Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json)
Hash identifier: btTn2x4eQxDuMqR6/APEP39ik2MYNiuTW/uvkG2B0FY=
Subject key identifier: 4C:FC:86:F9:69:25:D2:C0:03:8A:8E:BA:82:B0:9C:0C:8D:01:AE:F1
Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Certificate serial: 0194C49A41B8A1A77E832C3890BD5ABD5C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
Manifest number: 09
Signing time: Sun 02 Feb 2025 03:00:31 +0000
Manifest this update: Sun 02 Feb 2025 03:00:31 +0000
Manifest next update: Mon 03 Feb 2025 03:00:31 +0000
Files and hashes: 1: B-Er3iFbDhKHgZepd9cohq0cVQk.roa (hash: jtx1vXImr7yVpzKZUudCNhlkYJibcaWuKGAsJwBSbxY=)
2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: /E+fa5qftYpVUwxBTH59Sa7a2Ijs3pSGbJCxE5xlPGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:41:b8:a1:a7:7e:83:2c:38:90:bd:5a:bd:5c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Validity
Not Before: Feb 2 03:00:31 2025 GMT
Not After : Feb 3 03:00:31 2025 GMT
Subject: CN=4cfc86f96925d2c0038a8eba82b09c0c8d01aef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:d7:40:50:c0:ac:bd:16:5a:2a:67:fd:c8:
71:ee:a1:a6:ff:d2:c2:3c:e2:be:e5:14:1a:48:9d:
5e:7d:46:52:93:70:a6:b1:4c:42:69:bc:5a:23:ee:
ee:ab:0a:0a:f4:74:83:c6:0b:b3:a2:63:6c:9e:73:
ef:ad:08:f4:2b:53:74:a4:a8:94:66:24:01:9f:ea:
4c:72:b7:8e:fa:1d:94:64:d3:62:74:bc:c0:4c:37:
2a:93:39:4f:18:0f:a0:d7:7f:0b:fb:e5:63:f3:f6:
5e:ef:79:5f:0f:95:69:99:0a:2b:36:40:7e:b9:8a:
e8:96:69:fa:3d:77:58:b7:fb:60:ba:c1:52:c4:76:
60:be:ec:37:7e:3b:34:eb:57:48:00:56:47:ff:ee:
58:01:a5:ea:3c:54:0a:26:f3:2d:06:09:b7:f7:7f:
3b:5a:7b:10:d8:b9:d2:ed:fb:3b:d9:6f:80:30:8b:
e5:4e:ee:42:67:29:74:6c:fc:81:1a:7c:43:11:5e:
5a:e6:3c:42:39:e9:37:d2:f1:5d:d1:b5:43:2a:ff:
a8:2f:1d:db:05:2e:e4:c9:d2:17:56:28:40:75:9a:
89:6d:23:9b:99:89:1d:5d:ce:59:e4:75:a3:eb:ee:
8b:92:73:da:79:f4:a2:2d:73:0c:57:d7:79:26:b7:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FC:86:F9:69:25:D2:C0:03:8A:8E:BA:82:B0:9C:0C:8D:01:AE:F1
X509v3 Authority Key Identifier:
keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ad:af:98:9e:d3:fb:c7:d3:28:7b:9c:e9:ec:5c:da:6f:ff:
35:b4:41:2c:37:6c:cb:dd:43:a9:d8:37:c7:d3:a3:6c:bd:8b:
c3:08:99:7f:ae:3b:94:40:74:41:b5:d0:dc:25:72:14:4b:03:
ef:3c:41:e6:98:b0:c3:25:65:73:0e:35:be:d6:c5:ad:4e:26:
82:41:75:ff:13:90:b9:6d:52:48:a0:b9:1c:59:6f:97:c9:8f:
74:cc:70:c6:ab:9b:b5:32:08:74:eb:25:cb:aa:7b:24:22:a9:
82:8a:e3:49:e0:26:4a:7b:f7:d0:5a:e6:cc:0d:92:ed:81:26:
a0:f3:38:77:d9:e1:f1:8a:d8:8d:7f:d3:72:78:51:38:a9:17:
70:e4:7d:de:a2:ee:4a:66:91:da:5a:dc:4c:98:9d:30:90:83:
ac:fa:92:e4:2f:88:05:e0:58:70:03:90:81:6e:10:50:64:6f:
dd:94:36:63:4b:b9:21:c8:ea:a6:de:83:39:5b:13:8d:ad:5a:
9e:dc:8f:58:bc:f5:99:23:7d:cc:0b:44:ad:ba:32:ad:1b:b9:
f4:9c:94:d4:d9:b2:fd:7b:b3:d3:7c:ca:d3:29:a3:4f:55:4e:
17:d6:ca:e8:ab:af:83:b6:94:c1:2e:74:85:d0:c5:95:6e:63:
01:0d:d4:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEmkG4oad+gyw4kL1avVwdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzVlNjQwOGI4ZTA1YWE5MTRiODc0NjM1YTQ3YjdiODIw
YzZjMzIwHhcNMjUwMjAyMDMwMDMxWhcNMjUwMjAzMDMwMDMxWjAzMTEwLwYDVQQD
Eyg0Y2ZjODZmOTY5MjVkMmMwMDM4YThlYmE4MmIwOWMwYzhkMDFhZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdDXQFDArL0WWipn/chx7qGm/9LC
POK+5RQaSJ1efUZSk3CmsUxCabxaI+7uqwoK9HSDxguzomNsnnPvrQj0K1N0pKiU
ZiQBn+pMcreO+h2UZNNidLzATDcqkzlPGA+g138L++Vj8/Ze73lfD5VpmQorNkB+
uYrolmn6PXdYt/tgusFSxHZgvuw3fjs061dIAFZH/+5YAaXqPFQKJvMtBgm39387
WnsQ2LnS7fs72W+AMIvlTu5CZyl0bPyBGnxDEV5a5jxCOek30vFd0bVDKv+oLx3b
BS7kydIXVihAdZqJbSObmYkdXc5Z5HWj6+6LknPaefSiLXMMV9d5JrfxtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEz8hvlpJdLAA4qOuoKwnAyNAa7xMB8GA1UdIwQY
MBaAFId15kCLjgWqkUuHRjWke3uCDGwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDct
NjFlNTRjZmMyYWJjLzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDctNjFlNTRjZmMyYWJj
LzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN62vmJ7T
+8fTKHuc6exc2m//NbRBLDdsy91Dqdg3x9OjbL2LwwiZf647lEB0QbXQ3CVyFEsD
7zxB5piwwyVlcw41vtbFrU4mgkF1/xOQuW1SSKC5HFlvl8mPdMxwxqubtTIIdOsl
y6p7JCKpgorjSeAmSnv30FrmzA2S7YEmoPM4d9nh8YrYjX/TcnhROKkXcOR93qLu
SmaR2lrcTJidMJCDrPqS5C+IBeBYcAOQgW4QUGRv3ZQ2Y0u5Icjqpt6DOVsTja1a
ntyPWLz1mSN9zAtErboyrRu59JyU1Nmy/Xuz03zK0ymjT1VOF9bK6Kuvg7aUwS50
hdDFlW5jAQ3UMw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:29 2025 by rpki-client