Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
File: dxPzWC9jkBMFUwtLGTbNbmYRowo.mft (raw, json)
Hash identifier: tKeXb82kUI+LEJwEW4vUohM66YnkGp7QrHCLuJkNDQ0=
Subject key identifier: 26:88:5E:D8:30:0D:5C:C9:39:A7:AB:53:0B:23:CA:36:49:E6:BB:A9
Authority key identifier: 77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
Certificate issuer: /CN=7713f3582f63901305530b4b1936cd6e6611a30a
Certificate serial: 01951135259182961F3D232F6143A47C73A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
Manifest number: 0257
Signing time: Mon 17 Feb 2025 00:00:50 +0000
Manifest this update: Mon 17 Feb 2025 00:00:50 +0000
Manifest next update: Tue 18 Feb 2025 00:00:50 +0000
Files and hashes: 1: QBpayCeedHorPlMUrxP80cZpQMk.roa (hash: OQ5xE2z8NMteCC4WWbezxTDqjx0MzAo+K4Av2s6co/8=)
2: dxPzWC9jkBMFUwtLGTbNbmYRowo.crl (hash: eO7dhiip9tcj9YXt9EAl4YpBIusc43Yj2XsZRGhJ21w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:25:91:82:96:1f:3d:23:2f:61:43:a4:7c:73:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7713f3582f63901305530b4b1936cd6e6611a30a
Validity
Not Before: Feb 17 00:00:50 2025 GMT
Not After : Feb 18 00:00:50 2025 GMT
Subject: CN=26885ed8300d5cc939a7ab530b23ca3649e6bba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b1:37:46:1b:4e:68:02:89:30:79:72:97:59:
b1:52:71:69:6a:3d:60:17:e8:07:3c:ae:76:b5:df:
e7:11:92:bb:f1:53:85:88:9a:36:f3:71:c9:eb:6d:
38:45:60:eb:84:56:d8:87:8a:17:27:e0:55:a6:c8:
af:1c:dc:6a:10:b3:47:b5:51:79:b1:d4:1d:7b:55:
c4:de:38:07:62:15:10:e2:8b:18:74:12:d1:ea:1d:
62:60:b1:e9:af:e4:24:c9:79:2c:88:75:58:df:2e:
78:a7:d5:34:39:a4:33:53:cb:0f:03:f2:77:f0:d9:
9d:52:3e:91:91:7f:11:66:82:6c:0e:17:14:a8:05:
6f:82:36:32:97:46:5a:2b:c2:4a:ca:f8:7a:52:bc:
86:78:b5:f7:1e:a4:c1:8e:74:cc:aa:bd:ec:51:49:
75:1e:22:8c:67:ab:95:f6:10:65:4a:2d:59:d3:25:
73:f8:7b:fd:56:5e:80:0c:06:5b:d4:29:b5:b3:bb:
9e:cb:7f:dc:2b:a6:29:d4:94:15:18:d4:78:80:62:
4c:98:6a:c4:f8:fd:49:67:98:36:60:5f:3f:52:f5:
84:16:b3:8c:0c:9f:ac:b6:72:c8:af:20:0f:b9:f5:
7a:96:83:1e:f9:85:36:d8:a1:f6:ec:a2:ec:71:92:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:88:5E:D8:30:0D:5C:C9:39:A7:AB:53:0B:23:CA:36:49:E6:BB:A9
X509v3 Authority Key Identifier:
keyid:77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b6:07:d3:ad:b6:cd:ea:3c:8e:88:31:49:09:29:df:31:11:
41:34:75:cb:37:a9:fa:c0:11:1e:5f:e5:83:94:30:ad:80:ae:
f6:03:d7:11:65:5f:10:d1:17:0a:0b:06:2c:49:e8:73:4f:d4:
48:8f:5f:0c:0c:63:74:b0:a3:da:bc:67:a0:a0:42:30:cb:0e:
23:31:b1:c5:21:58:f6:2c:d3:c5:13:97:2e:19:66:2a:80:dd:
f4:4c:d9:b4:92:6b:f0:e5:43:df:e4:3d:f8:48:a2:a3:ff:c7:
6c:04:bb:04:3a:51:b9:95:24:cf:92:7e:52:f8:f6:20:19:4b:
94:8e:f7:8b:4c:f1:b2:f2:d5:cb:51:54:3f:dd:50:65:e2:b2:
e9:3e:f3:39:9a:94:da:0e:12:bd:8f:6b:25:d7:9c:d5:3b:2a:
c0:ff:64:30:98:e8:0c:03:5a:c1:3b:2e:38:33:8a:07:92:4a:
68:4e:75:8f:40:90:86:1c:36:67:74:6d:08:25:ae:53:ad:25:
5c:09:87:ce:76:ee:55:6c:2d:c3:ed:4f:10:da:e5:18:1a:9f:
99:c8:28:9c:ac:a4:54:68:24:62:1d:62:e2:31:4b:b7:40:c4:
85:63:df:2c:7d:ce:e2:cf:f9:dd:27:72:a7:10:02:15:19:b8:
89:52:33:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNSWRgpYfPSMvYUOkfHOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTNmMzU4MmY2MzkwMTMwNTUzMGI0YjE5MzZjZDZlNjYx
MWEzMGEwHhcNMjUwMjE3MDAwMDUwWhcNMjUwMjE4MDAwMDUwWjAzMTEwLwYDVQQD
EygyNjg4NWVkODMwMGQ1Y2M5MzlhN2FiNTMwYjIzY2EzNjQ5ZTZiYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LE3RhtOaAKJMHlyl1mxUnFpaj1g
F+gHPK52td/nEZK78VOFiJo283HJ6204RWDrhFbYh4oXJ+BVpsivHNxqELNHtVF5
sdQde1XE3jgHYhUQ4osYdBLR6h1iYLHpr+QkyXksiHVY3y54p9U0OaQzU8sPA/J3
8NmdUj6RkX8RZoJsDhcUqAVvgjYyl0ZaK8JKyvh6UryGeLX3HqTBjnTMqr3sUUl1
HiKMZ6uV9hBlSi1Z0yVz+Hv9Vl6ADAZb1Cm1s7uey3/cK6Yp1JQVGNR4gGJMmGrE
+P1JZ5g2YF8/UvWEFrOMDJ+stnLIryAPufV6loMe+YU22KH27KLscZLg5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaIXtgwDVzJOaerUwsjyjZJ5rupMB8GA1UdIwQY
MBaAFHcT81gvY5ATBVMLSxk2zW5mEaMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQt
MTg5ZDUzYWU0ZTNlLzEvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQtMTg5ZDUzYWU0ZTNl
LzEvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvbYH0622
zeo8jogxSQkp3zERQTR1yzep+sARHl/lg5QwrYCu9gPXEWVfENEXCgsGLEnoc0/U
SI9fDAxjdLCj2rxnoKBCMMsOIzGxxSFY9izTxROXLhlmKoDd9EzZtJJr8OVD3+Q9
+Eiio//HbAS7BDpRuZUkz5J+Uvj2IBlLlI73i0zxsvLVy1FUP91QZeKy6T7zOZqU
2g4SvY9rJdec1TsqwP9kMJjoDANawTsuODOKB5JKaE51j0CQhhw2Z3RtCCWuU60l
XAmHznbuVWwtw+1PENrlGBqfmcgonKykVGgkYh1i4jFLt0DEhWPfLH3O4s/53Sdy
pxACFRm4iVIzIQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:19 2025 by rpki-client