Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: YKXy1lPETqbklhvhfBXVYlXx5xFSoz7SoD3l4eVfiOo=
Subject key identifier: A9:ED:F2:D5:75:32:3E:20:F5:E0:1E:DC:6C:40:38:75:C8:0F:9E:C9
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 019511D9CA92A09661CEB00E2D9C2AF440A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 03:00:40 +0000
Manifest this update: Mon 17 Feb 2025 03:00:40 +0000
Manifest next update: Tue 18 Feb 2025 03:00:40 +0000
Files and hashes: 1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=)
2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: QfttA5TxTNtDd/Wk/pOramVtAT4BJ5ZA59X2IEXIARs=)
4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:ca:92:a0:96:61:ce:b0:0e:2d:9c:2a:f4:40:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Feb 17 03:00:40 2025 GMT
Not After : Feb 18 03:00:40 2025 GMT
Subject: CN=a9edf2d575323e20f5e01edc6c403875c80f9ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:c3:4c:12:5f:45:3f:9f:9b:1b:54:bc:84:
39:0f:ab:48:80:fe:46:fd:67:50:83:43:5d:42:d0:
22:e7:eb:9c:d8:5f:f4:ab:6c:16:04:56:f2:3e:65:
d2:d6:24:41:f4:38:22:27:49:ee:52:b5:9a:cf:0b:
8f:ac:38:3f:29:f1:b4:4a:f2:11:21:f3:99:6e:5d:
96:17:ee:1a:51:d3:47:41:42:1e:04:ef:06:cc:61:
3c:7c:b0:77:61:92:91:05:8b:dd:af:84:3d:4b:6c:
a5:ea:fd:ea:a6:41:f3:05:35:a6:ba:aa:bf:c2:65:
f2:82:1e:98:56:9c:16:b0:99:47:88:d5:7d:15:1c:
66:08:64:25:56:01:4b:4a:d3:b4:5d:8e:d1:f7:76:
00:15:12:af:31:46:17:4f:9f:35:3e:d0:24:6d:64:
b5:0e:97:53:f4:8d:1a:3d:4a:b8:7f:d7:28:93:79:
93:46:eb:ba:1a:95:f3:86:72:c2:44:b0:07:da:87:
39:87:85:1c:ab:99:39:ac:5c:1e:05:2f:8f:f8:c7:
18:b4:ba:3b:dc:fd:93:00:d7:5d:ab:e4:9b:bb:44:
4f:c4:a6:64:fd:47:b1:13:b4:34:07:9b:9d:0a:d9:
ab:56:73:33:0c:ad:e7:33:80:36:f6:89:f7:d1:0b:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:ED:F2:D5:75:32:3E:20:F5:E0:1E:DC:6C:40:38:75:C8:0F:9E:C9
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d3:63:8e:fd:75:54:2f:85:8f:2a:fb:64:20:ec:05:27:f1:
72:b9:99:14:24:1f:c6:fe:36:d2:74:ec:34:a6:de:ee:48:d5:
97:97:5f:02:e7:8b:05:4d:36:ae:e6:79:5e:5f:f3:0a:b7:7f:
17:0e:9b:6c:a0:80:6f:ad:07:8c:4d:17:26:f8:32:91:5a:c4:
b6:5f:3d:70:79:4c:83:a2:0b:04:e3:30:50:92:c9:72:77:cb:
b9:07:62:45:96:20:04:83:81:06:f7:d8:98:2a:a9:c1:ec:70:
10:b1:19:84:10:9c:17:d7:f3:1d:ff:3d:3b:84:6f:8a:57:51:
0e:d0:df:df:32:70:38:4e:94:0c:60:08:c8:ae:79:47:ef:a3:
9e:7b:df:32:10:ae:de:b5:a4:79:4b:46:2b:6f:fd:8e:58:02:
e7:6d:48:9f:10:33:8b:26:5f:90:5a:6b:85:40:24:4b:d4:23:
b9:bc:a6:14:37:c8:55:0f:d9:62:29:1b:d3:bd:4d:38:28:ac:
ab:70:9c:80:97:81:30:40:47:09:bf:9c:e3:b1:81:82:fb:20:
3a:4f:33:7c:2c:e7:ea:e6:4c:6e:55:7c:6e:72:18:a5:05:8f:
d1:8e:ae:0c:81:6b:67:88:30:67:65:7e:65:2d:72:5c:98:50:
2e:90:e3:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2cqSoJZhzrAOLZwq9ECnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MTg0Y2U5MTkwMjM2NDBiYjkyNTZjMmQ4ZDFhMDQ5ZmEx
MDI1MjAwHhcNMjUwMjE3MDMwMDQwWhcNMjUwMjE4MDMwMDQwWjAzMTEwLwYDVQQD
EyhhOWVkZjJkNTc1MzIzZTIwZjVlMDFlZGM2YzQwMzg3NWM4MGY5ZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyfDTBJfRT+fmxtUvIQ5D6tIgP5G
/WdQg0NdQtAi5+uc2F/0q2wWBFbyPmXS1iRB9DgiJ0nuUrWazwuPrDg/KfG0SvIR
IfOZbl2WF+4aUdNHQUIeBO8GzGE8fLB3YZKRBYvdr4Q9S2yl6v3qpkHzBTWmuqq/
wmXygh6YVpwWsJlHiNV9FRxmCGQlVgFLStO0XY7R93YAFRKvMUYXT581PtAkbWS1
DpdT9I0aPUq4f9cok3mTRuu6GpXzhnLCRLAH2oc5h4Ucq5k5rFweBS+P+McYtLo7
3P2TANddq+Sbu0RPxKZk/UexE7Q0B5udCtmrVnMzDK3nM4A29on30Qs9kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnt8tV1Mj4g9eAe3GxAOHXID57JMB8GA1UdIwQY
MBaAFIQYTOkZAjZAu5JWwtjRoEn6ECUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEt
MGE3OWQ1NDk2NWE5LzEvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEtMGE3OWQ1NDk2NWE5
LzEvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9Njjv11
VC+Fjyr7ZCDsBSfxcrmZFCQfxv420nTsNKbe7kjVl5dfAueLBU02ruZ5Xl/zCrd/
Fw6bbKCAb60HjE0XJvgykVrEtl89cHlMg6ILBOMwUJLJcnfLuQdiRZYgBIOBBvfY
mCqpwexwELEZhBCcF9fzHf89O4RvildRDtDf3zJwOE6UDGAIyK55R++jnnvfMhCu
3rWkeUtGK2/9jlgC521InxAziyZfkFprhUAkS9QjubymFDfIVQ/ZYikb071NOCis
q3CcgJeBMEBHCb+c47GBgvsgOk8zfCzn6uZMblV8bnIYpQWP0Y6uDIFrZ4gwZ2V+
ZS1yXJhQLpDjTQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:08 2025 by rpki-client