Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier: 25cj9gGPNXAMFrXoCl2YusH/oVeFGA4iN7m/wVKJh3s=
Subject key identifier: 79:0A:73:46:20:48:EA:40:92:30:BE:9C:D8:63:CD:F9:FA:9E:F7:C1
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial: 0194C5085538985C247F77109B9EAB111991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number: 04BE
Signing time: Sun 02 Feb 2025 05:00:45 +0000
Manifest this update: Sun 02 Feb 2025 05:00:45 +0000
Manifest next update: Mon 03 Feb 2025 05:00:45 +0000
Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: +lOHlIq+rj3bA2WOTNMLnOiuOvPX4eeSMbJwFl7HfxI=)
2: _kNyIo0elab0AX-AZl6-Wfa7Vf4.roa (hash: wDY0OVb6O20WgRVNC3x/4ucGS15YyhNH0PrMxdCX/4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:55:38:98:5c:24:7f:77:10:9b:9e:ab:11:19:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Validity
Not Before: Feb 2 05:00:45 2025 GMT
Not After : Feb 3 05:00:45 2025 GMT
Subject: CN=790a73462048ea409230be9cd863cdf9fa9ef7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:1e:3d:fe:3d:86:ac:6d:e3:be:dd:3a:af:
fc:c4:45:ed:fb:9b:44:a9:53:ca:0c:b6:46:b1:59:
5c:83:2c:94:f0:55:77:2d:88:31:66:96:e2:16:bd:
1d:81:2c:38:8e:80:e7:66:61:10:71:1b:fe:ad:77:
a0:13:50:aa:c1:bd:e0:b1:91:59:b5:8a:15:e8:6d:
b6:4a:cf:9b:a4:f2:4a:c6:b5:eb:00:d2:cc:6f:86:
6a:1c:de:02:0b:d1:9d:df:c9:75:24:e4:3b:ec:94:
ea:ee:86:a7:22:7a:13:5b:b0:bd:8d:14:e7:21:9d:
62:eb:c1:9b:06:38:a3:9d:85:3d:be:5f:37:69:05:
5c:6d:2e:a4:e7:a2:ed:94:09:50:74:04:9b:a5:7f:
cf:4d:55:d6:58:0b:01:da:83:15:73:82:77:75:94:
31:53:46:a3:50:9f:92:1e:9b:28:99:f0:76:49:5c:
98:93:ac:0c:99:24:26:f9:d6:9a:c0:99:1b:f6:3f:
a3:89:f0:dc:2f:5b:e4:f9:48:e5:cc:cb:a6:98:39:
ca:d6:93:36:f4:17:6e:8a:c8:8d:1c:7d:d9:6b:90:
f9:06:4c:a8:03:33:68:40:82:4a:ae:e7:af:f0:e6:
23:ee:ba:3b:fb:2f:b7:e2:88:09:f4:fe:5e:c7:a0:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0A:73:46:20:48:EA:40:92:30:BE:9C:D8:63:CD:F9:FA:9E:F7:C1
X509v3 Authority Key Identifier:
keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:49:75:8a:23:c5:eb:64:ee:41:af:71:8a:32:bd:40:5f:78:
c2:20:7d:88:da:e1:68:f5:83:0d:1f:c4:04:e2:25:43:2d:40:
39:50:7b:05:83:5c:b7:c9:c5:9a:28:3e:a7:f8:5b:bf:10:02:
f0:9e:2a:b5:bf:de:80:ce:0a:38:8f:7b:4c:44:7f:41:3b:de:
35:c3:5a:00:c0:97:91:98:0a:a0:d9:d8:25:88:70:16:ad:f7:
f1:92:fb:16:93:c6:a4:f7:c4:78:03:1c:5d:b1:91:58:bc:59:
a0:bd:3f:c7:e5:a9:81:ba:77:72:42:0c:56:c8:86:1a:15:2a:
63:49:89:00:ad:d1:27:4c:ad:de:a0:76:a0:9a:05:b1:5a:91:
b7:d6:88:ba:c8:58:37:7e:2b:81:d3:a2:e9:74:c0:e6:23:3e:
82:c1:cf:1a:86:49:a2:18:77:39:1f:ca:5f:66:91:e5:b4:46:
ad:f8:94:98:d6:da:24:eb:72:7a:f5:ac:fb:5c:2f:cd:40:c3:
82:e3:72:9a:55:a7:84:b8:af:a4:25:bc:b3:66:a7:8c:b3:f0:
4c:8c:bc:91:30:44:7c:69:be:30:3a:28:f4:ac:d8:17:79:92:
2b:b1:28:1d:a7:dd:18:c7:3a:5b:d4:87:86:58:8d:a1:a2:1a:
e2:1e:70:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTFCFU4mFwkf3cQm56rERmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZGU4ZTgxMzlmMmM4ZjYyZjg0ODJkMDFiMGFkYjg2YjJh
MWQxOTUwHhcNMjUwMjAyMDUwMDQ1WhcNMjUwMjAzMDUwMDQ1WjAzMTEwLwYDVQQD
Eyg3OTBhNzM0NjIwNDhlYTQwOTIzMGJlOWNkODYzY2RmOWZhOWVmN2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5QePf49hqxt477dOq/8xEXt+5tE
qVPKDLZGsVlcgyyU8FV3LYgxZpbiFr0dgSw4joDnZmEQcRv+rXegE1Cqwb3gsZFZ
tYoV6G22Ss+bpPJKxrXrANLMb4ZqHN4CC9Gd38l1JOQ77JTq7oanInoTW7C9jRTn
IZ1i68GbBjijnYU9vl83aQVcbS6k56LtlAlQdASbpX/PTVXWWAsB2oMVc4J3dZQx
U0ajUJ+SHpsomfB2SVyYk6wMmSQm+daawJkb9j+jifDcL1vk+UjlzMummDnK1pM2
9BduisiNHH3Za5D5BkyoAzNoQIJKruev8OYj7ro7+y+34ogJ9P5ex6B5SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkKc0YgSOpAkjC+nNhjzfn6nvfBMB8GA1UdIwQY
MBaAFFzejoE58sj2L4SC0BsK24ayodGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMt
MDM4OTE4ZWI3MjBmLzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMtMDM4OTE4ZWI3MjBm
LzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEl1iiPF
62TuQa9xijK9QF94wiB9iNrhaPWDDR/EBOIlQy1AOVB7BYNct8nFmig+p/hbvxAC
8J4qtb/egM4KOI97TER/QTveNcNaAMCXkZgKoNnYJYhwFq338ZL7FpPGpPfEeAMc
XbGRWLxZoL0/x+Wpgbp3ckIMVsiGGhUqY0mJAK3RJ0yt3qB2oJoFsVqRt9aIushY
N34rgdOi6XTA5iM+gsHPGoZJohh3OR/KX2aR5bRGrfiUmNbaJOtyevWs+1wvzUDD
guNymlWnhLivpCW8s2anjLPwTIy8kTBEfGm+MDoo9KzYF3mSK7EoHafdGMc6W9SH
hliNoaIa4h5wTA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:55 2025 by rpki-client