Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier: W3qazTf+/VW2moNhLkqwzSygy2Dd9wEs+WHwqGEZ7yE=
Subject key identifier: D4:32:BE:F0:15:A7:27:40:2C:D2:AD:82:E8:6D:B2:3E:E5:D0:1C:9C
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 01951134D32E3672310301B12E65BF250E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 00:00:29 +0000
Manifest this update: Mon 17 Feb 2025 00:00:29 +0000
Manifest next update: Tue 18 Feb 2025 00:00:29 +0000
Files and hashes: 1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=)
2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: HOc4iHBR1EqbXOzmUuc1KHBEgw6QYK1gcedhv3q0Z7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:d3:2e:36:72:31:03:01:b1:2e:65:bf:25:0e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Feb 17 00:00:29 2025 GMT
Not After : Feb 18 00:00:29 2025 GMT
Subject: CN=d432bef015a727402cd2ad82e86db23ee5d01c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:9e:10:49:72:a6:d3:2a:5b:d1:e4:af:1b:
18:3e:a0:7c:c5:eb:41:6e:24:24:08:32:ef:3a:0b:
03:8c:b8:90:9c:e3:b9:d6:0c:9c:5e:8b:29:c7:23:
80:33:a8:1b:d9:ea:27:61:58:b0:89:b9:45:0f:d6:
d0:97:f9:86:7b:b1:83:9e:1f:5a:40:ed:46:4e:30:
b3:2e:69:b5:fc:d8:27:45:f0:6d:ae:b2:71:9b:0b:
ff:ee:5f:df:14:8b:e7:58:58:dd:6d:38:f6:31:65:
7b:67:20:62:eb:2c:dc:b1:20:ee:66:de:a9:1b:f4:
86:65:14:de:9a:61:6a:14:7d:d9:f7:20:87:21:c0:
ca:f6:ac:84:4c:b2:39:b1:c5:3b:ec:15:94:d0:ff:
42:06:19:2a:38:85:51:73:1e:97:2c:1c:b4:df:0d:
1c:67:e8:5e:74:7a:56:72:2e:42:f2:d4:0b:de:c6:
bd:8e:bd:ab:44:56:f6:0a:05:5b:be:19:88:83:0f:
99:27:51:84:29:e2:99:aa:cf:77:da:4e:de:54:22:
08:08:09:5c:b8:0e:24:c4:e9:20:63:34:d7:08:93:
47:49:e0:b9:f9:66:45:49:73:32:c8:87:d5:64:26:
f4:12:7e:10:66:d9:c1:20:ed:d2:74:2b:1d:92:57:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:32:BE:F0:15:A7:27:40:2C:D2:AD:82:E8:6D:B2:3E:E5:D0:1C:9C
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:77:4b:f2:cd:b9:e1:f3:cc:28:41:e2:d4:bd:6a:59:62:63:
1c:95:e9:c0:40:a0:ad:3b:da:d7:fd:27:8c:b9:80:32:ba:d6:
b2:3f:58:8c:9b:2c:3a:f2:f0:27:59:b1:a4:68:a0:ab:a2:09:
91:1b:8f:5a:39:ed:c4:7b:25:5d:4d:30:a2:ff:e8:d5:36:35:
74:11:7b:b3:da:b6:9d:ca:89:ee:9a:30:3e:b3:8d:74:3d:d3:
a4:82:e8:99:af:66:63:72:ca:a8:78:ea:09:3a:4e:eb:35:32:
6b:d6:9e:59:5e:c4:f1:e9:91:6c:e6:21:81:53:77:12:38:d0:
65:41:06:9b:34:ed:4f:59:82:b3:ef:54:c1:5d:b3:09:7b:85:
34:61:81:ce:2b:ee:67:32:44:ed:6c:60:8d:40:8a:57:28:a7:
ff:8a:67:69:b3:d8:e4:9f:87:2c:ec:65:76:ae:a4:44:70:7e:
42:ce:16:69:b2:21:90:ed:ab:43:2c:9a:77:91:48:4d:d0:d4:
5f:62:77:b9:7e:7d:44:ce:ad:16:6f:02:24:57:85:df:be:4e:
7a:86:b5:0a:f8:93:8d:20:18:ac:1a:09:e1:6a:c8:f1:ec:15:
49:17:df:47:5e:64:08:c0:16:d0:ea:ce:9d:48:71:fa:e5:26:
9a:38:ad:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNNMuNnIxAwGxLmW/JQ4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYjViYjgwZmVlZjM0NDY1MGE5YTc3M2Y2MWYwYjJjZmJm
N2NlOGMwHhcNMjUwMjE3MDAwMDI5WhcNMjUwMjE4MDAwMDI5WjAzMTEwLwYDVQQD
EyhkNDMyYmVmMDE1YTcyNzQwMmNkMmFkODJlODZkYjIzZWU1ZDAxYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwaeEElyptMqW9HkrxsYPqB8xetB
biQkCDLvOgsDjLiQnOO51gycXospxyOAM6gb2eonYViwiblFD9bQl/mGe7GDnh9a
QO1GTjCzLmm1/NgnRfBtrrJxmwv/7l/fFIvnWFjdbTj2MWV7ZyBi6yzcsSDuZt6p
G/SGZRTemmFqFH3Z9yCHIcDK9qyETLI5scU77BWU0P9CBhkqOIVRcx6XLBy03w0c
Z+hedHpWci5C8tQL3sa9jr2rRFb2CgVbvhmIgw+ZJ1GEKeKZqs932k7eVCIICAlc
uA4kxOkgYzTXCJNHSeC5+WZFSXMyyIfVZCb0En4QZtnBIO3SdCsdkldkaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQyvvAVpydALNKtguhtsj7l0BycMB8GA1UdIwQY
MBaAFJC1u4D+7zRGUKmnc/YfCyz7986MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMt
NWVkNTI3MGVkZjIzLzEva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMtNWVkNTI3MGVkZjIz
LzEva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3dL8s25
4fPMKEHi1L1qWWJjHJXpwECgrTva1/0njLmAMrrWsj9YjJssOvLwJ1mxpGigq6IJ
kRuPWjntxHslXU0wov/o1TY1dBF7s9q2ncqJ7powPrONdD3TpILoma9mY3LKqHjq
CTpO6zUya9aeWV7E8emRbOYhgVN3EjjQZUEGmzTtT1mCs+9UwV2zCXuFNGGBzivu
ZzJE7WxgjUCKVyin/4pnabPY5J+HLOxldq6kRHB+Qs4WabIhkO2rQyyad5FITdDU
X2J3uX59RM6tFm8CJFeF375Oeoa1CviTjSAYrBoJ4WrI8ewVSRffR15kCMAW0OrO
nUhx+uUmmjitcA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:57 2025 by rpki-client