Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
File: n8bodwmunQRHlA8j11Tfi6gXWw0.mft (raw, json)
Hash identifier: v6f4p30qAbY3H/dgIoeuBTMDe5XNy6etnJuwmp+pkJo=
Subject key identifier: 22:66:66:9C:C9:12:4C:A4:3A:A9:7F:D2:DA:AA:EB:94:F5:CA:A5:BA
Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
Certificate issuer: /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Certificate serial: 0194C3F601E3DE12ACB4C76BD22266F48EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
Manifest number: 12D7
Signing time: Sun 02 Feb 2025 00:01:06 +0000
Manifest this update: Sun 02 Feb 2025 00:01:06 +0000
Manifest next update: Mon 03 Feb 2025 00:01:06 +0000
Files and hashes: 1: n8bodwmunQRHlA8j11Tfi6gXWw0.crl (hash: 6puOuvXDpPfbFXe75C4DAUcQRXPsM3xU45ivt8fnzzg=)
2: z7xTQbxrh0uWjK7zpjPYq_zoSQo.roa (hash: gzKeSIds853lGCFoWu+NS/HRph4q2guB/dUt5Y5WdPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:01:e3:de:12:ac:b4:c7:6b:d2:22:66:f4:8e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Validity
Not Before: Feb 2 00:01:06 2025 GMT
Not After : Feb 3 00:01:06 2025 GMT
Subject: CN=2266669cc9124ca43aa97fd2daaaeb94f5caa5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:1d:f4:49:2d:5a:3f:a7:51:a2:22:ef:e3:
58:af:cc:1c:50:d7:2f:95:69:ed:0d:ac:f4:d6:e4:
2d:25:b9:27:59:c9:86:01:2f:f6:ad:0b:6b:cd:eb:
0a:c7:c7:78:25:f0:a8:82:88:af:d2:10:12:85:66:
0a:66:67:50:97:9d:c1:be:27:44:3f:ce:01:87:20:
b6:fe:6c:39:5f:0e:dd:56:90:e9:8c:46:dd:f9:23:
9f:d4:bb:d2:5a:d5:cb:7b:d7:69:c9:c7:12:14:9c:
1a:aa:92:8d:83:ec:80:4d:da:ff:8c:e0:09:0e:92:
65:ab:98:4e:dd:b6:23:34:78:27:8b:75:40:f0:eb:
4d:80:ce:2d:02:c9:28:75:87:32:92:0c:d9:e3:cb:
69:1e:c2:cc:45:6d:35:16:24:4e:ad:1f:1e:6e:69:
96:5c:c7:da:76:83:1d:6d:d6:19:33:01:f8:1d:8b:
ca:d3:8d:6b:4b:31:b1:b5:ac:bf:35:25:6c:b5:74:
fc:00:62:d2:c8:ea:b5:89:3d:72:1b:35:b2:c6:68:
a4:46:b9:e7:2e:fc:00:2a:9b:12:ce:f3:0e:21:9e:
cb:91:e8:b1:ed:40:ea:45:8f:64:e9:70:42:6f:40:
29:e2:8f:b0:fa:9e:ad:aa:41:3b:d5:0f:60:a2:6d:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:66:66:9C:C9:12:4C:A4:3A:A9:7F:D2:DA:AA:EB:94:F5:CA:A5:BA
X509v3 Authority Key Identifier:
keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7e:a6:d7:0d:63:93:99:86:bf:f0:54:95:3a:ae:02:91:8b:
b1:e5:f1:4d:96:02:15:37:c0:81:79:03:2b:24:e3:fc:35:d6:
4b:ed:d4:b8:b2:65:22:67:32:99:fd:dc:08:68:b0:0c:bc:25:
aa:62:4d:70:98:84:a3:98:31:e8:42:3c:1e:d4:97:74:2f:d2:
96:4c:1f:98:94:f1:64:c9:42:9d:5e:e9:13:0d:19:06:1e:0a:
f7:4b:df:ef:d7:51:3c:e4:b2:9a:23:f0:87:2c:8b:d0:91:a0:
2b:eb:4d:ed:8b:01:0b:ab:51:26:08:f7:97:3e:39:2d:12:f9:
3c:04:d3:bf:3f:12:34:e5:98:59:13:2e:66:f6:bc:ed:ae:63:
4a:ee:3e:cf:8f:3f:ad:9b:12:7e:1e:12:77:46:ef:59:68:d8:
61:08:84:f9:8f:4f:1b:24:c3:60:2b:f8:01:eb:55:04:f8:16:
3b:e2:86:8d:a5:c6:b5:9a:a8:49:9b:7d:0a:a7:27:80:59:67:
7c:45:8a:5e:f6:99:24:f8:9e:8b:b1:9f:08:92:89:8d:db:9c:
3c:fe:32:64:ba:93:d4:74:46:6e:49:94:1c:23:6b:d7:f5:96:
5a:39:f3:e9:a0:b5:f5:bb:05:17:af:31:76:86:05:32:9d:18:
34:28:38:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9gHj3hKstMdr0iJm9I63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYzZlODc3MDlhZTlkMDQ0Nzk0MGYyM2Q3NTRkZjhiYTgx
NzViMGQwHhcNMjUwMjAyMDAwMTA2WhcNMjUwMjAzMDAwMTA2WjAzMTEwLwYDVQQD
EygyMjY2NjY5Y2M5MTI0Y2E0M2FhOTdmZDJkYWFhZWI5NGY1Y2FhNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXcd9EktWj+nUaIi7+NYr8wcUNcv
lWntDaz01uQtJbknWcmGAS/2rQtrzesKx8d4JfCogoiv0hAShWYKZmdQl53BvidE
P84BhyC2/mw5Xw7dVpDpjEbd+SOf1LvSWtXLe9dpyccSFJwaqpKNg+yATdr/jOAJ
DpJlq5hO3bYjNHgni3VA8OtNgM4tAskodYcykgzZ48tpHsLMRW01FiROrR8ebmmW
XMfadoMdbdYZMwH4HYvK041rSzGxtay/NSVstXT8AGLSyOq1iT1yGzWyxmikRrnn
LvwAKpsSzvMOIZ7Lkeix7UDqRY9k6XBCb0Ap4o+w+p6tqkE71Q9gom3W/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJmZpzJEkykOql/0tqq65T1yqW6MB8GA1UdIwQY
MBaAFJ/G6HcJrp0ER5QPI9dU34uoF1sNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lNDI4MDAtYzhjNy00NTk5LWIxZmQt
ODhhNzRkMDM5ZjdmLzEvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lNDI4MDAtYzhjNy00NTk5LWIxZmQtODhhNzRkMDM5Zjdm
LzEvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJH6m1w1j
k5mGv/BUlTquApGLseXxTZYCFTfAgXkDKyTj/DXWS+3UuLJlImcymf3cCGiwDLwl
qmJNcJiEo5gx6EI8HtSXdC/SlkwfmJTxZMlCnV7pEw0ZBh4K90vf79dRPOSymiPw
hyyL0JGgK+tN7YsBC6tRJgj3lz45LRL5PATTvz8SNOWYWRMuZva87a5jSu4+z48/
rZsSfh4Sd0bvWWjYYQiE+Y9PGyTDYCv4AetVBPgWO+KGjaXGtZqoSZt9CqcngFln
fEWKXvaZJPiei7GfCJKJjducPP4yZLqT1HRGbkmUHCNr1/WWWjnz6aC19bsFF68x
doYFMp0YNCg4BA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:28 2025 by rpki-client