Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
File: pN15cHEksgZy5pw44Xtma3-ufB0.mft (raw, json)
Hash identifier: MJ0idlgDfvrGWpIR4IZvyX6/ciE0VfUtKiHPlYWklKk=
Subject key identifier: 59:9B:31:9C:D7:1D:0C:7C:70:F6:8D:03:AF:3C:68:13:5C:8C:85:A2
Authority key identifier: A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D
Certificate issuer: /CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
Certificate serial: 019511A2578306DD355E546258E6A593E7BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
Manifest number: 032C
Signing time: Mon 17 Feb 2025 02:00:06 +0000
Manifest this update: Mon 17 Feb 2025 02:00:06 +0000
Manifest next update: Tue 18 Feb 2025 02:00:06 +0000
Files and hashes: 1: pN15cHEksgZy5pw44Xtma3-ufB0.crl (hash: uI5KthAxNLX2m5J/xHgJzS3mxH3wOORGkX64GLAH1PI=)
2: yqAKtMjQr06lqjkgV4xVRo64daM.roa (hash: x/Jj/C/0x92hbipjJNdh/WcznLtF4AoIFg/Jhn39tzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:57:83:06:dd:35:5e:54:62:58:e6:a5:93:e7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
Validity
Not Before: Feb 17 02:00:06 2025 GMT
Not After : Feb 18 02:00:06 2025 GMT
Subject: CN=599b319cd71d0c7c70f68d03af3c68135c8c85a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:89:a4:1c:96:43:d3:eb:e8:ce:7d:ae:51:
9d:fc:7f:2b:c8:8f:c0:ae:e4:7e:61:10:ed:64:1e:
43:3e:61:78:14:90:7a:20:3c:04:89:b2:90:53:dd:
5f:63:1c:06:56:15:19:b8:2f:70:33:83:d6:f1:ed:
ed:fd:fd:1f:fa:f8:99:a2:ef:91:83:76:4c:ff:00:
71:93:7a:4c:a4:c0:72:58:d0:e4:a1:55:d4:0d:81:
6b:5c:58:e8:65:5a:54:d9:ad:2f:3b:39:c5:d6:32:
8a:db:80:d1:e3:a5:f5:a9:ba:22:a2:69:51:a3:71:
a2:27:2f:50:4b:25:8b:b2:c0:ab:05:c5:d0:a6:27:
68:fd:ac:ff:c8:b7:3f:11:2e:be:b6:f4:ba:04:42:
78:82:0f:be:2d:33:da:dc:8b:0b:8e:1c:53:b1:1f:
3f:6a:94:82:43:24:9a:bf:2d:26:d5:de:c8:57:33:
98:57:16:aa:8f:8b:a3:fb:08:59:22:44:c5:93:0b:
57:c5:9a:44:5b:d2:d4:5e:51:a8:b6:0d:6f:9f:ad:
17:9b:5e:69:1f:75:c7:28:d1:45:94:59:46:76:b5:
eb:4e:20:0e:ea:5f:5f:56:81:d3:dc:a3:08:23:93:
c2:3f:67:f1:52:2c:9a:a0:21:cb:a0:26:1c:df:82:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9B:31:9C:D7:1D:0C:7C:70:F6:8D:03:AF:3C:68:13:5C:8C:85:A2
X509v3 Authority Key Identifier:
keyid:A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0e:29:8c:5a:e9:50:09:88:52:37:d3:9f:a5:b8:4e:ff:dc:
c5:42:e9:66:eb:c4:ff:8f:19:92:65:51:0c:01:ff:33:8b:3e:
