Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: vhk7apXIP0eOZ4uw3XJDzf/6oBxVf3MYrHZi7am/6cI=
Subject key identifier: A4:A0:BD:29:65:9B:BB:92:DC:B5:66:EB:D0:DB:4C:16:74:07:F2:CD
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 0194C3F5F48A44786F559114AF6E9D3C43EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 00:01:03 +0000
Manifest this update: Sun 02 Feb 2025 00:01:03 +0000
Manifest next update: Mon 03 Feb 2025 00:01:03 +0000
Files and hashes: 1: HwLcn2tbXfaewoRLUqvEJHtXkUs.roa (hash: W1uC8oFLMGagyUd1+ow2TTRqqrP/F081zqAOESqRLNw=)
2: Mx-fCqDASlNjjbccZ-B5nKyFs1w.roa (hash: 1mo/7uKD2fUUwhxoh/B2HIiYyRaaQnMnmEkbBF+A3yk=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: kbR+exc4NJ40A8+LoIb3UWJU/R++0hKhOmUAzbWoQQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:f4:8a:44:78:6f:55:91:14:af:6e:9d:3c:43:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Feb 2 00:01:03 2025 GMT
Not After : Feb 3 00:01:03 2025 GMT
Subject: CN=a4a0bd29659bbb92dcb566ebd0db4c167407f2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:f1:15:84:c8:f1:03:5a:0c:ef:ce:c7:65:
19:48:63:5c:4b:ab:15:25:da:8b:4f:f1:6f:16:8c:
67:2a:1f:e3:a7:52:50:01:ef:1d:ec:84:c7:26:56:
07:df:ad:8c:fd:e7:11:c0:78:c0:4d:32:23:b5:8e:
79:e9:53:8f:67:bc:4a:96:f1:70:3d:c8:17:98:67:
fc:cb:87:d9:fe:f3:f6:c9:ab:ed:10:8f:87:68:9e:
90:0c:03:15:bb:87:74:33:a0:79:f7:0d:94:95:eb:
da:e9:ef:24:37:18:df:f6:eb:e2:44:db:85:e6:2a:
66:92:84:64:5a:fc:20:49:c6:bc:e2:91:26:8a:99:
eb:01:24:af:d7:8c:cc:aa:86:12:80:e1:f4:88:3f:
65:b9:6b:71:66:c9:c3:f8:e0:bb:5e:d1:bb:31:32:
a9:49:24:b1:d1:80:e1:f4:bd:66:a9:60:e7:bb:fe:
e4:95:70:fe:d2:49:1e:01:ac:e7:9f:ee:29:03:27:
6b:e0:8b:47:a8:cc:6e:f4:c0:be:c8:e7:27:54:97:
95:32:f9:e0:3a:f6:e5:80:f7:39:a3:82:62:c2:ee:
bb:2c:20:e2:24:37:b9:8b:7c:e6:ec:ee:be:5c:50:
02:de:71:cf:e9:5a:b6:03:f2:69:6f:23:23:6e:dd:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A0:BD:29:65:9B:BB:92:DC:B5:66:EB:D0:DB:4C:16:74:07:F2:CD
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1f:c2:9d:5d:6b:0f:47:4d:ce:9a:a4:25:75:f8:ab:3d:03:
c7:11:db:38:d3:76:97:c3:12:54:19:f4:f6:63:61:d8:04:35:
d7:98:b7:b8:80:f5:c6:21:b2:ba:14:0a:fc:57:11:d8:4c:52:
b0:89:16:f0:2e:52:f7:0b:c7:2a:2d:05:70:61:78:e3:d3:13:
b5:27:09:03:19:ff:d4:17:7f:1e:8b:76:99:c9:47:c8:a0:c6:
01:5b:55:09:27:83:fa:18:90:e0:10:5b:63:ab:cd:ef:90:fd:
63:c6:03:36:9b:61:14:0d:b0:cc:b9:6c:03:12:b9:93:bc:00:
f3:09:89:79:1a:4b:2b:63:da:b8:74:ef:a7:99:ad:ae:1a:01:
1c:19:6a:28:36:b4:bc:9e:65:ee:c5:26:6a:b8:9b:58:ee:a6:
b8:8e:06:ac:ee:63:da:63:9b:f3:3b:fb:2f:5a:fb:fa:ba:9e:
df:8d:8f:c9:2e:5b:2b:ac:cb:2c:78:06:a8:49:ed:ed:f6:da:
9a:ba:6b:b4:f3:f5:a1:64:11:b9:dc:3e:11:fb:7c:59:1c:3d:
11:00:83:64:38:12:2b:18:c1:8b:b5:15:56:10:74:e9:ef:7d:
5d:1f:0b:40:d4:7a:05:91:03:9a:a5:9f:32:e3:74:29:de:7e:
87:51:ae:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9fSKRHhvVZEUr26dPEPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWE4ZGQxMTg3NjZhZWQzYjA5ZWQ2OWYyZTQ3ZGMxZDJj
MTYxNTkwHhcNMjUwMjAyMDAwMTAzWhcNMjUwMjAzMDAwMTAzWjAzMTEwLwYDVQQD
EyhhNGEwYmQyOTY1OWJiYjkyZGNiNTY2ZWJkMGRiNGMxNjc0MDdmMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+nxFYTI8QNaDO/Ox2UZSGNcS6sV
JdqLT/FvFoxnKh/jp1JQAe8d7ITHJlYH362M/ecRwHjATTIjtY556VOPZ7xKlvFw
PcgXmGf8y4fZ/vP2yavtEI+HaJ6QDAMVu4d0M6B59w2Uleva6e8kNxjf9uviRNuF
5ipmkoRkWvwgSca84pEmipnrASSv14zMqoYSgOH0iD9luWtxZsnD+OC7XtG7MTKp
SSSx0YDh9L1mqWDnu/7klXD+0kkeAaznn+4pAydr4ItHqMxu9MC+yOcnVJeVMvng
OvblgPc5o4Jiwu67LCDiJDe5i3zm7O6+XFAC3nHP6Vq2A/JpbyMjbt0kqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSgvSllm7uS3LVm69DbTBZ0B/LNMB8GA1UdIwQY
MBaAFKOqjdEYdmrtOwntafLkfcHSwWFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zOTFlNTQtYzIxYS00MDVhLTg4YWEt
NjA3OTc4OTEwMGNhLzEvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zOTFlNTQtYzIxYS00MDVhLTg4YWEtNjA3OTc4OTEwMGNh
LzEvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWB/CnV1r
D0dNzpqkJXX4qz0DxxHbONN2l8MSVBn09mNh2AQ115i3uID1xiGyuhQK/FcR2ExS
sIkW8C5S9wvHKi0FcGF449MTtScJAxn/1Bd/Hot2mclHyKDGAVtVCSeD+hiQ4BBb
Y6vN75D9Y8YDNpthFA2wzLlsAxK5k7wA8wmJeRpLK2PauHTvp5mtrhoBHBlqKDa0
vJ5l7sUmaribWO6muI4GrO5j2mOb8zv7L1r7+rqe342PyS5bK6zLLHgGqEnt7fba
mrprtPP1oWQRudw+Eft8WRw9EQCDZDgSKxjBi7UVVhB06e99XR8LQNR6BZEDmqWf
MuN0Kd5+h1GudQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:18 2025 by rpki-client