Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
File: RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft (raw, json)
Hash identifier: 1XpaX/16NOD9FP86acfk5ZlJIrsGsVKh6e+BmbXu/7k=
Subject key identifier: 31:A5:42:27:5E:1A:53:57:B3:E8:22:81:C1:04:1C:E6:9A:A9:C4:89
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial: 0195127E426802BD9FF5FAFBB7CA744D107E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
Manifest number: 1461
Signing time: Mon 17 Feb 2025 06:00:19 +0000
Manifest this update: Mon 17 Feb 2025 06:00:19 +0000
Manifest next update: Tue 18 Feb 2025 06:00:19 +0000
Files and hashes: 1: 3sW1LIAP4OPUbWoGQVrBqUkBPNE.roa (hash: kCWjkhC1QbkOCUii1x7Bgqm2WuhU/cK7rFHITNpg92M=)
2: 3z_hCQPug6V4m9xkstRZsP40Tfs.roa (hash: cwnVGLLf1nQI5U8l0+mm70qiUtzVpTMx/mmlCrzQ9JI=)
3: 9NPwe5Cch9DKsApne4lBck33dDg.roa (hash: n5rsnUrmOjZIQ9fY3e7CPhPSBY9CrA1hfcg23aULjnI=)
4: RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl (hash: SYpb1EC/+OlXu9ofece4hNJq/LXYVG1s/Osoznz0/LU=)
5: ZbtF1y6qqiNNF9Kn4_owkJXh8bU.roa (hash: d2ka5QhSCEg5WGvXSWc7XTeM7dxOHFNwQmEQHDweYuE=)
6: gJceF3d-nooj-HNFWfJ7DjrX2tM.roa (hash: UdFUlFj+wie5ycXMTsd/YSKdJbHKvpKDw6EwjwqI0NE=)
7: o5WCBd7B_bdBqX3qKx8Y0fm2X9U.roa (hash: aIK9wfTTcwYlswanyt/B91y3FSF50A1oyK2VXl08Ak8=)
8: rn43qn3Zw0h6I4mjn_pqozEPqCM.roa (hash: COVWEN6aO3USABYS8KWWMLGy3rjTpcWxyvJk+4ZsACI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:42:68:02:bd:9f:f5:fa:fb:b7:ca:74:4d:10:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Validity
Not Before: Feb 17 06:00:19 2025 GMT
Not After : Feb 18 06:00:19 2025 GMT
Subject: CN=31a542275e1a5357b3e82281c1041ce69aa9c489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:57:a5:58:0f:70:05:e3:ac:cb:64:32:b9:
9d:7d:3f:c6:39:47:ad:48:fa:9f:f9:d8:31:74:98:
62:dd:c7:0d:86:65:53:13:dc:0d:2f:56:ac:99:14:
5c:f8:ab:4d:88:50:95:12:42:95:e7:12:20:46:05:
27:af:17:59:3c:cb:45:e2:b5:38:d5:5a:cc:79:05:
e4:4b:d4:81:26:e4:de:2e:4d:1e:c5:6d:6f:91:af:
73:8c:5c:e1:a7:8e:74:18:1a:f8:9e:da:c0:93:01:
a1:b7:2a:b5:15:ad:62:20:63:be:f9:0b:18:ff:55:
b7:5c:ba:5a:c7:94:9b:d5:f3:b6:c5:a0:62:a6:26:
9e:e2:aa:48:f4:d9:b9:35:e4:6a:0a:ca:4a:2f:b8:
65:4b:12:01:66:dc:22:0c:d1:96:88:d2:55:27:b9:
5a:1e:3f:df:49:a2:ee:fc:b2:4d:25:99:66:51:0c:
48:dd:15:2e:1b:47:45:0c:f2:1e:35:dd:6f:2a:6a:
c6:50:13:7c:ae:5a:e1:ac:3d:e9:2b:b2:ba:31:29:
d5:ff:0d:e7:31:c2:1e:4a:dd:25:34:7b:c4:ff:d4:
e5:ca:bc:c5:3d:33:bd:6d:80:ad:c6:c8:16:53:b7:
