Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
File: YMjVd0f3KXAO8vVhT2397I0Rny0.mft (raw, json)
Hash identifier: ltMzJuyqV7cCFtGyxvZd4cFw8MeZ9FvjptuOIbtV11U=
Subject key identifier: F8:D6:07:CD:57:37:A3:96:2C:A6:A1:1A:F2:C3:93:8F:D4:72:3A:DE
Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
Certificate issuer: /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Certificate serial: 0194C35113F4EA49F872F75C0E5C7D1C6278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
Manifest number: 0D09
Signing time: Sat 01 Feb 2025 21:00:58 +0000
Manifest this update: Sat 01 Feb 2025 21:00:58 +0000
Manifest next update: Sun 02 Feb 2025 21:00:58 +0000
Files and hashes: 1: YMjVd0f3KXAO8vVhT2397I0Rny0.crl (hash: o3uQwaH4vFf2+l5QlhzbG8LBILUsQCYXm+dyb4+UPV8=)
2: qx-NGj8MV_Cd9zpPet-1VEa08Ro.roa (hash: cxZbSa6oQLmYFFxeIAfjlhTWw1+qGjLvscb3SdGJg1o=)
3: r2K_C06ic0Dj0a3NFZhhI6ooNvs.roa (hash: bne8Sm5wB0CMu858I+GoE6ZpkxWpdhA80NITFW1Cun8=)
4: yeRaarOsqQL6T8MId8Dw-zjDpyI.roa (hash: PcKi02vr0pDiDVlpa/LbtFTT0UyPuUQNtlWvZyQzOuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:51:13:f4:ea:49:f8:72:f7:5c:0e:5c:7d:1c:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Validity
Not Before: Feb 1 21:00:58 2025 GMT
Not After : Feb 2 21:00:58 2025 GMT
Subject: CN=f8d607cd5737a3962ca6a11af2c3938fd4723ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:53:c4:97:13:15:e2:51:f6:e6:71:7c:3f:6c:
27:a8:4d:fa:80:4d:f3:f8:5e:34:c9:59:a5:2d:ff:
32:d0:15:01:5f:e3:94:7f:3b:56:9b:8b:c9:ea:fa:
28:14:fc:11:39:c5:dd:30:68:0e:e4:76:31:11:da:
86:68:76:07:4b:17:3c:42:31:9b:bc:2a:2b:5e:97:
e0:35:a6:a8:24:e4:a4:4e:18:7c:9e:5c:11:ba:db:
01:0f:58:17:6a:36:ff:bf:1d:4d:fb:87:09:8b:6a:
78:54:60:1e:4f:1c:88:9b:de:df:2e:fc:41:78:ee:
76:19:2b:e3:8e:aa:cc:8b:db:e5:3b:e3:2d:1a:a6:
c9:0a:32:bc:38:4c:6d:c5:fe:67:83:7d:52:82:7c:
0b:40:e6:c3:e4:2f:13:1e:bd:d6:9a:92:7f:b3:27:
c1:7a:79:bc:77:84:44:57:6b:24:b1:c5:3e:b5:27:
23:dd:87:8c:31:c1:e8:d9:84:3f:b5:7d:68:3a:de:
80:47:ea:a8:ac:52:10:80:46:3c:7a:49:66:2f:9f:
cf:66:94:ee:ef:fd:15:45:4a:c4:bb:0f:6b:51:02:
d3:f4:50:97:29:e8:bb:c1:bf:7d:d3:69:0f:77:58:
7a:fd:d1:ed:4e:04:9a:43:f5:dd:d0:32:be:82:d2:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:07:CD:57:37:A3:96:2C:A6:A1:1A:F2:C3:93:8F:D4:72:3A:DE
X509v3 Authority Key Identifier:
keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c5:bc:66:09:1f:67:8a:01:eb:88:d2:35:f6:27:a6:9a:09:
7c:ff:27:ea:51:be:a1:f9:37:84:a5:72:36:70:3a:b7:81:2b:
19:da:6b:44:9f:30:43:a4:07:14:98:7a:c9:e3:51:fc:d4:55:
ed:cf:ce:7b:d5:fd:f2:16:14:97:b1:7e:4e:bd:69:46:04:2f:
10:e0:01:3d:f9:6d:c6:44:eb:54:5e:24:62:ed:2b:b9:b3:80:
3f:6d:78:8a:a5:59:21:44:b5:14:51:e5:2e:63:fb:8c:6a:e8:
7f:00:ad:d9:f5:d4:46:08:7a:4e:35:fb:71:d9:53:24:16:c8:
1c:98:1b:bf:62:65:de:23:f2:4c:f2:05:b0:d3:19:e5:61:d9:
35:dd:29:6f:e4:b4:8c:1c:49:c8:2f:d1:97:e7:ed:9b:7a:b7:
08:d3:c3:be:89:bd:b7:63:0b:4e:f2:11:ae:9c:e1:99:f8:d9:
ed:50:74:47:0f:3e:c6:2e:73:b8:4b:cb:0e:ca:45:c5:c6:ec:
99:ae:3a:57:7e:de:de:c9:e7:41:d2:7c:e0:3d:d2:28:b9:e1:
e6:13:0f:c7:79:1a:16:6e:b8:d9:a9:e7:ec:5a:6c:56:1e:ae:
8d:82:cb:42:d0:5a:0c:c8:ea:46:6d:e7:19:c5:bc:0b:e0:75:
cb:a3:fe:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDURP06kn4cvdcDlx9HGJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzhkNTc3NDdmNzI5NzAwZWYyZjU2MTRmNmRmZGVjOGQx
MTlmMmQwHhcNMjUwMjAxMjEwMDU4WhcNMjUwMjAyMjEwMDU4WjAzMTEwLwYDVQQD
EyhmOGQ2MDdjZDU3MzdhMzk2MmNhNmExMWFmMmMzOTM4ZmQ0NzIzYWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FPElxMV4lH25nF8P2wnqE36gE3z
+F40yVmlLf8y0BUBX+OUfztWm4vJ6vooFPwROcXdMGgO5HYxEdqGaHYHSxc8QjGb
vCorXpfgNaaoJOSkThh8nlwRutsBD1gXajb/vx1N+4cJi2p4VGAeTxyIm97fLvxB
eO52GSvjjqrMi9vlO+MtGqbJCjK8OExtxf5ng31SgnwLQObD5C8THr3WmpJ/syfB
enm8d4REV2skscU+tScj3YeMMcHo2YQ/tX1oOt6AR+qorFIQgEY8eklmL5/PZpTu
7/0VRUrEuw9rUQLT9FCXKei7wb9902kPd1h6/dHtTgSaQ/Xd0DK+gtIxQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjWB81XN6OWLKahGvLDk4/UcjreMB8GA1UdIwQY
MBaAFGDI1XdH9ylwDvL1YU9t/eyNEZ8tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgt
ZDc1ZjU5NWZhN2MzLzEvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgtZDc1ZjU5NWZhN2Mz
LzEvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8W8Zgkf
Z4oB64jSNfYnppoJfP8n6lG+ofk3hKVyNnA6t4ErGdprRJ8wQ6QHFJh6yeNR/NRV
7c/Oe9X98hYUl7F+Tr1pRgQvEOABPfltxkTrVF4kYu0rubOAP214iqVZIUS1FFHl
LmP7jGrofwCt2fXURgh6TjX7cdlTJBbIHJgbv2Jl3iPyTPIFsNMZ5WHZNd0pb+S0
jBxJyC/Rl+ftm3q3CNPDvom9t2MLTvIRrpzhmfjZ7VB0Rw8+xi5zuEvLDspFxcbs
ma46V37e3snnQdJ84D3SKLnh5hMPx3kaFm642ann7FpsVh6ujYLLQtBaDMjqRm3n
GcW8C+B1y6P+eA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:53:34 2025 by rpki-client