af:7e:47:04:88:f9:ea:
01:c5:04:f5:32:c4:89:51:c2:be:61:8f:a2:03:7e:
d1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:23:24:88:08:93:7C:CD:29:25:30:6F:70:73:B5:B9:26:60:AB:D9
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:63:b8:19:3a:7a:4f:3a:42:e5:23:33:b1:aa:f4:cf:40:bf:
d0:c7:7b:28:f6:a3:f5:d1:e8:84:ce:22:de:e7:d4:33:90:c0:
5d:10:14:97:bb:36:37:65:45:5f:9e:68:dc:37:35:1a:6d:e2:
fd:3b:ae:7e:bb:4d:4f:97:6a:83:49:fe:ee:1f:33:90:c2:f4:
f0:37:5c:09:33:81:90:8c:eb:ed:ee:74:e7:c1:64:32:4d:51:
a8:6a:e6:05:e8:68:62:f2:2d:12:9f:57:74:99:5c:fb:88:8c:
09:29:78:3c:6e:89:62:4e:25:66:5e:ce:e1:10:54:e9:67:a4:
ad:33:e6:eb:de:c4:7e:c1:ac:e9:ac:63:f3:f9:3a:25:8e:3a:
09:49:58:89:66:96:30:5f:90:a6:57:f5:11:9c:af:47:31:e0:
14:52:53:db:cb:4e:b6:29:6f:a3:b7:70:e4:25:e4:af:bf:fd:
a7:7d:64:3c:ea:30:42:01:ea:fc:68:ed:a8:88:47:bb:dc:63:
e6:89:10:2e:22:92:d1:4f:54:03:0a:d9:cc:72:d9:d6:7b:fa:
a2:21:3a:28:4f:3f:f7:88:82:62:c4:64:d6:7a:53:30:d3:e5:
52:c4:fc:a6:5a:e9:6d:ee:45:36:15:77:d7:a3:b0:38:f7:36:
ee:6a:f2:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY70DBzOzn6wFxsea4mawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmMzNjQ0NzQxMzM2YjAxYjYzODU2MzMxNGY0MGQxMGM2
OWQzMGQwHhcNMjUwMjAyMDIwMDU4WhcNMjUwMjAzMDIwMDU4WjAzMTEwLwYDVQQD
EygyMDIzMjQ4ODA4OTM3Y2NkMjkyNTMwNmY3MDczYjViOTI2NjBhYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdpqLUbm8flzqXScP9m7e+RNINWY
SMXwD9RWPAyfRHLnlgeZ9tal/mMyBfzaldqGS8K+IK8hJ5XlUZ1ROeVjDw283Nn3
3JXk8VSdNK/Dmz1OusLQMpbAibMjpQDUYnpTsQuKIIDf4bKLsLI/T/PeoVIBurjA
zYIa7nfDYFAF+clm1op6gravzReuGTrOC354mdC0BM8zC0mj5KgFCNUkJSlm4Lyg
60A/RGBhw8uFNdfRtK8McpyXWJigDpJPqxzOcME5Np22vXgDQ48ce4CN+8hx4fJ2
28YIEmrbVUmjHZe+m23VSg+eyq9+RwSI+eoBxQT1MsSJUcK+YY+iA37RuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAjJIgIk3zNKSUwb3BztbkmYKvZMB8GA1UdIwQY
MBaAFMdsNkR0EzawG2OFYzFPQNEMadMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMt
MjM2OTdmNzUyZjJlLzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMtMjM2OTdmNzUyZjJl
LzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvGO4GTp6
TzpC5SMzsar0z0C/0Md7KPaj9dHohM4i3ufUM5DAXRAUl7s2N2VFX55o3Dc1Gm3i
/TuufrtNT5dqg0n+7h8zkML08DdcCTOBkIzr7e5058FkMk1RqGrmBehoYvItEp9X
dJlc+4iMCSl4PG6JYk4lZl7O4RBU6WekrTPm697EfsGs6axj8/k6JY46CUlYiWaW
MF+Qplf1EZyvRzHgFFJT28tOtilvo7dw5CXkr7/9p31kPOowQgHq/GjtqIhHu9xj
5okQLiKS0U9UAwrZzHLZ1nv6oiE6KE8/94iCYsRk1npTMNPlUsT8plrpbe5FNhV3
16OwOPc27mry0w==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:32 2025 by rpki-client