Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
File: k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json)
Hash identifier: QW9MZ7kKbDy4SW86h3wO/8VWMgBOdJFsi1GaX74zLQA=
Subject key identifier: A3:00:2A:9B:44:F0:6E:0C:F3:37:FB:95:6E:A0:71:D3:11:DF:B4:37
Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
Certificate issuer: /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Certificate serial: 019512B561EAA0B29D6947956AA2253A13FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
Manifest number: 12A6
Signing time: Mon 17 Feb 2025 07:00:31 +0000
Manifest this update: Mon 17 Feb 2025 07:00:31 +0000
Manifest next update: Tue 18 Feb 2025 07:00:31 +0000
Files and hashes: 1: BQgIr9QK549Gh-t8XQa2kJXJbXM.roa (hash: FyMx4NmgioW+v5IwQi287SWwxmKQZhpDHBnVgYBPbds=)
2: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: v3CesG2qb6Tf2dmCX+THv7x7pBlkPsGHbeWl84eCK/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:b5:61:ea:a0:b2:9d:69:47:95:6a:a2:25:3a:13:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Validity
Not Before: Feb 17 07:00:31 2025 GMT
Not After : Feb 18 07:00:31 2025 GMT
Subject: CN=a3002a9b44f06e0cf337fb956ea071d311dfb437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:14:61:6c:48:ea:db:e3:93:fe:18:53:0d:
31:f4:72:7a:15:5a:e9:20:c3:bc:b6:3e:0d:04:79:
1e:1a:86:1c:9f:c5:3c:74:93:c1:90:e0:43:00:71:
d1:5b:89:5c:d4:db:e5:81:54:2a:1a:79:65:48:82:
7b:3c:22:22:38:46:c0:27:c4:43:ae:ba:88:ef:72:
35:c8:2f:9b:d1:cf:29:97:88:a7:ed:93:d0:aa:9c:
a5:34:4c:fb:19:29:eb:aa:e8:f1:b1:c0:9b:ab:eb:
67:e0:8c:d6:21:06:f3:ee:61:d8:60:e3:9d:d2:cd:
48:1e:0e:11:0f:0e:14:44:a0:f8:bd:18:c0:b8:9d:
e9:b4:81:9f:f5:5b:bb:16:7b:d7:bc:07:02:2c:23:
02:6b:40:dc:6c:9a:3d:d3:0b:67:b5:e8:03:c6:66:
73:02:67:68:5c:a5:ce:f5:5e:f5:62:f2:90:01:f8:
e9:dd:08:c3:4f:60:86:98:97:8d:ff:57:f4:19:cb:
8b:fa:51:7a:34:e2:7f:26:16:71:6c:79:38:11:60:
1a:87:31:93:47:60:1f:3b:06:25:ed:d0:91:d2:5e:
c4:ee:0d:fb:51:3e:2b:c4:2d:8a:9a:dd:e4:c7:78:
1f:7b:38:85:6c:e0:f6:73:4e:d7:72:23:68:70:3c:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:00:2A:9B:44:F0:6E:0C:F3:37:FB:95:6E:A0:71:D3:11:DF:B4:37
X509v3 Authority Key Identifier:
keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4c:7c:c9:4f:35:b4:08:c7:1e:ed:d6:d9:e8:0c:d4:cb:43:
55:ee:57:89:f0:ce:72:bb:d1:25:75:15:e3:b4:09:1e:3c:93:
42:85:e1:97:ec:e0:a1:e5:60:0a:1c:89:ab:7b:b7:f5:17:52:
ac:cc:31:ca:89:fa:83:a3:a0:fa:a8:e8:03:66:c7:39:da:82:
00:43:a2:4c:c4:f4:b8:ff:0b:4a:bb:6c:fe:13:12:92:b8:c9:
9d:23:1f:5b:4b:24:12:10:ce:4c:52:02:e5:8c:86:e8:72:1c:
dc:04:7b:8a:cd:a8:66:ea:74:1a:9b:a8:da:ee:27:01:18:7d:
6e:d5:ff:3f:73:dd:b0:b8:ea:b7:09:10:d9:e0:28:5a:c6:11:
ca:76:62:84:4a:7f:2a:07:0a:b9:84:7e:85:ed:30:3a:54:f3:
53:92:d4:a1:17:02:52:48:41:3f:b8:74:7d:20:de:77:bf:a0:
12:24:93:93:b7:04:96:62:d2:73:0c:c8:7c:64:9a:f5:8a:af:
d4:d2:3a:5d:bf:da:5c:c4:30:08:7e:8b:1b:ac:c7:7b:d8:b9:
c5:98:c0:fb:16:b9:f8:43:b7:05:b9:e3:02:86:83:4e:69:39:
cd:1c:2f:90:46:17:1e:dc:a5:af:63:d2:7e:cc:ca:d4:54:04:
98:97:49:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUStWHqoLKdaUeVaqIlOhP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZjI1YjcyNzU4ZGE1OGYwZjNlYzBmMDcyNzM1M2ViZDJi
NDQ3NzQwHhcNMjUwMjE3MDcwMDMxWhcNMjUwMjE4MDcwMDMxWjAzMTEwLwYDVQQD
EyhhMzAwMmE5YjQ0ZjA2ZTBjZjMzN2ZiOTU2ZWEwNzFkMzExZGZiNDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26oUYWxI6tvjk/4YUw0x9HJ6FVrp
IMO8tj4NBHkeGoYcn8U8dJPBkOBDAHHRW4lc1NvlgVQqGnllSIJ7PCIiOEbAJ8RD
rrqI73I1yC+b0c8pl4in7ZPQqpylNEz7GSnrqujxscCbq+tn4IzWIQbz7mHYYOOd
0s1IHg4RDw4URKD4vRjAuJ3ptIGf9Vu7FnvXvAcCLCMCa0DcbJo90wtntegDxmZz
AmdoXKXO9V71YvKQAfjp3QjDT2CGmJeN/1f0GcuL+lF6NOJ/JhZxbHk4EWAahzGT
R2AfOwYl7dCR0l7E7g37UT4rxC2Kmt3kx3gfeziFbOD2c07XciNocDwjnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMAKptE8G4M8zf7lW6gcdMR37Q3MB8GA1UdIwQY
MBaAFJPyW3J1jaWPDz7A8HJzU+vStEd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80ZTY2YTItYTM3Mi00OGI0LTkwYjQt
ODJhMzExMmY0OWM3LzEva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80ZTY2YTItYTM3Mi00OGI0LTkwYjQtODJhMzExMmY0OWM3
LzEva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREx8yU81
tAjHHu3W2egM1MtDVe5XifDOcrvRJXUV47QJHjyTQoXhl+zgoeVgChyJq3u39RdS
rMwxyon6g6Og+qjoA2bHOdqCAEOiTMT0uP8LSrts/hMSkrjJnSMfW0skEhDOTFIC
5YyG6HIc3AR7is2oZup0Gpuo2u4nARh9btX/P3PdsLjqtwkQ2eAoWsYRynZihEp/
KgcKuYR+he0wOlTzU5LUoRcCUkhBP7h0fSDed7+gEiSTk7cElmLScwzIfGSa9Yqv
1NI6Xb/aXMQwCH6LG6zHe9i5xZjA+xa5+EO3BbnjAoaDTmk5zRwvkEYXHtylr2PS
fszK1FQEmJdJgQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:19 2025 by rpki-client