Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
File: S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json)
Hash identifier: d/MYpCim3ygcYN+suvMrV6z3KDcpSFrGH50ltgtoCKU=
Subject key identifier: 20:77:0B:1A:AA:E3:4F:B6:60:2F:B0:C3:35:12:A0:B5:EB:B5:22:8E
Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7
Certificate serial: 0194C4D16E522877C1E66C42921FED434966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
Manifest number: 0D05
Signing time: Sun 02 Feb 2025 04:00:47 +0000
Manifest this update: Sun 02 Feb 2025 04:00:47 +0000
Manifest next update: Mon 03 Feb 2025 04:00:47 +0000
Files and hashes: 1: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: l0SiW3Mvdm3KbKYXHrKSPRXM9qm3hJNhUQd2FZCKIgQ=)
2: kOwiiAs2eR9pLFxLIBL1AOIYN3E.roa (hash: 3SQNAvfGJwEZLUa1WsSC2ImeHyAv94EKwUzIAUYUAnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:6e:52:28:77:c1:e6:6c:42:92:1f:ed:43:49:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7
Validity
Not Before: Feb 2 04:00:47 2025 GMT
Not After : Feb 3 04:00:47 2025 GMT
Subject: CN=20770b1aaae34fb6602fb0c33512a0b5ebb5228e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:4e:8a:a3:05:e6:a1:2c:7a:4c:cd:2a:19:
d1:93:01:2c:cf:77:06:8a:02:4c:56:a3:f7:f5:63:
0c:17:4a:1a:5c:ed:a7:a5:f9:72:c8:b8:c4:d7:d0:
12:d3:6a:ef:f0:0e:42:3a:95:c1:c0:6f:95:9b:df:
37:d4:7f:84:9d:1a:c9:96:b9:50:6b:83:4b:da:37:
9e:c7:74:74:12:17:55:2d:6d:c2:a8:db:b6:0c:73:
37:04:15:60:ed:e3:44:44:d8:57:57:15:34:81:e2:
76:25:3d:10:8d:69:99:e0:fe:b5:56:23:58:10:54:
22:c2:b5:5c:4c:e2:42:d2:17:1b:10:cb:7a:b7:c9:
61:b2:5e:34:66:0b:c5:be:ea:7c:ba:54:90:c5:56:
b9:8d:54:a6:2b:aa:52:76:b3:b1:c2:1b:a2:db:b2:
f1:78:39:f1:83:0e:e9:57:f3:0f:48:d6:12:69:8e:
e6:11:ab:05:05:8a:b7:d8:74:c6:94:a3:ed:0b:f4:
81:11:9e:b7:8a:f8:89:c0:ba:67:14:88:ff:b7:88:
4f:1e:62:af:55:31:e6:54:40:b9:cc:0c:a2:8c:28:
5b:0d:78:f4:b4:3b:ba:9f:42:55:60:d4:0c:f9:bd:
2d:31:1a:fa:e3:b5:1e:7f:9c:fa:7e:2a:34:9f:13:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:77:0B:1A:AA:E3:4F:B6:60:2F:B0:C3:35:12:A0:B5:EB:B5:22:8E
X509v3 Authority Key Identifier:
keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fd:0f:ca:44:1f:df:57:78:22:f8:44:31:16:4a:55:3f:90:
bd:c8:5c:38:67:2a:e2:6f:19:3c:78:ea:b3:3f:9b:8b:0e:54:
1f:f0:74:c2:33:84:93:36:37:ee:56:44:87:4b:9e:32:14:6e:
60:ec:79:fe:7f:aa:05:bd:f0:0d:84:41:10:d7:61:99:67:4c:
7a:f5:1f:1d:53:da:b5:15:77:a4:6a:2d:82:c9:6c:c7:0f:ac:
b3:e5:c7:d0:de:b9:bd:41:b4:fd:17:7f:b5:61:de:00:70:2c:
ce:1b:68:6a:ba:46:81:86:c7:4e:3f:21:05:da:4d:24:e5:8e:
6b:76:52:9a:e6:b1:fe:d8:d5:10:e5:03:6e:fc:a9:df:b0:b5:
79:42:79:49:61:49:5a:80:75:23:5d:55:49:10:44:4e:7c:76:
f2:cb:2e:77:71:bf:34:b3:aa:f9:a6:73:e1:8e:04:09:12:98:
69:09:0c:b3:1a:ef:dc:d4:e1:f6:9e:c5:f5:3c:c7:8e:55:72:
e0:80:5c:5d:20:4a:5f:eb:2b:42:3f:ab:d4:4f:b0:4c:16:33:
94:a2:2a:da:97:14:eb:bd:95:58:4c:51:d0:ce:c7:a8:1d:92:
d1:e7:cf:ab:45:d3:1d:63:a2:e5:a1:44:4d:8f:b9:02:7a:b6:
d5:b3:b0:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0W5SKHfB5mxCkh/tQ0lmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYmJjMTA2OTc3NWE4MDQ4MDZiNTBiYWVkN2VjZTg0OGFi
ZGU4YTcwHhcNMjUwMjAyMDQwMDQ3WhcNMjUwMjAzMDQwMDQ3WjAzMTEwLwYDVQQD
EygyMDc3MGIxYWFhZTM0ZmI2NjAyZmIwYzMzNTEyYTBiNWViYjUyMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIdOiqMF5qEsekzNKhnRkwEsz3cG
igJMVqP39WMMF0oaXO2npflyyLjE19AS02rv8A5COpXBwG+Vm9831H+EnRrJlrlQ
a4NL2jeex3R0EhdVLW3CqNu2DHM3BBVg7eNERNhXVxU0geJ2JT0QjWmZ4P61ViNY
EFQiwrVcTOJC0hcbEMt6t8lhsl40ZgvFvup8ulSQxVa5jVSmK6pSdrOxwhui27Lx
eDnxgw7pV/MPSNYSaY7mEasFBYq32HTGlKPtC/SBEZ63iviJwLpnFIj/t4hPHmKv
VTHmVEC5zAyijChbDXj0tDu6n0JVYNQM+b0tMRr647Uef5z6fio0nxPLfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCB3Cxqq40+2YC+wwzUSoLXrtSKOMB8GA1UdIwQY
MBaAFEu7wQaXdagEgGtQuu1+zoSKveinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zYWU1NmUtYmY5Ni00ODk2LWE2OGQt
OWNmZjg0OTZlMzM0LzEvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zYWU1NmUtYmY5Ni00ODk2LWE2OGQtOWNmZjg0OTZlMzM0
LzEvUzd2QkJwZDFxQVNBYTFDNjdYN09oSXE5NktjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGf0PykQf
31d4IvhEMRZKVT+QvchcOGcq4m8ZPHjqsz+biw5UH/B0wjOEkzY37lZEh0ueMhRu
YOx5/n+qBb3wDYRBENdhmWdMevUfHVPatRV3pGotgslsxw+ss+XH0N65vUG0/Rd/
tWHeAHAszhtoarpGgYbHTj8hBdpNJOWOa3ZSmuax/tjVEOUDbvyp37C1eUJ5SWFJ
WoB1I11VSRBETnx28ssud3G/NLOq+aZz4Y4ECRKYaQkMsxrv3NTh9p7F9TzHjlVy
4IBcXSBKX+srQj+r1E+wTBYzlKIq2pcU672VWExR0M7HqB2S0efPq0XTHWOi5aFE
TY+5Anq21bOwdQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:02 2025 by rpki-client