88:39:06:2b:77:4e:7d:8c:53:92:88:1f:86:5d:a4:16:9f:6f:
15:ed:bc:4f:68:5c:11:63:89:ea:7a:ff:8e:53:43:13:8d:a4:
71:39:7e:b8:6f:a2:ce:b4:c7:f9:a8:b1:44:56:24:15:51:05:
e8:06:51:2d:7f:b1:7c:49:38:d7:a1:ef:91:b2:63:cf:11:66:
17:04:9c:a2:ec:e5:b4:65:5e:6f:e9:76:84:6a:cc:7d:6b:e1:
bf:4b:69:1f:a6:33:59:b3:a5:e4:b7:9f:74:c4:7c:21:e2:8f:
8a:44:93:5f:1b:df:76:f8:f3:e8:07:0c:60:3b:31:39:7e:89:
ee:2c:ad:36:54:0d:28:20:5e:c6:63:b6:68:81:2a:1f:93:59:
8f:5a:74:55:4f:61:5a:78:e9:2c:7e:f1:bc:ff:64:ab:26:ad:
52:33:8c:a0:3c:b6:74:58:88:3c:cf:57:6b:11:be:39:26:6d:
22:0b:09:df:d4:b0:b7:2a:58:1d:1b:6d:f1:34:f5:90:87:f9:
ed:9d:23:da:e9:3d:8e:b7:24:99:6f:51:9c:04:71:09:78:3b:
80:20:b0:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURoleDBt01XlRiWOalk+e8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZGQ3OTcwNzEyNGIyMDY3MmU2OWMzOGUxN2I2NjZiN2Zh
ZTdjMWQwHhcNMjUwMjE3MDIwMDA2WhcNMjUwMjE4MDIwMDA2WjAzMTEwLwYDVQQD
Eyg1OTliMzE5Y2Q3MWQwYzdjNzBmNjhkMDNhZjNjNjgxMzVjOGM4NWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS+JpByWQ9Pr6M59rlGd/H8ryI/A
ruR+YRDtZB5DPmF4FJB6IDwEibKQU91fYxwGVhUZuC9wM4PW8e3t/f0f+viZou+R
g3ZM/wBxk3pMpMByWNDkoVXUDYFrXFjoZVpU2a0vOznF1jKK24DR46X1qboiomlR
o3GiJy9QSyWLssCrBcXQpido/az/yLc/ES6+tvS6BEJ4gg++LTPa3IsLjhxTsR8/
apSCQySavy0m1d7IVzOYVxaqj4uj+whZIkTFkwtXxZpEW9LUXlGotg1vn60Xm15p
H3XHKNFFlFlGdrXrTiAO6l9fVoHT3KMII5PCP2fxUiyaoCHLoCYc34LqVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmbMZzXHQx8cPaNA688aBNcjIWiMB8GA1UdIwQY
MBaAFKTdeXBxJLIGcuacOOF7Zmt/rnwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE4xNWNIRWtzZ1p5NXB3NDRYdG1hMy11ZkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZDFjZWEtNGQ5ZC00OTA2LTk4ZDct
NzE4OGQ5MWE2Y2E5LzEvcE4xNWNIRWtzZ1p5NXB3NDRYdG1hMy11ZkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84ZDFjZWEtNGQ5ZC00OTA2LTk4ZDctNzE4OGQ5MWE2Y2E5
LzEvcE4xNWNIRWtzZ1p5NXB3NDRYdG1hMy11ZkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcw4pjFrp
UAmIUjfTn6W4Tv/cxULpZuvE/48ZkmVRDAH/M4s+iDkGK3dOfYxTkogfhl2kFp9v
Fe28T2hcEWOJ6nr/jlNDE42kcTl+uG+izrTH+aixRFYkFVEF6AZRLX+xfEk416Hv
kbJjzxFmFwScouzltGVeb+l2hGrMfWvhv0tpH6YzWbOl5LefdMR8IeKPikSTXxvf
dvjz6AcMYDsxOX6J7iytNlQNKCBexmO2aIEqH5NZj1p0VU9hWnjpLH7xvP9kqyat
UjOMoDy2dFiIPM9XaxG+OSZtIgsJ39SwtypYHRtt8TT1kIf57Z0j2uk9jrckmW9R
nARxCXg7gCCwGg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:43 2025 by rpki-client