Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
File: H8jtRm3i5spZZNHu0PJA3dJR3kg.mft (raw, json)
Hash identifier: kyJ9qO/7VOw2VbTDvxOxcOB0u0y3BlgNp4W/1xv/d6U=
Subject key identifier: 73:93:EC:1F:8A:82:95:E6:A6:FC:1A:4B:60:BB:48:6D:C8:58:46:BE
Authority key identifier: 1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
Certificate issuer: /CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Certificate serial: 0195116C25C0A403B26B9E06F97D60CFB405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
Manifest number: 13AD
Signing time: Mon 17 Feb 2025 01:00:54 +0000
Manifest this update: Mon 17 Feb 2025 01:00:54 +0000
Manifest next update: Tue 18 Feb 2025 01:00:54 +0000
Files and hashes: 1: H8jtRm3i5spZZNHu0PJA3dJR3kg.crl (hash: ysN3azZjpyDjPxgCv4MY/Q04OrZCrUN9c1WS83MBSrI=)
2: nevmretTwrxwqsKKQjHFsjVUEY0.roa (hash: fWFJu1Hs2S96Xtm1+v7RRTX9W7ZYHV7fdQSuyQbPzQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:25:c0:a4:03:b2:6b:9e:06:f9:7d:60:cf:b4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Validity
Not Before: Feb 17 01:00:54 2025 GMT
Not After : Feb 18 01:00:54 2025 GMT
Subject: CN=7393ec1f8a8295e6a6fc1a4b60bb486dc85846be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:87:6f:38:6a:c3:d6:d0:85:f3:dd:32:34:
e5:fc:50:89:e9:1d:b2:e6:f9:9c:85:32:64:6b:9f:
39:8a:7a:fc:0c:f2:8f:5e:72:9f:2e:20:94:39:7b:
54:6f:4d:c8:2b:c7:62:b3:1c:3f:2c:bb:34:0e:28:
ec:d0:a7:48:f8:f1:fc:9c:d5:e1:e0:92:92:43:77:
99:29:c9:c3:80:41:e7:62:12:3a:03:95:20:1e:55:
26:fa:a2:91:79:13:07:d9:db:c9:f8:38:21:8d:ec:
30:75:27:76:ee:7f:d9:57:d2:27:dc:ba:9e:60:5c:
69:c3:7f:44:bd:3f:9b:ce:78:6f:fd:af:b7:e7:72:
e4:b5:32:de:23:1c:4b:2a:75:b7:66:e3:53:2c:d1:
28:6a:cc:51:e5:74:b6:a4:0b:dc:1a:ee:0e:02:f1:
e7:69:67:c5:3e:2d:9a:4a:42:c6:92:5b:ab:dd:9a:
57:6f:02:a5:d9:bd:88:82:f1:bd:0b:7d:1e:0d:9a:
36:64:b5:98:af:76:e1:a1:6b:41:71:0a:49:4b:c9:
c3:41:66:b0:c2:95:29:35:d5:ac:0d:3e:10:84:57:
97:4d:22:59:ee:0c:d5:34:f1:c4:94:aa:5a:1c:e9:
e7:b8:d5:df:b0:45:62:ff:67:ad:48:b3:0d:d5:ff:
a0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:93:EC:1F:8A:82:95:E6:A6:FC:1A:4B:60:BB:48:6D:C8:58:46:BE
X509v3 Authority Key Identifier:
keyid:1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e2:35:f1:3a:7a:d3:6d:57:5a:01:44:09:43:b7:25:57:8e:
14:0a:8f:3f:53:63:5c:86:4e:d4:21:3c:b0:f2:c2:2a:ef:ae:
