Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
File: iToqQBmigXfN-AZZnxq11R0XuNw.mft (raw, json)
Hash identifier: uvbiryIQ9T3wOAuT8n9V+QnIJtJivLtIU+mXkfkHgJU=
Subject key identifier: 50:23:87:B7:EF:BB:29:80:EF:EE:EC:71:FE:DB:1D:8B:D7:B9:98:B3
Authority key identifier: 89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
Certificate issuer: /CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Certificate serial: 0194C3BE4CD4BB02C68BB9A0EA5FC8984C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
Manifest number: 142F
Signing time: Sat 01 Feb 2025 23:00:16 +0000
Manifest this update: Sat 01 Feb 2025 23:00:16 +0000
Manifest next update: Sun 02 Feb 2025 23:00:16 +0000
Files and hashes: 1: c_7uOl8s8Kdh9CychkSYtAnQ7tY.roa (hash: Nr/ZIZGpAUJ7Gcwt3DrN0gnkpV9viza7zxUo/JxiEbY=)
2: iToqQBmigXfN-AZZnxq11R0XuNw.crl (hash: jUFJZuKDY3xzZ0TZSC+EOxr3Est0jmIL2mLHGV7zsaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:4c:d4:bb:02:c6:8b:b9:a0:ea:5f:c8:98:4c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Validity
Not Before: Feb 1 23:00:16 2025 GMT
Not After : Feb 2 23:00:16 2025 GMT
Subject: CN=502387b7efbb2980efeeec71fedb1d8bd7b998b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:e9:bc:ce:b8:4a:b3:54:7c:f5:1c:64:fb:
b0:15:63:d7:80:fc:5d:bd:4c:f4:bf:c6:ae:da:34:
ec:08:12:3a:13:2a:a3:a6:62:92:e7:8c:4a:66:03:
b0:30:dc:77:66:bb:c7:d0:97:ee:16:0c:84:46:01:
69:c2:5d:b6:42:24:18:d8:aa:06:c6:d2:e6:cd:bc:
8a:01:cc:78:46:16:fc:e7:cc:6b:bc:62:d4:44:b6:
6e:04:f0:6f:b7:71:b8:d4:ba:36:e3:06:39:cb:3b:
5d:d2:55:0b:7a:17:6a:55:2b:a2:ee:38:f9:ea:5c:
3b:1a:c5:b1:d4:3e:f5:ef:a5:88:7f:30:11:59:48:
e6:10:fd:d6:ba:ac:00:60:c0:ca:9e:af:0b:d3:b8:
d1:03:d9:ac:9e:cc:fe:14:3b:98:44:66:eb:dc:1d:
6a:08:58:e0:f8:6a:ff:b9:8d:f7:2c:0a:66:f1:83:
09:57:c7:a4:0d:02:81:8d:38:09:b4:bc:27:73:ce:
3d:59:b8:b8:66:5c:e4:eb:5c:db:e0:ff:70:7d:49:
d6:b9:17:e3:56:49:09:99:4b:fe:eb:3d:38:9b:62:
55:34:63:8b:8f:62:fd:de:1c:79:9e:79:41:98:0f:
b3:65:8c:ee:0e:61:b1:ba:3c:ea:ed:06:91:63:11:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:23:87:B7:EF:BB:29:80:EF:EE:EC:71:FE:DB:1D:8B:D7:B9:98:B3
X509v3 Authority Key Identifier:
keyid:89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4e:6c:88:43:64:44:18:0c:9a:6f:af:82:dc:b2:89:b3:07:
5e:d6:b6:27:1a:6e:5d:dc:1b:3d:92:3d:b8:fb:0c:47:49:b9:
