Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier: quQkzvNymjFtUqzThD8TwDbIsJO/PeGbd9BjEgwAgmU=
Subject key identifier: 86:97:76:B2:E6:29:24:83:4E:46:5A:33:CB:34:44:56:C0:09:57:FD
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial: 01951210582B2408DBFA032E094749AE4203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number: 0E51
Signing time: Mon 17 Feb 2025 04:00:15 +0000
Manifest this update: Mon 17 Feb 2025 04:00:15 +0000
Manifest next update: Tue 18 Feb 2025 04:00:15 +0000
Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: Yv1AD0CI0Bncx8Q2NxJR7SKZzbqE+u7HAuD8yFc7XmA=)
2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:58:2b:24:08:db:fa:03:2e:09:47:49:ae:42:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
Validity
Not Before: Feb 17 04:00:15 2025 GMT
Not After : Feb 18 04:00:15 2025 GMT
Subject: CN=869776b2e62924834e465a33cb344456c00957fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:4d:b5:3d:91:cf:c1:a7:0f:fb:f6:75:5f:
e7:a4:c9:a4:91:a8:69:44:72:fc:fb:a4:d4:30:7f:
bd:f0:df:b3:41:08:2d:b9:b1:d0:d5:c9:a6:b4:58:
0f:bf:cf:94:7a:20:32:c0:db:3e:5b:ca:eb:23:fc:
00:28:05:fc:4d:3b:19:e2:6c:8a:d8:7f:9f:72:2b:
33:f3:eb:98:aa:dc:65:93:0d:24:e1:19:3d:9c:29:
a4:9f:67:ab:dc:de:b7:15:f8:b2:23:ea:da:1f:ed:
2d:96:67:81:49:9e:99:b0:c4:ef:4b:c8:47:f0:9b:
b2:35:97:05:aa:cf:24:d1:30:02:32:db:ad:a5:f7:
d7:5f:5d:5a:79:6d:7b:c7:16:a6:99:5c:76:cd:a2:
80:8e:fc:b8:2a:4c:a2:3c:4f:0e:4d:ac:4e:af:ab:
31:14:87:80:a8:7c:8d:35:4f:53:c2:67:1c:a5:ef:
eb:6a:71:d8:fb:25:ea:83:55:53:06:84:7a:0d:a9:
7b:e0:78:2f:94:1e:6c:33:91:b6:4d:61:d7:24:d0:
e8:02:10:63:a2:0f:11:0f:35:46:cf:b6:13:38:0a:
fb:fc:9f:0d:1b:8a:52:d8:4c:94:09:86:dc:12:7d:
65:ef:45:66:87:2c:4d:b8:c0:a4:d6:a8:15:6f:41:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:97:76:B2:E6:29:24:83:4E:46:5A:33:CB:34:44:56:C0:09:57:FD
X509v3 Authority Key Identifier:
keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8a:d9:c8:5b:f1:6d:e5:a6:a0:04:54:e1:de:71:a2:d9:ef:
03:bf:eb:57:c6:22:03:57:34:fe:d1:f9:65:98:15:dc:d0:9a:
ad:ad:2c:b5:b5:5d:38:07:2b:3a:a3:fe:1e:fb:f3:ca:06:50:
14:70:3f:a2:78:ca:12:c3:6b:8d:b1:e1:63:7c:ca:6b:6a:dc:
76:fe:1d:a7:ad:9d:82:8a:38:f7:32:be:7b:9c:98:51:74:6a:
1d:61:7c:80:7d:de:9d:f2:53:ed:25:5f:7d:60:86:31:10:c9:
4c:a5:97:16:d6:ac:87:c6:b9:1a:0b:d9:04:74:22:8f:ec:c2:
12:22:81:68:84:4d:b7:2d:cc:b9:99:2f:88:e0:1d:a5:92:da:
b4:b9:bf:06:00:7c:a7:41:be:f2:b8:03:d7:02:7d:81:b9:73:
87:40:d6:10:37:f8:f4:70:c5:4a:7a:94:da:78:e7:7d:a6:0a:
73:a5:12:8c:ea:95:a2:d3:83:4b:c8:97:f1:76:30:a5:6d:43:
2d:97:ea:66:16:05:bc:99:8d:bb:e3:da:74:ea:23:68:56:36:
db:ab:81:2b:bf:cd:0d:b6:39:45:30:44:93:d2:0f:64:5e:5a:
98:88:74:a9:13:88:0c:af:14:9a:62:c4:16:b5:17:64:07:29:
bf:c3:78:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEFgrJAjb+gMuCUdJrkIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOWI2NzljMTQ2ODEwODlmMmQwNzc4NmRmMDRmNzc5ZDc0
MWMxMWEwHhcNMjUwMjE3MDQwMDE1WhcNMjUwMjE4MDQwMDE1WjAzMTEwLwYDVQQD
Eyg4Njk3NzZiMmU2MjkyNDgzNGU0NjVhMzNjYjM0NDQ1NmMwMDk1N2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIJNtT2Rz8GnD/v2dV/npMmkkahp
RHL8+6TUMH+98N+zQQgtubHQ1cmmtFgPv8+UeiAywNs+W8rrI/wAKAX8TTsZ4myK
2H+fcisz8+uYqtxlkw0k4Rk9nCmkn2er3N63FfiyI+raH+0tlmeBSZ6ZsMTvS8hH
8JuyNZcFqs8k0TACMtutpffXX11aeW17xxammVx2zaKAjvy4KkyiPE8OTaxOr6sx
FIeAqHyNNU9Twmccpe/ranHY+yXqg1VTBoR6Dal74HgvlB5sM5G2TWHXJNDoAhBj
og8RDzVGz7YTOAr7/J8NG4pS2EyUCYbcEn1l70VmhyxNuMCk1qgVb0EV4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaXdrLmKSSDTkZaM8s0RFbACVf9MB8GA1UdIwQY
MBaAFDGbZ5wUaBCJ8tB3ht8E93nXQcEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVp0bm5CUm9FSW55MEhlRzN3VDNlZGRCd1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xMzlmZjItZjVkMC00OWJlLTkxMGIt
YjVjOTQ1YTBjYTE2LzEvTVp0bm5CUm9FSW55MEhlRzN3VDNlZGRCd1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xMzlmZjItZjVkMC00OWJlLTkxMGItYjVjOTQ1YTBjYTE2
LzEvTVp0bm5CUm9FSW55MEhlRzN3VDNlZGRCd1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALorZyFvx
beWmoARU4d5xotnvA7/rV8YiA1c0/tH5ZZgV3NCara0stbVdOAcrOqP+HvvzygZQ
FHA/onjKEsNrjbHhY3zKa2rcdv4dp62dgoo49zK+e5yYUXRqHWF8gH3enfJT7SVf
fWCGMRDJTKWXFtash8a5GgvZBHQij+zCEiKBaIRNty3MuZkviOAdpZLatLm/BgB8
p0G+8rgD1wJ9gblzh0DWEDf49HDFSnqU2njnfaYKc6USjOqVotODS8iX8XYwpW1D
LZfqZhYFvJmNu+PadOojaFY226uBK7/NDbY5RTBEk9IPZF5amIh0qROIDK8UmmLE
FrUXZAcpv8N4kw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:50 2025 by rpki-client