7f:37:25:21:69:e9:eb:99:2c:5b:73:fd:24:fe:0b:b6:73:b9:
18:a8:d1:55:5f:79:60:d1:c0:21:ae:a8:f1:93:7f:60:f8:3b:
38:08:dd:e8:62:79:cd:99:b9:4b:2a:3a:72:ca:0e:fb:66:64:
e3:8a:e3:2f:d2:d3:dc:9f:8a:c1:7e:97:a1:ae:56:06:63:ca:
45:9e:ed:5e:82:ee:62:b0:7f:51:2d:cc:6f:7a:de:27:2a:e3:
18:8b:05:1a:cf:50:37:c5:80:e0:35:24:c7:c2:ff:38:a2:9e:
11:ea:14:c2:69:b9:0a:c5:b0:08:4e:41:5e:3e:4c:d7:db:4b:
df:17:43:d0:c6:dd:b5:ac:4f:4f:fd:6a:d3:24:88:47:4e:4d:
bb:fa:78:70:6f:5f:10:94:51:1a:a5:55:00:c0:72:d8:74:79:
b6:d4:6e:30:15:23:85:b9:77:35:5a:7b:66:71:ac:49:3d:05:
4e:ed:22:4f:ca:1f:db:2a:16:95:20:03:3e:d3:79:3a:91:b0:
d7:fe:b3:01:3f:49:a0:af:cd:98:58:57:19:20:9f:f1:6f:de:
1c:3f:54:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURbCXApAOya54G+X1gz7QFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYzhlZDQ2NmRlMmU2Y2E1OTY0ZDFlZWQwZjI0MGRkZDI1
MWRlNDgwHhcNMjUwMjE3MDEwMDU0WhcNMjUwMjE4MDEwMDU0WjAzMTEwLwYDVQQD
Eyg3MzkzZWMxZjhhODI5NWU2YTZmYzFhNGI2MGJiNDg2ZGM4NTg0NmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJiHbzhqw9bQhfPdMjTl/FCJ6R2y
5vmchTJka585inr8DPKPXnKfLiCUOXtUb03IK8disxw/LLs0Dijs0KdI+PH8nNXh
4JKSQ3eZKcnDgEHnYhI6A5UgHlUm+qKReRMH2dvJ+DghjewwdSd27n/ZV9In3Lqe
YFxpw39EvT+bznhv/a+353LktTLeIxxLKnW3ZuNTLNEoasxR5XS2pAvcGu4OAvHn
aWfFPi2aSkLGklur3ZpXbwKl2b2IgvG9C30eDZo2ZLWYr3bhoWtBcQpJS8nDQWaw
wpUpNdWsDT4QhFeXTSJZ7gzVNPHElKpaHOnnuNXfsEVi/2etSLMN1f+gcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOT7B+KgpXmpvwaS2C7SG3IWEa+MB8GA1UdIwQY
MBaAFB/I7UZt4ubKWWTR7tDyQN3SUd5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDhqdFJtM2k1c3BaWk5IdTBQSkEzZEpSM2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jYTJhY2UtOTRhZC00NGNiLTk4MDkt
ZjQ4ZDRiYWJkNTBmLzEvSDhqdFJtM2k1c3BaWk5IdTBQSkEzZEpSM2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jYTJhY2UtOTRhZC00NGNiLTk4MDktZjQ4ZDRiYWJkNTBm
LzEvSDhqdFJtM2k1c3BaWk5IdTBQSkEzZEpSM2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeI18Tp6
021XWgFECUO3JVeOFAqPP1NjXIZO1CE8sPLCKu+ufzclIWnp65ksW3P9JP4LtnO5
GKjRVV95YNHAIa6o8ZN/YPg7OAjd6GJ5zZm5Syo6csoO+2Zk44rjL9LT3J+KwX6X
oa5WBmPKRZ7tXoLuYrB/US3Mb3reJyrjGIsFGs9QN8WA4DUkx8L/OKKeEeoUwmm5
CsWwCE5BXj5M19tL3xdD0MbdtaxPT/1q0ySIR05Nu/p4cG9fEJRRGqVVAMBy2HR5
ttRuMBUjhbl3NVp7ZnGsST0FTu0iT8of2yoWlSADPtN5OpGw1/6zAT9JoK/NmFhX
GSCf8W/eHD9UGA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:35 2025 by rpki-client