Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: 56Omgbu88CnqaWBN3zgQoQpgXZ98FspHID7lDzoADJk=
Subject key identifier: 61:E3:D8:9D:58:93:D3:E9:19:D1:65:57:C3:64:B6:CA:CF:90:E3:3B
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 019510C6C1E335C8C1EC06CBB5968159A861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 0D86
Signing time: Sun 16 Feb 2025 22:00:15 +0000
Manifest this update: Sun 16 Feb 2025 22:00:15 +0000
Manifest next update: Mon 17 Feb 2025 22:00:15 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: O1tE7AcNWQf+ocKg3nntdBUB7n9yAZNeqRdJuPkLaDA=)
2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:c1:e3:35:c8:c1:ec:06:cb:b5:96:81:59:a8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: Feb 16 22:00:15 2025 GMT
Not After : Feb 17 22:00:15 2025 GMT
Subject: CN=61e3d89d5893d3e919d16557c364b6cacf90e33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:39:72:df:a7:ae:cb:e2:d5:ef:17:53:b5:50:
a5:04:c9:67:58:e2:ea:4f:81:88:d3:76:22:ef:72:
a1:ae:c3:cb:d8:57:4b:a8:a4:22:a2:2e:a0:e4:48:
5f:7b:11:30:9d:3e:31:8e:e3:11:45:fa:ca:5b:bd:
5a:fc:61:53:6c:ae:1d:c9:1a:92:78:7e:71:f2:64:
52:69:2d:70:77:95:8b:63:7d:20:ed:05:cc:db:f4:
25:cd:b6:94:27:21:a5:69:d1:a3:3b:7e:a9:90:6a:
ce:a6:5e:06:67:e2:da:79:ef:20:88:e7:d6:60:77:
28:65:09:c5:ef:bb:cd:6e:9a:e7:a8:64:a2:94:08:
63:fe:60:68:ea:30:48:a7:b5:b4:ee:37:b5:b1:75:
59:c0:44:bc:7d:a3:51:9e:dc:78:37:db:46:3f:98:
67:b8:26:1c:f6:3a:b2:a9:a5:d8:65:24:32:ac:50:
e5:52:81:77:56:f4:f5:20:a4:f2:ca:6e:fd:ec:a0:
f5:47:2a:23:08:74:f7:75:cc:ed:5b:4e:f2:d4:29:
df:2a:98:d2:de:85:4f:b9:44:b1:0c:9a:12:5b:28:
f7:96:e7:26:e8:03:f4:17:21:0e:9d:a8:3b:0d:d3:
08:34:a4:4f:f0:85:07:0a:13:98:9e:f1:bf:e7:72:
27:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E3:D8:9D:58:93:D3:E9:19:D1:65:57:C3:64:B6:CA:CF:90:E3:3B
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:da:1d:79:16:35:08:d8:9e:58:a2:c6:be:29:2f:48:70:0a:
b7:9a:ea:ad:77:12:49:41:1f:d5:3a:b1:08:0d:f0:57:78:02:
ef:24:d4:b1:f6:c2:0c:48:86:2a:0e:bf:ff:d6:74:2b:f2:cd:
4a:ec:ad:79:13:2c:26:e4:f3:e8:0c:09:97:2f:53:4f:fa:84:
b0:a8:99:1e:c9:59:9f:1c:55:ca:31:77:e7:db:07:da:df:f1:
f9:e9:ab:6b:e0:61:d8:e5:12:2c:70:ff:04:d5:48:90:10:ef:
ab:2c:52:44:4e:a9:68:e1:05:c6:8f:04:12:92:c9:a1:05:45:
7e:14:a3:c0:03:36:3d:10:cf:74:5d:48:94:73:8f:2c:dc:c8:
cc:da:6a:d2:ad:28:42:d9:51:48:f2:02:c7:64:df:75:6d:df:
bc:0a:59:f9:57:d2:38:90:c5:ea:16:91:c2:b2:de:85:a6:24:
1b:11:34:9b:38:40:3d:f4:41:5d:77:8d:8a:81:85:a9:91:bd:
ff:f6:4b:74:0f:0b:72:77:8c:39:e8:af:65:10:e4:3d:30:77:
60:70:e7:b8:75:d6:a5:fd:27:d8:2e:70:92:e2:7a:eb:bc:cc:
b7:76:df:ec:76:7a:95:ee:75:b6:cb:79:5e:e2:38:6c:17:2e:
7d:e0:f4:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxsHjNcjB7AbLtZaBWahhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMTkwYzI2ODk0MDkzZGM2NGEwNWVmMmNmZDM1NGEwNmNm
ZjAzOWQwHhcNMjUwMjE2MjIwMDE1WhcNMjUwMjE3MjIwMDE1WjAzMTEwLwYDVQQD
Eyg2MWUzZDg5ZDU4OTNkM2U5MTlkMTY1NTdjMzY0YjZjYWNmOTBlMzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Tly36euy+LV7xdTtVClBMlnWOLq
T4GI03Yi73KhrsPL2FdLqKQioi6g5EhfexEwnT4xjuMRRfrKW71a/GFTbK4dyRqS
eH5x8mRSaS1wd5WLY30g7QXM2/QlzbaUJyGladGjO36pkGrOpl4GZ+Laee8giOfW
YHcoZQnF77vNbprnqGSilAhj/mBo6jBIp7W07je1sXVZwES8faNRntx4N9tGP5hn
uCYc9jqyqaXYZSQyrFDlUoF3VvT1IKTyym797KD1RyojCHT3dcztW07y1CnfKpjS
3oVPuUSxDJoSWyj3lucm6AP0FyEOnag7DdMINKRP8IUHChOYnvG/53In7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHj2J1Yk9PpGdFlV8NktsrPkOM7MB8GA1UdIwQY
MBaAFCIZDCaJQJPcZKBe8s/TVKBs/wOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zYTk2ZmEtOTBkZS00NjBjLWJlYTYt
ZWMxMGViZTRmY2NmLzEvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8zYTk2ZmEtOTBkZS00NjBjLWJlYTYtZWMxMGViZTRmY2Nm
LzEvSWhrTUpvbEFrOXhrb0Y3eXo5TlVvR3pfQTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9odeRY1
CNieWKLGvikvSHAKt5rqrXcSSUEf1TqxCA3wV3gC7yTUsfbCDEiGKg6//9Z0K/LN
SuyteRMsJuTz6AwJly9TT/qEsKiZHslZnxxVyjF359sH2t/x+emra+Bh2OUSLHD/
BNVIkBDvqyxSRE6paOEFxo8EEpLJoQVFfhSjwAM2PRDPdF1IlHOPLNzIzNpq0q0o
QtlRSPICx2TfdW3fvApZ+VfSOJDF6haRwrLehaYkGxE0mzhAPfRBXXeNioGFqZG9
//ZLdA8LcneMOeivZRDkPTB3YHDnuHXWpf0n2C5wkuJ667zMt3bf7HZ6le51tst5
XuI4bBcufeD0mQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:20 2025 by rpki-client