21:06:05:a8:27:ea:dc:15:b8:20:10:58:c3:62:e0:31:d7:0e:
fe:c8:14:0d:02:79:97:0d:dd:20:c5:1c:0e:ed:f7:d7:2e:d3:
20:77:64:ba:6e:84:9a:30:41:5f:cf:ea:d4:35:22:4e:ea:19:
29:ee:13:4f:31:a0:1f:e9:1f:66:71:e5:1b:30:0a:43:3d:39:
cc:7c:0c:04:17:f0:ca:88:b8:e8:fe:0b:03:bc:d0:82:f6:7e:
17:15:0e:df:83:2a:77:ec:63:5d:7a:74:b2:c1:6a:2b:2c:63:
29:0c:68:e2:01:09:96:70:6c:30:8b:19:5d:1a:95:d7:79:9e:
22:2f:84:ee:cc:6c:74:f0:29:ed:1f:0d:48:f0:90:35:0a:c6:
3e:82:bc:06:5e:55:b3:e8:d6:d7:2f:e3:21:46:e4:d2:92:4d:
75:44:31:34:12:9a:f0:28:ab:fb:20:d6:57:68:dc:f5:08:e8:
d0:3b:02:c3:b2:95:d8:9e:06:2f:75:b5:30:5e:a3:88:fb:14:
73:c6:b8:22:b6:07:f7:94:60:b3:e4:3d:ed:9d:5b:60:0c:f7:
2c:fb:58:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvkzUuwLGi7mg6l/ImEx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2EyYTQwMTlhMjgxNzdjZGY4MDY1OTlmMWFiNWQ1MWQx
N2I4ZGMwHhcNMjUwMjAxMjMwMDE2WhcNMjUwMjAyMjMwMDE2WjAzMTEwLwYDVQQD
Eyg1MDIzODdiN2VmYmIyOTgwZWZlZWVjNzFmZWRiMWQ4YmQ3Yjk5OGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz/pvM64SrNUfPUcZPuwFWPXgPxd
vUz0v8au2jTsCBI6EyqjpmKS54xKZgOwMNx3ZrvH0JfuFgyERgFpwl22QiQY2KoG
xtLmzbyKAcx4Rhb858xrvGLURLZuBPBvt3G41Lo24wY5yztd0lULehdqVSui7jj5
6lw7GsWx1D7176WIfzARWUjmEP3WuqwAYMDKnq8L07jRA9msnsz+FDuYRGbr3B1q
CFjg+Gr/uY33LApm8YMJV8ekDQKBjTgJtLwnc849Wbi4Zlzk61zb4P9wfUnWuRfj
VkkJmUv+6z04m2JVNGOLj2L93hx5nnlBmA+zZYzuDmGxujzq7QaRYxEpDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAjh7fvuymA7+7scf7bHYvXuZizMB8GA1UdIwQY
MBaAFIk6KkAZooF3zfgGWZ8atdUdF7jcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRvcVFCbWlnWGZOLUFaWm54cTExUjBYdU53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82M2IzZGUtODk3NS00MzRjLTk2ZGEt
MzYxNzg2ZjE3YTA1LzEvaVRvcVFCbWlnWGZOLUFaWm54cTExUjBYdU53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82M2IzZGUtODk3NS00MzRjLTk2ZGEtMzYxNzg2ZjE3YTA1
LzEvaVRvcVFCbWlnWGZOLUFaWm54cTExUjBYdU53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEE5siENk
RBgMmm+vgtyyibMHXta2JxpuXdwbPZI9uPsMR0m5IQYFqCfq3BW4IBBYw2LgMdcO
/sgUDQJ5lw3dIMUcDu331y7TIHdkum6EmjBBX8/q1DUiTuoZKe4TTzGgH+kfZnHl
GzAKQz05zHwMBBfwyoi46P4LA7zQgvZ+FxUO34Mqd+xjXXp0ssFqKyxjKQxo4gEJ
lnBsMIsZXRqV13meIi+E7sxsdPAp7R8NSPCQNQrGPoK8Bl5Vs+jW1y/jIUbk0pJN
dUQxNBKa8Cir+yDWV2jc9Qjo0DsCw7KV2J4GL3W1MF6jiPsUc8a4IrYH95Rgs+Q9
7Z1bYAz3LPtYFw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:32 2025 by rpki-client