Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
File: ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json)
Hash identifier: s9cgomKXeucbQJ0NLujwt3F0xW9ngh9G8WybX8tc8u0=
Subject key identifier: 21:48:B9:1A:FB:FC:A0:E9:FA:05:81:7D:10:59:F6:B7:5A:09:08:A1
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Certificate issuer: /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial: 0194C49A0E38242F158996BDA9EE7C8B89C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
Manifest number: 1431
Signing time: Sun 02 Feb 2025 03:00:18 +0000
Manifest this update: Sun 02 Feb 2025 03:00:18 +0000
Manifest next update: Mon 03 Feb 2025 03:00:18 +0000
Files and hashes: 1: LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa (hash: 4AsxSz12Bf5YH8H2MmV75bbJxBPmSJ6rFj3b/HihsTo=)
2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: +XZ7lNflwIGL0YJgBwxd8gUcLGnIldUWRJ7n56Tut0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:0e:38:24:2f:15:89:96:bd:a9:ee:7c:8b:89:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Validity
Not Before: Feb 2 03:00:18 2025 GMT
Not After : Feb 3 03:00:18 2025 GMT
Subject: CN=2148b91afbfca0e9fa05817d1059f6b75a0908a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:9e:59:39:32:4b:11:8b:07:02:98:f2:6f:
b3:23:2c:84:84:bb:17:eb:65:45:b9:e8:7f:76:ae:
48:6c:12:6d:cd:fd:5c:f8:7f:9f:d1:84:dc:c5:30:
7f:90:be:87:d0:d5:72:3b:28:e7:87:99:f9:b0:ee:
b9:5b:f2:31:8c:06:b1:22:9c:04:73:cd:c1:be:20:
a6:2c:86:41:46:4f:f3:9e:2b:72:65:3c:41:b6:2c:
1d:cc:97:fa:09:e0:b0:02:0e:85:20:0c:be:ec:1d:
b8:7c:aa:b0:2f:e2:d7:da:4c:4e:37:3b:94:03:53:
23:9d:7d:67:86:13:aa:9a:68:04:2f:2f:d8:7d:0d:
66:99:c2:58:3d:49:74:72:15:05:f6:25:37:c6:96:
36:25:6f:08:62:a1:1f:9e:0f:66:b4:7e:18:91:23:
8c:2b:2e:64:db:ad:1a:04:25:4e:61:34:19:f1:15:
b4:8e:aa:be:53:67:82:5e:0c:9b:a5:74:95:ef:28:
7f:93:34:dc:f3:0d:95:18:fd:d1:c0:da:c6:ea:b7:
4f:84:26:ed:2d:34:e9:63:a5:2e:50:08:1b:25:3b:
62:ec:49:4a:f7:34:cc:f4:7e:2b:84:81:1b:bd:d3:
a7:35:a3:b1:f5:55:cb:5c:db:8c:40:dc:9b:a0:1b:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:48:B9:1A:FB:FC:A0:E9:FA:05:81:7D:10:59:F6:B7:5A:09:08:A1
X509v3 Authority Key Identifier:
keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0a:c9:64:08:f3:0f:0a:fd:c9:0a:25:18:9f:a5:00:15:5d:
a8:3f:67:c7:63:3a:2c:d2:1b:4b:7e:d6:bb:72:02:75:d1:f9:
98:f7:60:b0:86:9e:0e:cc:8a:f3:07:66:50:15:06:de:eb:ac:
97:b4:fa:9b:a5:6a:68:cb:b8:34:fc:e2:68:33:28:c3:4f:c8:
23:35:1f:d5:f1:9e:da:31:da:d6:00:25:39:a9:29:42:51:63:
29:98:23:64:a7:3c:d0:fc:97:11:27:37:9a:7c:9b:23:51:5b:
e6:0d:a2:dd:97:2c:30:8e:46:98:8a:fb:35:09:45:0b:52:35:
ed:2b:13:2d:ab:47:19:c1:aa:ea:32:18:99:fc:3d:d7:1d:21:
55:24:01:fb:25:14:34:f4:49:ac:87:0f:fc:ff:da:84:2d:56:
d5:ca:85:96:11:d6:c8:65:00:f6:b8:70:05:ee:81:79:c1:63:
53:d4:9b:3a:56:41:4b:7d:b5:00:b8:9f:45:4f:8d:7d:42:e9:
78:2f:3e:c3:6e:c6:54:88:93:cf:58:f1:3a:f2:05:6b:e9:10:
01:c8:48:3e:23:b0:82:e7:d3:e2:79:3f:f1:39:4a:68:6c:54:
01:28:b9:d6:03:5a:d1:f7:64:f9:20:34:06:27:bf:54:7b:52:
7a:6a:3b:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEmg44JC8ViZa9qe58i4nEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZWFhOTliMWI1NWI0ZTUwYjVkOWVjY2RlZWNkZjM4OTI0
NzM1MzkwHhcNMjUwMjAyMDMwMDE4WhcNMjUwMjAzMDMwMDE4WjAzMTEwLwYDVQQD
EygyMTQ4YjkxYWZiZmNhMGU5ZmEwNTgxN2QxMDU5ZjZiNzVhMDkwOGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pWeWTkySxGLBwKY8m+zIyyEhLsX
62VFueh/dq5IbBJtzf1c+H+f0YTcxTB/kL6H0NVyOyjnh5n5sO65W/IxjAaxIpwE
c83BviCmLIZBRk/znityZTxBtiwdzJf6CeCwAg6FIAy+7B24fKqwL+LX2kxONzuU
A1MjnX1nhhOqmmgELy/YfQ1mmcJYPUl0chUF9iU3xpY2JW8IYqEfng9mtH4YkSOM
Ky5k260aBCVOYTQZ8RW0jqq+U2eCXgybpXSV7yh/kzTc8w2VGP3RwNrG6rdPhCbt
LTTpY6UuUAgbJTti7ElK9zTM9H4rhIEbvdOnNaOx9VXLXNuMQNyboBuUXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFIuRr7/KDp+gWBfRBZ9rdaCQihMB8GA1UdIwQY
MBaAFLnqqZsbVbTlC12ezN7s3ziSRzU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVxcG14dFZ0T1VMWFo3TTN1emZPSkpITlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWEyNzctMDM2ZS00NzM3LTlhZjEt
ZDNiZWMwNmFjOGUxLzEvdWVxcG14dFZ0T1VMWFo3TTN1emZPSkpITlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81NWEyNzctMDM2ZS00NzM3LTlhZjEtZDNiZWMwNmFjOGUx
LzEvdWVxcG14dFZ0T1VMWFo3TTN1emZPSkpITlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwrJZAjz
Dwr9yQolGJ+lABVdqD9nx2M6LNIbS37Wu3ICddH5mPdgsIaeDsyK8wdmUBUG3uus
l7T6m6VqaMu4NPziaDMow0/IIzUf1fGe2jHa1gAlOakpQlFjKZgjZKc80PyXESc3
mnybI1Fb5g2i3ZcsMI5GmIr7NQlFC1I17SsTLatHGcGq6jIYmfw91x0hVSQB+yUU
NPRJrIcP/P/ahC1W1cqFlhHWyGUA9rhwBe6BecFjU9SbOlZBS321ALifRU+NfULp
eC8+w27GVIiTz1jxOvIFa+kQAchIPiOwgufT4nk/8TlKaGxUASi51gNa0fdk+SA0
Bie/VHtSemo7FA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:50 2025 by rpki-client