Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: mD52kKYfzMf0BaPEknvJUzL8pUNx8UcGTJTNerbPeIM=
Subject key identifier: 97:58:25:2D:2E:EE:27:4C:00:C6:FC:FF:C3:BB:35:36:16:CB:F7:AE
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 019511D9B614EBB884C2F3030C8DC4AFF6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 13E9
Signing time: Mon 17 Feb 2025 03:00:35 +0000
Manifest this update: Mon 17 Feb 2025 03:00:35 +0000
Manifest next update: Tue 18 Feb 2025 03:00:35 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: cV2XB3/im5xVFXY4H19G23VMqy2Iuo3uaeDvQI0t5LY=)
2: H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa (hash: Rauzo4l8LbEJsHoIgmNH9pstkYvXoM+T/qkFcHjlqFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:b6:14:eb:b8:84:c2:f3:03:0c:8d:c4:af:f6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Feb 17 03:00:35 2025 GMT
Not After : Feb 18 03:00:35 2025 GMT
Subject: CN=9758252d2eee274c00c6fcffc3bb353616cbf7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:4d:a5:cd:39:d1:62:f0:8e:c8:3a:20:2e:
a8:04:50:5e:3f:c1:74:1e:41:2c:12:51:66:30:6a:
44:76:0f:03:f7:b3:ed:ed:a3:a3:32:dd:34:8d:8e:
b5:5b:6e:90:58:33:dd:db:1e:46:6c:ab:ab:12:57:
b1:41:6a:5c:44:fb:9d:c9:92:08:d8:52:e3:6a:ff:
69:d9:c0:8f:a6:c2:95:e9:ad:30:1e:cc:b7:dc:8e:
2a:f6:fe:a5:34:8d:c8:b1:84:e0:d5:2a:5d:42:d2:
5d:40:8b:d6:cb:43:ce:39:a2:6b:7e:23:40:a2:3f:
26:92:82:d6:05:f4:5d:f9:b8:77:bc:bb:49:4a:79:
e0:a1:03:b2:46:d8:c3:2f:a8:99:31:04:ac:b7:03:
ff:4b:d3:59:d0:7e:ea:e4:a3:50:f5:4b:29:5c:26:
35:10:b1:bb:d2:bd:55:f3:ee:70:77:41:e2:48:27:
64:0b:43:9d:67:93:19:49:e5:04:63:76:2d:e1:1e:
95:37:a6:c1:4f:5f:97:26:d8:db:ec:4f:4f:69:ff:
3b:3c:b7:19:12:e4:72:ac:1f:e8:ce:32:07:74:34:
83:43:4b:29:7c:ad:75:da:a5:f7:c0:9d:4c:03:f0:
90:36:63:8d:e2:14:80:b3:fb:98:42:c5:a5:ff:ff:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:58:25:2D:2E:EE:27:4C:00:C6:FC:FF:C3:BB:35:36:16:CB:F7:AE
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0e:b5:80:9f:d9:06:96:b9:a2:aa:c0:8b:cc:5d:eb:21:f2:
57:77:4f:d7:73:c9:d3:70:75:bf:e8:bb:ff:4a:60:4f:2b:f7:
8b:5d:ab:98:4b:f6:83:ec:a0:dc:31:26:54:f9:d2:d3:c5:13:
45:09:48:67:10:2a:f1:7e:c9:3f:96:fb:63:2e:5d:91:eb:ee:
c5:ed:64:32:e3:6d:39:6a:88:54:64:ef:a5:9f:36:e1:8f:86:
de:e8:e3:29:18:fe:39:5e:54:01:53:54:f3:c3:96:50:ad:8a:
7b:08:98:01:e7:0a:40:a0:d6:df:0d:d5:4d:43:c6:d1:01:1a:
09:66:ac:39:a5:92:63:f6:d1:6e:4c:c2:16:ac:e5:36:e4:1b:
5d:cc:c3:36:d5:78:7a:70:4b:be:ce:13:2d:ef:d1:29:dd:23:
e5:14:0b:ee:66:ba:e5:3c:ae:ad:06:a1:a4:aa:94:3f:54:10:
d5:ec:19:47:44:38:4f:9f:15:62:92:a9:1a:32:be:56:a2:b9:
1d:4c:0c:c5:ef:6f:ce:d0:ad:57:15:fe:3d:35:6c:b9:0d:1d:
6a:a4:b0:59:92:e5:73:c3:fd:ed:ce:d4:2b:9b:25:46:c0:65:
fd:78:37:a4:bc:d9:a2:c6:0d:b3:a6:46:98:5e:4d:64:4c:f1:
f2:f8:f6:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2bYU67iEwvMDDI3Er/aqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODZjMjc3ZjZjYTgwOGFmZGNhMDU2NzNmNGI2YzI1NzM5
NzRlM2UwHhcNMjUwMjE3MDMwMDM1WhcNMjUwMjE4MDMwMDM1WjAzMTEwLwYDVQQD
Eyg5NzU4MjUyZDJlZWUyNzRjMDBjNmZjZmZjM2JiMzUzNjE2Y2JmN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sdNpc050WLwjsg6IC6oBFBeP8F0
HkEsElFmMGpEdg8D97Pt7aOjMt00jY61W26QWDPd2x5GbKurElexQWpcRPudyZII
2FLjav9p2cCPpsKV6a0wHsy33I4q9v6lNI3IsYTg1SpdQtJdQIvWy0POOaJrfiNA
oj8mkoLWBfRd+bh3vLtJSnngoQOyRtjDL6iZMQSstwP/S9NZ0H7q5KNQ9UspXCY1
ELG70r1V8+5wd0HiSCdkC0OdZ5MZSeUEY3Yt4R6VN6bBT1+XJtjb7E9Paf87PLcZ
EuRyrB/ozjIHdDSDQ0spfK112qX3wJ1MA/CQNmON4hSAs/uYQsWl//9khQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdYJS0u7idMAMb8/8O7NTYWy/euMB8GA1UdIwQY
MBaAFPeGwnf2yoCK/coFZz9LbCVzl04+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQt
ZmNhMjQ1MzQzNGM5LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQtZmNhMjQ1MzQzNGM5
LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQ61gJ/Z
Bpa5oqrAi8xd6yHyV3dP13PJ03B1v+i7/0pgTyv3i12rmEv2g+yg3DEmVPnS08UT
RQlIZxAq8X7JP5b7Yy5dkevuxe1kMuNtOWqIVGTvpZ824Y+G3ujjKRj+OV5UAVNU
88OWUK2KewiYAecKQKDW3w3VTUPG0QEaCWasOaWSY/bRbkzCFqzlNuQbXczDNtV4
enBLvs4TLe/RKd0j5RQL7ma65TyurQahpKqUP1QQ1ewZR0Q4T58VYpKpGjK+VqK5
HUwMxe9vztCtVxX+PTVsuQ0daqSwWZLlc8P97c7UK5slRsBl/Xg3pLzZosYNs6ZG
mF5NZEzx8vj2LA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:07 2025 by rpki-client