Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
File: vTvLhii9vq2xlKI1rEuMi3EeN9E.mft (raw, json)
Hash identifier: lxFYWLgnOVYfOTlHvEf/7a9eevSwslIxiPeXkF7ZAH8=
Subject key identifier: D3:E2:8A:54:D2:56:7A:7C:CB:35:E6:17:C0:80:63:38:65:7B:69:73
Authority key identifier: BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1
Certificate issuer: /CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
Certificate serial: 0194C350BD96928ECFB4D570EA34E7AC5E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
Manifest number: 08E8
Signing time: Sat 01 Feb 2025 21:00:35 +0000
Manifest this update: Sat 01 Feb 2025 21:00:35 +0000
Manifest next update: Sun 02 Feb 2025 21:00:35 +0000
Files and hashes: 1: bW-fv4_NbG1PNojUcPp0YRQIoB0.roa (hash: 7Z5rf32BgI6fjeUEiIFvBelYmcDYWIutC0cfXs7YxV4=)
2: vTvLhii9vq2xlKI1rEuMi3EeN9E.crl (hash: eLNx94Gm9/gspGb6CqBNmxfdhnm4z9GOU+J+wxivAoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:bd:96:92:8e:cf:b4:d5:70:ea:34:e7:ac:5e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
Validity
Not Before: Feb 1 21:00:35 2025 GMT
Not After : Feb 2 21:00:35 2025 GMT
Subject: CN=d3e28a54d2567a7ccb35e617c0806338657b6973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:e0:6c:94:17:42:74:dd:a3:f6:eb:ab:74:
98:a8:5a:59:bd:a2:59:7f:49:89:f7:8d:4d:38:d1:
bb:6c:56:2a:e9:02:65:49:70:53:a4:71:2f:d6:01:
53:b3:2e:82:3e:d6:81:c4:f8:17:64:3a:2f:70:5c:
21:a4:4e:ac:88:84:cc:cc:b5:24:6c:0a:78:2f:51:
92:be:17:02:86:f2:8f:0e:70:73:4a:27:e2:5a:de:
26:a8:b9:d9:a9:54:f3:dd:0f:cc:f5:b9:e2:16:4c:
ff:e9:a2:e2:2c:9e:4d:64:32:e7:26:ea:9b:e6:b1:
9a:70:10:70:2c:8e:74:9c:77:22:51:81:d1:52:94:
61:3a:83:51:37:8f:40:39:1b:c0:33:a1:ad:74:89:
6c:64:b5:36:d5:72:3e:cb:fe:72:cd:99:3e:6c:e1:
4a:00:6c:c6:ac:bb:99:63:9e:b7:53:ff:e2:94:a8:
46:99:e4:6a:43:42:ce:3a:ab:55:bf:fc:cf:92:15:
af:2a:09:72:04:a8:a6:b6:23:4c:6d:ef:e0:24:35:
ba:65:43:9d:4b:6a:a1:c2:26:0c:e8:b1:c1:36:f2:
3b:01:b9:8e:6c:aa:a6:80:f4:52:5b:cc:4b:23:32:
4f:c9:62:29:46:f4:5a:fa:e5:5b:f1:74:24:8f:23:
b3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E2:8A:54:D2:56:7A:7C:CB:35:E6:17:C0:80:63:38:65:7B:69:73
X509v3 Authority Key Identifier:
keyid:BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:19:1d:4c:de:5d:4a:11:45:5e:c4:bc:ad:e9:da:bc:dd:db:
c7:ab:24:f3:fd:0b:c7:fc:03:71:d3:3b:62:6d:a8:33:f8:94:
