Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
File: H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json)
Hash identifier: QAtOb2A+Nz5zNCNRmMQRwRkHYjWDlV6ouCMO+F3ldtw=
Subject key identifier: F2:14:56:B7:94:0F:36:C9:E5:06:DD:C0:9F:66:C2:E6:30:50:B5:48
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Certificate issuer: /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial: 019511A2F28413979CF5476776380950D83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 02:00:46 +0000
Manifest this update: Mon 17 Feb 2025 02:00:46 +0000
Manifest next update: Tue 18 Feb 2025 02:00:46 +0000
Files and hashes: 1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: 2qqDQt68T8intYY7zo4XKZXJ21fmaHrGOq3woukeAwk=)
2: VPSZKXOomg68CX3e2czb5vATzV0.roa (hash: u5eUOziaSNihoip6mFV/l4VWIAiX36Jv1InorW26yng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:f2:84:13:97:9c:f5:47:67:76:38:09:50:d8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Validity
Not Before: Feb 17 02:00:46 2025 GMT
Not After : Feb 18 02:00:46 2025 GMT
Subject: CN=f21456b7940f36c9e506ddc09f66c2e63050b548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:6d:ff:4f:be:f2:82:95:c9:09:56:ed:c9:
fa:33:89:69:99:54:62:35:5b:69:da:c7:20:6a:2c:
ab:88:46:7f:49:c6:5f:15:f1:bb:90:5d:d6:41:c6:
cb:00:88:db:2e:d8:e1:ac:35:bf:62:af:96:a1:73:
f2:7b:db:64:e1:a6:17:59:d5:58:97:79:b1:47:63:
53:c9:94:b7:11:76:31:b3:47:7a:82:60:a2:52:16:
1a:02:6f:5e:d0:0e:d4:be:9b:de:81:70:07:38:90:
2f:2a:b4:e0:80:fa:b3:c4:8f:09:e7:ca:13:10:9d:
95:21:4c:e5:a0:09:80:5d:cb:3f:14:45:ef:ad:c1:
12:9a:9e:27:b6:30:35:f2:54:16:58:c4:6d:26:b7:
46:62:27:e3:82:22:f5:61:cc:e3:b4:c4:2b:2a:19:
0c:52:43:a8:10:c7:38:d7:07:40:59:2d:f4:dc:89:
a2:2c:58:95:00:a1:81:2c:77:0e:22:b9:f9:f0:24:
13:00:c8:ed:ac:cd:b4:9d:c1:87:ec:48:4f:71:03:
39:51:ae:47:fc:b1:38:bb:68:31:7a:b8:88:87:06:
4f:e5:14:e4:00:9f:33:6a:5c:fe:fe:8d:db:fe:36:
27:2b:60:c6:22:5a:56:44:25:3f:08:4f:31:77:9c:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:14:56:B7:94:0F:36:C9:E5:06:DD:C0:9F:66:C2:E6:30:50:B5:48
X509v3 Authority Key Identifier:
keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:96:b0:b7:16:0f:0b:fa:ab:07:18:79:0d:75:05:aa:10:9c:
69:db:c5:d4:1c:8d:ac:a1:c4:5f:02:b2:f8:f7:9a:e4:33:bf:
ea:cc:03:f2:94:65:67:7b:eb:69:b2:b9:96:07:0f:e9:e6:73:
34:23:ad:a4:0f:57:e2:00:8e:5e:9f:a2:7f:27:7e:fc:32:fd:
16:f9:47:88:ec:e9:5f:de:6c:eb:c4:82:ef:09:61:f8:12:25:
d3:22:05:f3:b6:9c:20:52:b7:41:b7:6a:17:66:2d:c5:45:41:
6a:9b:1a:47:c8:b7:52:7b:dc:d7:4b:1c:25:de:3d:5f:d1:42:
3e:86:02:79:ed:75:85:83:de:d7:f6:fa:f3:22:6b:59:5a:ba:
ed:0f:db:85:9c:90:0f:72:a5:71:ea:00:8c:57:5a:ff:5c:1c:
e8:b0:76:14:07:f8:e8:19:b7:32:44:85:49:e3:a4:73:f8:4b:
59:51:e2:ac:73:fa:02:49:41:63:44:38:ba:50:f1:ec:69:6a:
71:d6:c3:8a:e2:c6:a2:71:46:7a:14:06:68:4f:d8:a2:5c:b9:
c2:bd:5f:1d:fd:53:19:b3:a3:ed:19:76:be:0f:7c:65:de:a6:
bf:92:85:70:19:77:0d:4f:4a:54:3f:57:90:b5:5a:97:d9:fb:
4b:d6:e4:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURovKEE5ec9UdndjgJUNg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODk5NTRkYzVhY2E3MGY4MzcyY2Y3YTYyYjVhYmNiOGEx
N2MyYjcwHhcNMjUwMjE3MDIwMDQ2WhcNMjUwMjE4MDIwMDQ2WjAzMTEwLwYDVQQD
EyhmMjE0NTZiNzk0MGYzNmM5ZTUwNmRkYzA5ZjY2YzJlNjMwNTBiNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjBt/0++8oKVyQlW7cn6M4lpmVRi
NVtp2scgaiyriEZ/ScZfFfG7kF3WQcbLAIjbLtjhrDW/Yq+WoXPye9tk4aYXWdVY
l3mxR2NTyZS3EXYxs0d6gmCiUhYaAm9e0A7UvpvegXAHOJAvKrTggPqzxI8J58oT
EJ2VIUzloAmAXcs/FEXvrcESmp4ntjA18lQWWMRtJrdGYifjgiL1YczjtMQrKhkM
UkOoEMc41wdAWS303ImiLFiVAKGBLHcOIrn58CQTAMjtrM20ncGH7EhPcQM5Ua5H
/LE4u2gxeriIhwZP5RTkAJ8zalz+/o3b/jYnK2DGIlpWRCU/CE8xd5yr7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIUVreUDzbJ5QbdwJ9mwuYwULVIMB8GA1UdIwQY
MBaAFB+JlU3FrKcPg3LPemK1q8uKF8K3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRtVlRjV3Nwdy1EY3M5NllyV3J5NG9Yd3JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYmU5ZjMtYjk4Zi00ZGQzLThjOTkt
NGUyZTdlODc0YTQwLzEvSDRtVlRjV3Nwdy1EY3M5NllyV3J5NG9Yd3JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mYmU5ZjMtYjk4Zi00ZGQzLThjOTktNGUyZTdlODc0YTQw
LzEvSDRtVlRjV3Nwdy1EY3M5NllyV3J5NG9Yd3JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJawtxYP
C/qrBxh5DXUFqhCcadvF1ByNrKHEXwKy+Pea5DO/6swD8pRlZ3vrabK5lgcP6eZz
NCOtpA9X4gCOXp+ifyd+/DL9FvlHiOzpX95s68SC7wlh+BIl0yIF87acIFK3Qbdq
F2YtxUVBapsaR8i3Unvc10scJd49X9FCPoYCee11hYPe1/b68yJrWVq67Q/bhZyQ
D3KlceoAjFda/1wc6LB2FAf46Bm3MkSFSeOkc/hLWVHirHP6AklBY0Q4ulDx7Glq
cdbDiuLGonFGehQGaE/Yoly5wr1fHf1TGbOj7Rl2vg98Zd6mv5KFcBl3DU9KVD9X
kLVal9n7S9bkYA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:15 2025 by rpki-client