c6:ff:c0:b6:48:74:b6:a0:68:c7:be:88:47:21:0f:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A5:42:27:5E:1A:53:57:B3:E8:22:81:C1:04:1C:E6:9A:A9:C4:89
X509v3 Authority Key Identifier:
keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b4:aa:7e:f4:63:82:0e:7a:28:0b:17:6e:62:b9:06:86:69:
9d:3d:8c:87:89:c0:7c:64:96:60:fc:e2:f4:15:4f:ee:4c:5a:
1a:fe:74:48:0d:27:8f:3f:37:26:7a:9d:57:23:3b:cb:66:0e:
60:18:39:50:2c:80:fe:15:a7:91:44:15:80:d9:c9:3a:e9:ea:
b3:0f:90:17:00:03:ef:b5:2c:ae:89:7d:b1:e9:77:0a:49:b6:
45:e6:75:1d:f2:dc:d3:54:1a:df:ba:f9:38:98:df:3d:1f:0b:
50:7b:79:eb:f0:d8:f9:7b:68:97:b2:f5:02:2d:ab:28:95:6d:
d9:e4:b9:32:ed:97:4f:7b:6d:a8:8b:c1:09:f3:a6:c9:4f:a3:
70:dd:f1:5b:bc:74:7c:ef:0c:ce:fb:cd:fa:23:ce:7a:fd:34:
e4:61:b2:ef:70:46:c8:6f:c2:af:32:70:23:fe:a2:c2:35:9b:
0b:bf:7f:88:24:29:7a:36:14:ec:f0:ea:09:16:6a:d8:4b:4a:
aa:ac:a0:1c:c5:43:57:d0:e9:aa:0d:f5:b0:2f:ec:8c:e1:b9:
b4:21:e5:7b:06:46:46:44:21:14:c8:b8:3f:b4:4b:2a:e3:02:
d9:06:e8:00:75:dd:ae:de:73:27:8a:9a:a1:b9:17:2d:92:18:
5e:dc:80:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfkJoAr2f9fr7t8p0TRB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YTdlNWEzM2Q5YzVhOTY1ZDlmYmZkZWVjZGM4NzFhZjBh
NWQ0ZjgwHhcNMjUwMjE3MDYwMDE5WhcNMjUwMjE4MDYwMDE5WjAzMTEwLwYDVQQD
EygzMWE1NDIyNzVlMWE1MzU3YjNlODIyODFjMTA0MWNlNjlhYTljNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NVXpVgPcAXjrMtkMrmdfT/GOUet
SPqf+dgxdJhi3ccNhmVTE9wNL1asmRRc+KtNiFCVEkKV5xIgRgUnrxdZPMtF4rU4
1VrMeQXkS9SBJuTeLk0exW1vka9zjFzhp450GBr4ntrAkwGhtyq1Fa1iIGO++QsY
/1W3XLpax5Sb1fO2xaBipiae4qpI9Nm5NeRqCspKL7hlSxIBZtwiDNGWiNJVJ7la
Hj/fSaLu/LJNJZlmUQxI3RUuG0dFDPIeNd1vKmrGUBN8rlrhrD3pK7K6MSnV/w3n
McIeSt0lNHvE/9TlyrzFPTO9bYCtxsgWU7fG/8C2SHS2oGjHvohHIQ/q1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGlQideGlNXs+gigcEEHOaaqcSJMB8GA1UdIwQY
MBaAFESn5aM9nFqWXZ+/3uzchxrwpdT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYt
MjFjZjU2Y2JjZTEyLzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYtMjFjZjU2Y2JjZTEy
LzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrSqfvRj
gg56KAsXbmK5BoZpnT2Mh4nAfGSWYPzi9BVP7kxaGv50SA0njz83JnqdVyM7y2YO
YBg5UCyA/hWnkUQVgNnJOunqsw+QFwAD77Usrol9sel3Ckm2ReZ1HfLc01Qa37r5
OJjfPR8LUHt56/DY+Xtol7L1Ai2rKJVt2eS5Mu2XT3ttqIvBCfOmyU+jcN3xW7x0
fO8MzvvN+iPOev005GGy73BGyG/CrzJwI/6iwjWbC79/iCQpejYU7PDqCRZq2EtK
qqygHMVDV9Dpqg31sC/sjOG5tCHlewZGRkQhFMi4P7RLKuMC2QboAHXdrt5zJ4qa
obkXLZIYXtyAiA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:57 2025 by rpki-client