8e:b2:b8:85:55:9a:f0:df:d3:9a:16:f8:e6:3b:f8:48:d4:70:
3f:6c:15:03:b3:56:c1:b5:f2:d1:f7:8d:09:ee:4b:83:85:93:
aa:96:df:9c:7a:fb:38:3b:d7:88:90:88:19:b8:cb:3c:7f:25:
ca:44:d5:d9:11:7a:f3:77:0e:f2:fd:fc:99:32:21:06:eb:39:
e2:db:7a:34:3e:5c:c8:42:73:9b:49:91:3a:69:84:c3:8a:8d:
a4:9b:60:92:2f:3b:70:25:36:2c:d4:85:76:8a:09:04:80:9a:
e6:a8:a8:b6:e8:ab:45:8e:5e:0e:d1:22:1a:34:be:ca:78:0b:
f3:f0:7b:33:d7:f5:f2:a5:4a:9e:bc:e1:3d:fa:ca:d3:0b:e7:
47:2f:5c:c6:ba:5e:81:5a:3b:a1:da:a1:cc:f7:8a:52:29:9e:
e6:c9:3c:17:ae:87:55:8f:8a:fb:49:44:4b:e1:2c:8a:62:a8:
fe:43:20:3f:44:6e:f6:e2:ff:01:71:85:33:4d:dd:49:19:d3:
6d:fc:92:88:76:74:d0:b1:45:99:10:eb:23:c0:c2:80:b1:1f:
8a:97:10:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDUL2Wko7PtNVw6jTnrF4ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkM2JjYjg2MjhiZGJlYWRiMTk0YTIzNWFjNGI4YzhiNzEx
ZTM3ZDEwHhcNMjUwMjAxMjEwMDM1WhcNMjUwMjAyMjEwMDM1WjAzMTEwLwYDVQQD
EyhkM2UyOGE1NGQyNTY3YTdjY2IzNWU2MTdjMDgwNjMzODY1N2I2OTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IfgbJQXQnTdo/brq3SYqFpZvaJZ
f0mJ941NONG7bFYq6QJlSXBTpHEv1gFTsy6CPtaBxPgXZDovcFwhpE6siITMzLUk
bAp4L1GSvhcChvKPDnBzSifiWt4mqLnZqVTz3Q/M9bniFkz/6aLiLJ5NZDLnJuqb
5rGacBBwLI50nHciUYHRUpRhOoNRN49AORvAM6GtdIlsZLU21XI+y/5yzZk+bOFK
AGzGrLuZY563U//ilKhGmeRqQ0LOOqtVv/zPkhWvKglyBKimtiNMbe/gJDW6ZUOd
S2qhwiYM6LHBNvI7AbmObKqmgPRSW8xLIzJPyWIpRvRa+uVb8XQkjyOz1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPiilTSVnp8yzXmF8CAYzhle2lzMB8GA1UdIwQY
MBaAFL07y4Yovb6tsZSiNaxLjItxHjfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlR2TGhpaTl2cTJ4bEtJMXJFdU1pM0VlTjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yOGMyYjctNjY3ZS00ZGVmLWI0MTUt
N2I0YWRlYjdhNGI1LzEvdlR2TGhpaTl2cTJ4bEtJMXJFdU1pM0VlTjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yOGMyYjctNjY3ZS00ZGVmLWI0MTUtN2I0YWRlYjdhNGI1
LzEvdlR2TGhpaTl2cTJ4bEtJMXJFdU1pM0VlTjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxkdTN5d
ShFFXsS8renavN3bx6sk8/0Lx/wDcdM7Ym2oM/iUjrK4hVWa8N/Tmhb45jv4SNRw
P2wVA7NWwbXy0feNCe5Lg4WTqpbfnHr7ODvXiJCIGbjLPH8lykTV2RF683cO8v38
mTIhBus54tt6ND5cyEJzm0mROmmEw4qNpJtgki87cCU2LNSFdooJBICa5qiotuir
RY5eDtEiGjS+yngL8/B7M9f18qVKnrzhPfrK0wvnRy9cxrpegVo7odqhzPeKUime
5sk8F66HVY+K+0lES+EsimKo/kMgP0Ru9uL/AXGFM03dSRnTbfySiHZ00LFFmRDr
I8DCgLEfipcQ8g==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:48 2025 by rpki-client