Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: m4yWBwwROiMnnvaYRAr7h9x+HWCjzCa3zzrA8YPlzCU=
Subject key identifier: 95:78:E0:3A:F8:62:A7:55:22:2C:A7:3C:15:EC:72:EB:37:B6:AD:BD
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 0195116BE6C69D191A17714A74116615270D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 01:00:38 +0000
Manifest this update: Mon 17 Feb 2025 01:00:38 +0000
Manifest next update: Tue 18 Feb 2025 01:00:38 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: l9MTJLy9ApZGDauhS2vlzUnGjZa43basPxAcnyk48is=)
2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:e6:c6:9d:19:1a:17:71:4a:74:11:66:15:27:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Feb 17 01:00:38 2025 GMT
Not After : Feb 18 01:00:38 2025 GMT
Subject: CN=9578e03af862a755222ca73c15ec72eb37b6adbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:4f:cc:6d:d5:6e:c4:a3:09:ea:cd:64:7c:
1b:e7:ff:81:ca:59:53:c8:ba:d7:68:aa:9f:97:6a:
73:1b:c3:5c:dc:e6:19:98:ac:12:cc:1a:1a:e2:d2:
b1:8c:a9:15:fa:ce:3c:22:54:3c:96:ab:57:a9:46:
5e:b6:07:3f:a3:4c:1b:3d:77:a8:40:c4:da:06:2a:
43:af:e0:b0:ed:ca:30:44:c4:10:b7:ed:dd:28:a5:
72:1b:88:74:b4:7c:ed:52:15:32:b8:dd:cf:36:66:
94:cb:15:c4:47:1f:af:d5:ce:09:2e:e6:50:4d:14:
68:bd:7a:c6:07:0a:06:29:ea:e6:33:11:89:2c:2c:
fd:6d:fe:fa:fd:77:c1:11:be:50:1e:bc:24:84:cb:
b7:75:0d:07:ce:8f:fe:ef:df:6e:7d:6f:2b:60:8e:
ce:02:d1:93:86:4b:34:8d:6e:88:ff:48:bb:58:c0:
fa:5d:59:56:1d:a4:72:b6:d9:8b:86:3b:a4:61:77:
5d:06:3b:c0:16:fe:8f:cc:5a:b1:f2:83:0c:0b:17:
f8:76:d3:a4:ad:0f:b7:fb:ed:7e:c1:70:9b:cc:71:
b1:ab:cf:c6:f8:50:ec:1f:c2:a5:02:01:26:ab:f1:
57:52:4d:76:1e:de:d5:d6:b6:97:06:a8:4b:f3:40:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:E0:3A:F8:62:A7:55:22:2C:A7:3C:15:EC:72:EB:37:B6:AD:BD
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3c:7a:e4:f8:a2:a1:10:b9:b0:f3:cf:6a:e5:c9:a5:37:b3:
f0:96:f4:d3:69:9f:7a:72:a6:2a:b1:f7:67:be:15:ef:b9:5f:
f3:30:11:3c:6e:f1:8b:d2:01:36:0f:c2:a3:ff:5a:06:d4:ef:
41:0d:dd:4a:24:a5:d7:c9:58:51:ab:a2:c8:16:ab:de:09:24:
6d:7e:73:f9:cd:e0:c0:30:55:a7:a9:71:0d:d0:27:7f:a6:25:
73:52:f4:80:2d:07:b9:99:51:39:b5:86:24:f0:21:50:a4:ae:
1f:ac:ec:16:b4:a7:59:1d:06:b4:61:8e:09:5c:5f:01:b7:81:
cb:97:b2:fd:0d:2f:69:b1:05:9f:5d:0b:de:a3:d7:71:8e:bc:
a2:b7:ac:fb:16:9e:c9:0e:2d:fe:49:53:aa:87:30:b1:f7:7a:
0b:3c:02:23:a8:94:65:67:de:a3:78:0f:c5:e3:bf:07:f2:e5:
a1:61:07:ac:17:ce:26:08:e3:41:d0:46:12:f3:fd:dc:99:e5:
30:ae:90:59:12:5c:0e:e9:2e:b9:43:85:ab:7d:66:fa:6e:18:
2b:e9:8c:bf:2b:6c:7a:6a:17:10:35:9e:ea:45:d6:86:82:d2:
76:6d:85:50:19:08:f3:bd:b3:10:59:06:97:cc:82:ef:1a:9a:
98:03:cf:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa+bGnRkaF3FKdBFmFScNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjZjZDMwYjRjZmExOTNlMjI2YmJhOTI4MmUzNjZhMjJh
MzExMGYwHhcNMjUwMjE3MDEwMDM4WhcNMjUwMjE4MDEwMDM4WjAzMTEwLwYDVQQD
Eyg5NTc4ZTAzYWY4NjJhNzU1MjIyY2E3M2MxNWVjNzJlYjM3YjZhZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSxPzG3VbsSjCerNZHwb5/+ByllT
yLrXaKqfl2pzG8Nc3OYZmKwSzBoa4tKxjKkV+s48IlQ8lqtXqUZetgc/o0wbPXeo
QMTaBipDr+Cw7cowRMQQt+3dKKVyG4h0tHztUhUyuN3PNmaUyxXERx+v1c4JLuZQ
TRRovXrGBwoGKermMxGJLCz9bf76/XfBEb5QHrwkhMu3dQ0Hzo/+799ufW8rYI7O
AtGThks0jW6I/0i7WMD6XVlWHaRyttmLhjukYXddBjvAFv6PzFqx8oMMCxf4dtOk
rQ+3++1+wXCbzHGxq8/G+FDsH8KlAgEmq/FXUk12Ht7V1raXBqhL80CRdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV44Dr4YqdVIiynPBXscus3tq29MB8GA1UdIwQY
MBaAFND2zTC0z6GT4ia7qSguNmoioxEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQt
ZTI5OWU5MTAwMzllLzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQtZTI5OWU5MTAwMzll
LzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDx65Pii
oRC5sPPPauXJpTez8Jb002mfenKmKrH3Z74V77lf8zARPG7xi9IBNg/Co/9aBtTv
QQ3dSiSl18lYUauiyBar3gkkbX5z+c3gwDBVp6lxDdAnf6Ylc1L0gC0HuZlRObWG
JPAhUKSuH6zsFrSnWR0GtGGOCVxfAbeBy5ey/Q0vabEFn10L3qPXcY68ores+xae
yQ4t/klTqocwsfd6CzwCI6iUZWfeo3gPxeO/B/LloWEHrBfOJgjjQdBGEvP93Jnl
MK6QWRJcDukuuUOFq31m+m4YK+mMvytsemoXEDWe6kXWhoLSdm2FUBkI872zEFkG
l8yC7xqamAPPkA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:25 2025 by rpki-client