Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier: AtWd8P+ecCPfEcKSF4qPih/IMQj5DoM21Xco8V5Skt8=
Subject key identifier: D3:68:B2:68:C3:28:B7:71:B2:54:D6:4D:77:24:9F:D3:E8:BC:08:72
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial: 019511D98E43A5054C6645018BE6C98AB764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number: 0BEC
Signing time: Mon 17 Feb 2025 03:00:25 +0000
Manifest this update: Mon 17 Feb 2025 03:00:25 +0000
Manifest next update: Tue 18 Feb 2025 03:00:25 +0000
Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: f1UJYobx9perjcyr3pBWjxcYU281mx3dYprg7w767mU=)
2: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (hash: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:8e:43:a5:05:4c:66:45:01:8b:e6:c9:8a:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Validity
Not Before: Feb 17 03:00:25 2025 GMT
Not After : Feb 18 03:00:25 2025 GMT
Subject: CN=d368b268c328b771b254d64d77249fd3e8bc0872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:13:71:3a:b4:45:6a:85:16:fa:2e:f6:95:
b8:a9:bb:ac:14:de:73:48:c2:02:09:5b:61:36:24:
dc:09:d4:fc:f7:74:00:2e:92:88:fd:49:38:3f:dc:
81:f4:b6:55:e3:b6:12:5e:4e:8d:91:fd:23:57:32:
92:66:c3:1d:d6:7b:bd:c5:49:d1:c6:91:68:ae:da:
ab:10:d7:d8:5e:02:22:55:f5:7d:1f:ce:eb:be:04:
4d:3f:bd:df:5b:65:40:aa:a2:72:05:c7:96:76:20:
09:91:51:5a:0f:94:d1:48:6f:f1:42:96:34:b6:bb:
cd:d4:24:b3:17:e1:da:93:91:4d:cf:0b:e0:d8:d9:
2e:82:f9:38:53:44:7a:89:a6:a0:c4:98:1a:44:01:
cd:ff:bd:f0:9b:73:45:0b:57:b3:d8:d4:d0:2b:8c:
c3:06:10:21:50:a4:d6:12:b9:3b:cf:3b:47:b2:85:
06:ba:96:3f:ea:1b:d9:10:c4:f9:b8:49:e8:bf:82:
e4:7a:aa:86:20:22:2f:33:29:e0:13:7a:dd:e2:f4:
56:32:bb:f3:dd:af:5d:cd:7d:9e:96:4b:c9:ce:09:
17:2b:a3:2d:bd:2d:6b:5e:d6:f6:58:3f:fd:af:15:
f7:14:84:8c:0e:62:bb:a5:d2:72:26:aa:08:6e:dd:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:68:B2:68:C3:28:B7:71:B2:54:D6:4D:77:24:9F:D3:E8:BC:08:72
X509v3 Authority Key Identifier:
keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e7:a1:71:7c:1e:97:3a:6d:d9:f9:5e:0e:45:d3:3a:4d:ee:
2a:38:7c:97:c1:60:dc:b1:8a:c2:28:e2:e3:a7:f9:30:08:1c:
21:99:81:a3:48:2c:e1:cb:44:a9:23:11:df:91:a7:2e:5d:f4:
63:dc:75:16:ed:86:61:9c:60:4e:5c:a9:fa:3c:2f:96:4d:03:
40:2d:4f:2d:e9:f1:56:52:bf:44:9e:9f:24:3c:09:fc:ea:ab:
47:2b:68:79:2c:9e:ea:76:40:98:16:ce:d4:32:5f:16:86:04:
40:99:01:d7:cf:5e:62:24:2a:00:39:d3:8a:53:9f:af:4d:8a:
d2:b6:1b:16:2f:42:de:ec:2e:75:9e:4a:9a:1c:97:b5:d6:a1:
af:c9:e6:5c:44:8e:92:98:43:57:4c:d9:ee:30:4b:a4:2f:fe:
3d:71:bc:0e:80:aa:bd:96:6a:bb:d4:cc:09:dd:d7:3a:db:47:
8b:8b:39:d1:c9:17:28:49:b0:d3:3d:2a:de:a5:2e:b6:f8:6f:
96:bf:fc:28:33:c0:2f:9e:d9:d2:1d:41:09:dc:13:8f:75:e2:
98:a7:16:99:23:29:f0:35:45:fd:bd:fc:b7:ee:b2:55:72:ed:
3a:b9:7a:2f:8b:f4:af:66:79:72:c7:cd:d2:28:9f:3d:45:fa:
e7:45:d7:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2Y5DpQVMZkUBi+bJirdkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWE1ZWNhNmNkMzhlOTIxYjVhMTQ1NzA4NTRhZGI0YTNi
NjkyMzgwHhcNMjUwMjE3MDMwMDI1WhcNMjUwMjE4MDMwMDI1WjAzMTEwLwYDVQQD
EyhkMzY4YjI2OGMzMjhiNzcxYjI1NGQ2NGQ3NzI0OWZkM2U4YmMwODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvATcTq0RWqFFvou9pW4qbusFN5z
SMICCVthNiTcCdT893QALpKI/Uk4P9yB9LZV47YSXk6Nkf0jVzKSZsMd1nu9xUnR
xpFortqrENfYXgIiVfV9H87rvgRNP73fW2VAqqJyBceWdiAJkVFaD5TRSG/xQpY0
trvN1CSzF+Hak5FNzwvg2Nkugvk4U0R6iaagxJgaRAHN/73wm3NFC1ez2NTQK4zD
BhAhUKTWErk7zztHsoUGupY/6hvZEMT5uEnov4LkeqqGICIvMyngE3rd4vRWMrvz
3a9dzX2elkvJzgkXK6MtvS1rXtb2WD/9rxX3FISMDmK7pdJyJqoIbt27FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNosmjDKLdxslTWTXckn9PovAhyMB8GA1UdIwQY
MBaAFAtaXsps046SG1oUVwhUrbSjtpI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODct
ZTBkOTE0YzFjYjUwLzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODctZTBkOTE0YzFjYjUw
LzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+ehcXwe
lzpt2fleDkXTOk3uKjh8l8Fg3LGKwiji46f5MAgcIZmBo0gs4ctEqSMR35GnLl30
Y9x1Fu2GYZxgTlyp+jwvlk0DQC1PLenxVlK/RJ6fJDwJ/OqrRytoeSye6nZAmBbO
1DJfFoYEQJkB189eYiQqADnTilOfr02K0rYbFi9C3uwudZ5KmhyXtdahr8nmXESO
kphDV0zZ7jBLpC/+PXG8DoCqvZZqu9TMCd3XOttHi4s50ckXKEmw0z0q3qUutvhv
lr/8KDPAL57Z0h1BCdwTj3XimKcWmSMp8DVF/b38t+6yVXLtOrl6L4v0r2Z5csfN
0iifPUX650XXkw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:33 2025 by rpki-client