Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: ydDxzDLmB8aHi1FV+do6YTDNGXnC7pmoWq356Z7Geic=
Subject key identifier: 7E:31:49:96:4C:76:84:00:04:8A:8F:CB:64:6F:41:9B:7A:46:56:A5
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 01951247263C37533782FA9B074792FF3759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 05:00:07 +0000
Manifest this update: Mon 17 Feb 2025 05:00:07 +0000
Manifest next update: Tue 18 Feb 2025 05:00:07 +0000
Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: kERjfEOM+gGOttHnhuJhg1yI+Msydi3lgSZZMKy149c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:26:3c:37:53:37:82:fa:9b:07:47:92:ff:37:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Feb 17 05:00:07 2025 GMT
Not After : Feb 18 05:00:07 2025 GMT
Subject: CN=7e3149964c768400048a8fcb646f419b7a4656a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:6f:e7:38:31:51:60:2e:17:c9:6f:cd:f7:
c8:02:54:82:4d:2c:8b:ce:44:b1:28:0d:0b:0b:2e:
3a:31:24:5a:29:6c:c4:8d:45:eb:51:c8:9a:c7:c4:
b9:1b:3e:73:f7:65:21:dd:7f:cc:be:5d:4b:04:2b:
51:a0:fd:48:a4:ca:2e:1f:a5:e3:3c:82:df:9c:15:
80:89:bb:c1:c0:6d:6d:3b:0d:79:b0:ea:d3:bb:a9:
de:f0:23:91:59:42:7b:6b:c4:52:38:0d:57:45:d2:
65:fa:0c:65:74:d4:29:7e:2f:0d:c3:52:0d:f9:e6:
07:d7:be:f9:37:54:56:bb:49:90:79:92:6b:28:3f:
42:63:fc:1a:cd:67:86:de:75:43:04:f8:0b:0b:e8:
97:52:b4:0a:b7:c3:97:a1:4c:48:f3:01:78:eb:c5:
e7:d6:1d:5d:95:2f:28:9c:d3:88:61:21:3d:ab:83:
3a:4c:37:2f:af:59:b6:99:ca:9d:9a:71:6a:df:d0:
ab:d2:1a:d0:3b:05:59:85:74:be:d0:8b:94:0f:19:
ec:35:4a:f6:e0:72:12:7a:3a:e9:4c:79:e0:e9:5d:
6e:4b:d1:e2:37:53:5a:a5:ed:d7:79:7c:a1:f3:8a:
9c:a9:1a:79:b6:9b:73:63:8e:9e:ff:16:fc:48:c1:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:31:49:96:4C:76:84:00:04:8A:8F:CB:64:6F:41:9B:7A:46:56:A5
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:34:a8:14:f5:aa:89:d6:51:a9:68:d1:cb:7d:9c:97:1b:f0:
8a:0e:f1:5e:0f:c9:b3:25:bc:e7:b7:0f:5e:a8:eb:26:90:55:
91:b8:a3:0e:65:44:cb:84:ab:f4:5d:1a:16:43:a3:4d:3b:81:
09:b2:05:e2:91:e1:72:bb:3e:c7:87:2b:e6:12:1c:a7:32:4f:
ea:48:c6:3c:10:bb:df:e8:a7:9b:72:1e:5b:4e:ab:ce:23:21:
97:4c:de:04:cb:7b:7a:bd:60:52:93:60:9c:48:95:be:1d:43:
8c:0d:2f:7e:50:74:1e:eb:c5:1c:39:f6:ea:a1:d3:d2:d8:d3:
40:52:94:74:3b:8b:37:8b:55:93:86:3a:d1:69:23:48:4d:72:
cc:27:5d:64:6f:15:91:3b:a3:ed:14:8a:ab:e2:72:34:7e:d8:
53:c5:e7:3b:cd:1a:e2:dd:8a:e0:1f:5a:3d:bb:a6:a9:0f:fd:
38:46:5b:22:ee:76:ee:b4:6d:ba:57:21:48:56:5c:46:b6:87:
85:a7:61:90:f1:4a:ad:e7:c3:22:fa:87:96:43:8a:e2:9f:8e:
04:b1:6b:41:7b:5c:da:d4:08:7c:00:69:60:31:22:b1:59:21:
c2:db:35:bf:3b:bc:d0:d0:28:d4:82:18:60:cb:e9:15:b5:b1:
03:91:34:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSRyY8N1M3gvqbB0eS/zdZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYjA0YjEzNTVlNWQ2ZWQyMjIzMjQ5NjMwYWM4YjlmNzQz
OWFlZTEwHhcNMjUwMjE3MDUwMDA3WhcNMjUwMjE4MDUwMDA3WjAzMTEwLwYDVQQD
Eyg3ZTMxNDk5NjRjNzY4NDAwMDQ4YThmY2I2NDZmNDE5YjdhNDY1NmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAlv5zgxUWAuF8lvzffIAlSCTSyL
zkSxKA0LCy46MSRaKWzEjUXrUciax8S5Gz5z92Uh3X/Mvl1LBCtRoP1IpMouH6Xj
PILfnBWAibvBwG1tOw15sOrTu6ne8CORWUJ7a8RSOA1XRdJl+gxldNQpfi8Nw1IN
+eYH1775N1RWu0mQeZJrKD9CY/wazWeG3nVDBPgLC+iXUrQKt8OXoUxI8wF468Xn
1h1dlS8onNOIYSE9q4M6TDcvr1m2mcqdmnFq39Cr0hrQOwVZhXS+0IuUDxnsNUr2
4HISejrpTHng6V1uS9HiN1Nape3XeXyh84qcqRp5tptzY46e/xb8SMHNnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4xSZZMdoQABIqPy2RvQZt6RlalMB8GA1UdIwQY
MBaAFK+wSxNV5dbtIiMkljCsi590Oa7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQt
YTZmNGYwZjRmNzJkLzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lMmI0OTQtYzBiMi00M2Y0LWJjNGQtYTZmNGYwZjRmNzJk
LzEvcjdCTEUxWGwxdTBpSXlTV01LeUxuM1E1cnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTSoFPWq
idZRqWjRy32clxvwig7xXg/JsyW857cPXqjrJpBVkbijDmVEy4Sr9F0aFkOjTTuB
CbIF4pHhcrs+x4cr5hIcpzJP6kjGPBC73+inm3IeW06rziMhl0zeBMt7er1gUpNg
nEiVvh1DjA0vflB0HuvFHDn26qHT0tjTQFKUdDuLN4tVk4Y60WkjSE1yzCddZG8V
kTuj7RSKq+JyNH7YU8XnO80a4t2K4B9aPbumqQ/9OEZbIu527rRtulchSFZcRraH
hadhkPFKrefDIvqHlkOK4p+OBLFrQXtc2tQIfABpYDEisVkhwts1vzu80NAo1IIY
YMvpFbWxA5E0ag==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:57 2025 by rpki-client