Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json)
Hash identifier: 3i+OnS8luP+y6E9HJwrp8ouwSlRb3cYvUC2mZAFG6M8=
Subject key identifier: FA:34:FA:9C:69:2D:5E:9A:7F:85:9E:80:41:36:43:7B:91:2F:10:FE
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial: 019510C7D29DEF82A62025C79680BB7746FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
Manifest number: 05FE
Signing time: Sun 16 Feb 2025 22:01:25 +0000
Manifest this update: Sun 16 Feb 2025 22:01:25 +0000
Manifest next update: Mon 17 Feb 2025 22:01:25 +0000
Files and hashes: 1: gzFSDIvuo1g8SYBgsWmT7skIWNo.roa (hash: D7BWQwJQV9C+IDJ4nn09iuxJOEha5Pi+Tmqs9uYeqYg=)
2: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: Z564fM6Grfe4+qek8b+g5IemHUzj7h94X2lG8cVav1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:d2:9d:ef:82:a6:20:25:c7:96:80:bb:77:46:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Validity
Not Before: Feb 16 22:01:25 2025 GMT
Not After : Feb 17 22:01:25 2025 GMT
Subject: CN=fa34fa9c692d5e9a7f859e804136437b912f10fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:f2:1b:63:95:f9:4e:60:62:6b:21:67:34:
12:97:22:37:0e:a6:29:d5:5a:39:0a:6c:00:ac:e2:
e9:5b:7f:52:7a:d4:03:0f:ef:af:c9:75:75:71:4d:
3f:d2:ea:c8:3c:9d:df:d8:91:0c:77:c5:e2:09:8d:
d6:3c:6c:60:cf:ed:c9:ce:88:c5:5a:7d:03:8c:f1:
3e:fe:eb:1b:0a:1b:d2:2b:aa:50:70:0f:93:99:59:
3a:f2:7d:b7:6a:65:b1:e6:ce:9a:21:7c:31:b3:a3:
12:20:9a:86:d5:8f:d6:5c:dd:ed:2e:e4:75:ef:a4:
10:80:04:12:7b:64:99:a4:b8:a7:3a:e2:60:5e:38:
17:9a:16:45:32:ac:4b:c3:52:a7:75:d2:57:b8:60:
99:f4:0f:5d:c4:0a:af:da:9b:cb:e3:70:65:62:e3:
96:75:b7:3f:d1:aa:bd:a3:3e:d5:ef:81:52:ae:e8:
90:86:62:12:fd:f2:98:d5:13:f8:fb:f6:82:98:8d:
e8:e6:f6:08:dc:63:bc:cd:5d:39:d5:66:3d:d8:3f:
d9:37:ef:56:5e:f4:5d:9b:63:50:86:3b:51:4b:26:
0f:29:03:54:64:6b:ef:79:e2:38:22:57:e8:35:47:
2b:a8:48:50:e9:1c:76:1e:5a:31:91:73:c9:83:55:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:34:FA:9C:69:2D:5E:9A:7F:85:9E:80:41:36:43:7B:91:2F:10:FE
X509v3 Authority Key Identifier:
keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:72:15:97:04:87:8c:72:35:52:0d:93:05:78:86:91:2b:4e:
f5:b5:37:28:03:b0:80:f5:b7:27:a4:22:b4:83:5d:b5:7e:a6:
c3:58:9b:4d:34:ea:fc:0e:30:a7:0c:c1:6b:92:4c:45:89:07:
3f:c8:85:ee:65:9a:e6:c6:bb:fb:10:fc:32:b4:7f:1c:5f:f5:
a6:08:f2:f9:3a:bd:72:e7:8a:5f:06:29:3d:42:bf:b5:3b:38:
c3:40:78:dd:29:35:f9:39:45:4d:f3:dd:45:4a:38:26:45:92:
e6:26:32:b2:3f:e3:5c:cf:b9:0a:a5:d1:d4:c6:1a:4e:f1:43:
0a:a2:f4:f8:5f:14:15:ff:41:81:72:e9:07:d0:2f:98:4b:30:
c2:17:e1:9f:c6:52:aa:02:1e:a8:c3:24:d3:be:77:b2:b9:70:
28:b7:a5:67:c6:b7:d2:05:40:e0:c5:d2:1f:48:ed:0b:3f:5b:
75:c5:d2:76:5d:04:ce:65:16:f7:52:1f:74:f7:ed:58:47:00:
d9:30:d9:5a:a6:2c:9c:91:ef:7b:51:ee:f7:3a:2d:df:69:57:
b8:2b:02:1b:f4:8b:c1:b0:31:b2:bd:c6:69:bf:86:91:9b:09:
b1:f3:16:5d:6f:53:65:40:f0:f6:a2:02:f0:17:7c:2d:2b:98:
6b:32:2d:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx9Kd74KmICXHloC7d0b+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0
YmY4MDAwHhcNMjUwMjE2MjIwMTI1WhcNMjUwMjE3MjIwMTI1WjAzMTEwLwYDVQQD
EyhmYTM0ZmE5YzY5MmQ1ZTlhN2Y4NTllODA0MTM2NDM3YjkxMmYxMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQryG2OV+U5gYmshZzQSlyI3DqYp
1Vo5CmwArOLpW39SetQDD++vyXV1cU0/0urIPJ3f2JEMd8XiCY3WPGxgz+3JzojF
Wn0DjPE+/usbChvSK6pQcA+TmVk68n23amWx5s6aIXwxs6MSIJqG1Y/WXN3tLuR1
76QQgAQSe2SZpLinOuJgXjgXmhZFMqxLw1KnddJXuGCZ9A9dxAqv2pvL43BlYuOW
dbc/0aq9oz7V74FSruiQhmIS/fKY1RP4+/aCmI3o5vYI3GO8zV051WY92D/ZN+9W
XvRdm2NQhjtRSyYPKQNUZGvveeI4IlfoNUcrqEhQ6Rx2HloxkXPJg1UVRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPo0+pxpLV6af4WegEE2Q3uRLxD+MB8GA1UdIwQY
MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt
NDhkNWZmNGJhMjU1LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1
LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHIVlwSH
jHI1Ug2TBXiGkStO9bU3KAOwgPW3J6QitINdtX6mw1ibTTTq/A4wpwzBa5JMRYkH
P8iF7mWa5sa7+xD8MrR/HF/1pgjy+Tq9cueKXwYpPUK/tTs4w0B43Sk1+TlFTfPd
RUo4JkWS5iYysj/jXM+5CqXR1MYaTvFDCqL0+F8UFf9BgXLpB9AvmEswwhfhn8ZS
qgIeqMMk0753srlwKLelZ8a30gVA4MXSH0jtCz9bdcXSdl0EzmUW91IfdPftWEcA
2TDZWqYsnJHve1Hu9zot32lXuCsCG/SLwbAxsr3Gab+GkZsJsfMWXW9TZUDw9qIC
8Bd8LSuYazItwQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:39 2025 by rpki-client