Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: 8mffMzgauI2Ev4fDAwzLml1/khqa7RTiqJkP0sHbxrc=
Subject key identifier: 09:EA:67:78:5A:15:84:10:2F:11:84:CA:83:47:BC:9D:59:D6:0C:0E
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 0194C3BE55BE7CC0A05C61203C7F6530876A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 0F8D
Signing time: Sat 01 Feb 2025 23:00:18 +0000
Manifest this update: Sat 01 Feb 2025 23:00:18 +0000
Manifest next update: Sun 02 Feb 2025 23:00:18 +0000
Files and hashes: 1: B2A3BpQa6eyFwAFfUgOMe5Hgczc.roa (hash: AKXMLNeE6uazxzvUS4fTVViZNPYvrBWGv5qRJTtd/Lc=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: DBKm88y7EHKmPgEnbK3njmt93FixgJnEhih6e4dWFoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:55:be:7c:c0:a0:5c:61:20:3c:7f:65:30:87:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Feb 1 23:00:18 2025 GMT
Not After : Feb 2 23:00:18 2025 GMT
Subject: CN=09ea67785a1584102f1184ca8347bc9d59d60c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:c3:bd:64:04:cc:99:6b:0c:23:0f:68:1c:
90:1d:a1:e5:c3:63:24:99:39:98:66:3d:9f:71:79:
74:e4:29:d2:cd:d6:5f:56:9a:49:f6:95:81:d6:11:
ba:d9:5e:b6:93:78:5b:0c:6b:e7:d5:26:0b:f5:5d:
df:f0:1d:5c:d7:87:13:d8:10:ab:f4:b4:95:c8:47:
91:63:d8:ba:6a:e5:a6:71:2d:c5:79:fb:32:de:6a:
71:6b:1b:9a:68:76:7c:29:2a:d9:26:bd:78:5e:ba:
63:a2:db:94:6d:56:6d:26:97:7f:4a:e4:c3:ab:4a:
99:af:c9:ee:8c:b4:10:fd:c4:d2:19:80:14:b5:bf:
11:3f:b9:22:7c:66:2e:41:ea:e3:4f:79:0f:40:8a:
8e:29:ae:11:57:8f:e7:dc:51:0e:2f:1d:73:9c:be:
fe:b0:8b:82:03:eb:ff:9a:96:58:7e:60:31:c2:32:
1a:1b:2f:33:86:dc:33:04:dc:7a:cb:2f:4c:30:56:
d3:73:24:13:77:0d:d3:ef:90:dd:26:3f:97:01:51:
c7:d0:5d:4f:17:49:d7:91:e3:52:a8:63:04:36:5b:
92:78:81:4b:93:1e:ba:53:00:26:f0:18:09:a8:be:
a4:b1:8f:93:7f:64:00:e9:96:f1:b9:f6:7f:2b:e4:
d8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EA:67:78:5A:15:84:10:2F:11:84:CA:83:47:BC:9D:59:D6:0C:0E
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b3:42:37:9b:19:f6:6a:30:d1:a3:51:47:f2:d4:29:41:ba:
f7:58:26:95:48:2f:5c:29:79:1f:12:4b:39:51:9e:a5:69:b7:
23:75:8f:33:7d:64:5c:6e:d1:4d:96:82:6f:0a:c6:cb:31:61:
71:ed:15:86:25:a7:b5:55:0c:56:41:50:c7:6d:b8:8e:ff:5a:
90:7e:63:9f:7e:7b:21:4e:8c:2f:1a:ae:47:dc:a3:9b:b1:c7:
99:78:6a:f1:a4:62:03:dc:31:2e:3a:85:c8:e7:19:41:a0:37:
29:82:3b:0d:5e:06:75:01:98:48:55:bc:13:dc:0a:fc:31:03:
8d:eb:63:1e:39:96:28:6e:3c:2f:1c:e5:75:8b:16:89:37:ce:
31:8c:43:b1:e2:14:5b:95:18:da:b6:9b:01:b9:b3:7b:a5:d0:
74:af:3f:97:fc:29:70:3e:0a:28:72:71:50:f3:ab:e3:ff:ec:
12:e7:c5:b2:15:70:ac:bc:47:e3:65:5f:00:e5:52:01:31:31:
85:07:bb:41:30:ec:a7:c9:a7:64:10:8d:94:d9:11:8f:c8:7e:
20:ef:95:b0:50:58:c7:b5:56:ad:d6:0b:53:65:19:92:63:47:
e1:d0:9a:e7:af:5e:9a:53:26:8f:8d:6f:62:a2:d1:65:41:10:
5e:05:19:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvlW+fMCgXGEgPH9lMIdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkODAyM2EzODE3ZDUwMjE1MWZiZDA0ODQ0YTdjM2MzNWVl
OTliNDMwHhcNMjUwMjAxMjMwMDE4WhcNMjUwMjAyMjMwMDE4WjAzMTEwLwYDVQQD
EygwOWVhNjc3ODVhMTU4NDEwMmYxMTg0Y2E4MzQ3YmM5ZDU5ZDYwYzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgLDvWQEzJlrDCMPaByQHaHlw2Mk
mTmYZj2fcXl05CnSzdZfVppJ9pWB1hG62V62k3hbDGvn1SYL9V3f8B1c14cT2BCr
9LSVyEeRY9i6auWmcS3Fefsy3mpxaxuaaHZ8KSrZJr14XrpjotuUbVZtJpd/SuTD
q0qZr8nujLQQ/cTSGYAUtb8RP7kifGYuQerjT3kPQIqOKa4RV4/n3FEOLx1znL7+
sIuCA+v/mpZYfmAxwjIaGy8zhtwzBNx6yy9MMFbTcyQTdw3T75DdJj+XAVHH0F1P
F0nXkeNSqGMENluSeIFLkx66UwAm8BgJqL6ksY+Tf2QA6ZbxufZ/K+TYpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnqZ3haFYQQLxGEyoNHvJ1Z1gwOMB8GA1UdIwQY
MBaAFG2AI6OBfVAhUfvQSESnw8Ne6ZtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEt
YjUwOTQ0OTEzYWJmLzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEtYjUwOTQ0OTEzYWJm
LzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbNCN5sZ
9mow0aNRR/LUKUG691gmlUgvXCl5HxJLOVGepWm3I3WPM31kXG7RTZaCbwrGyzFh
ce0VhiWntVUMVkFQx224jv9akH5jn357IU6MLxquR9yjm7HHmXhq8aRiA9wxLjqF
yOcZQaA3KYI7DV4GdQGYSFW8E9wK/DEDjetjHjmWKG48LxzldYsWiTfOMYxDseIU
W5UY2rabAbmze6XQdK8/l/wpcD4KKHJxUPOr4//sEufFshVwrLxH42VfAOVSATEx
hQe7QTDsp8mnZBCNlNkRj8h+IO+VsFBYx7VWrdYLU2UZkmNH4dCa569emlMmj41v
YqLRZUEQXgUZOw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:44:46 2025 by rpki-client