Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
File: n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft (raw, json)
Hash identifier: II2cdpLFPA4xtaGJXo0WIHUQMVFlX3jVriJkb89j75I=
Subject key identifier: 0B:E4:9F:B5:E7:01:77:BA:B4:98:69:BD:C7:88:F0:50:59:C6:EB:2F
Authority key identifier: 9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
Certificate issuer: /CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Certificate serial: 0194C4D12126A16566770AE090A5B881D34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 04:00:27 +0000
Manifest this update: Sun 02 Feb 2025 04:00:27 +0000
Manifest next update: Mon 03 Feb 2025 04:00:27 +0000
Files and hashes: 1: 2Bt2zBZ7qwsmzgRbPsxkglulHD4.roa (hash: 9HARsRK8h6gT85xMPv/kwqgjZ+bOyfBgjRhZUJA4ehc=)
2: n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl (hash: /MGZfuqRvqU8vmg6WdFX/gg0itWXMt9df/VmP2TGGIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:21:26:a1:65:66:77:0a:e0:90:a5:b8:81:d3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Validity
Not Before: Feb 2 04:00:27 2025 GMT
Not After : Feb 3 04:00:27 2025 GMT
Subject: CN=0be49fb5e70177bab49869bdc788f05059c6eb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:21:2f:b6:20:ea:0b:80:e4:1e:33:1f:c4:
3f:b8:cd:c1:c5:6c:1c:27:c1:11:f4:c7:0f:d0:60:
77:0a:3f:9b:a1:87:f1:c4:6f:ed:e7:e8:42:a9:cf:
59:e6:e9:41:29:98:52:bf:3e:f0:35:54:9b:e1:bd:
c3:ba:8b:80:03:a0:61:01:ca:39:06:16:75:16:d3:
ee:c2:f0:a8:f6:b6:11:98:05:6b:ff:a8:d2:70:ca:
25:11:e2:c3:d2:79:ce:e8:96:3f:cc:0f:f1:d4:06:
4a:d8:35:34:1c:d4:87:f2:c6:e4:b8:cb:2a:6b:d1:
25:b9:e6:34:37:a4:9c:ba:44:ca:7d:2c:4d:56:86:
22:b0:84:61:7c:01:38:8a:35:db:13:75:4d:38:41:
77:f6:c4:3a:c5:0e:fc:b6:7f:d5:27:a0:67:3f:35:
09:ac:71:31:37:06:4b:21:8c:73:3d:1f:02:80:50:
38:ad:b2:c5:01:62:7c:ae:33:ab:70:1c:51:ae:12:
1f:4e:2d:87:3a:5c:20:1f:ee:db:d1:4b:d6:18:96:
a7:af:e4:9a:7c:81:c3:a6:7d:f8:30:f8:9b:29:f3:
ad:2f:a8:50:f5:24:9c:f2:84:52:b9:75:74:29:fb:
50:f8:6e:10:6b:18:eb:27:7f:4e:2d:f4:10:52:2a:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E4:9F:B5:E7:01:77:BA:B4:98:69:BD:C7:88:F0:50:59:C6:EB:2F
X509v3 Authority Key Identifier:
keyid:9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e0:83:e3:8f:a4:6b:48:b5:58:89:de:8a:6f:8d:8a:94:b0:
3b:c0:15:2c:99:71:06:b6:d1:42:1d:87:f1:88:d4:61:9d:d8:
6b:e8:ed:57:04:e9:f0:11:f7:22:09:52:60:e8:93:4f:5f:9b:
f5:c1:de:76:24:33:98:8d:30:97:4d:97:6a:ff:ba:40:98:1f:
f4:ab:65:85:20:ed:12:62:5d:11:42:23:cc:5a:21:8a:2a:f1:
f3:47:d3:df:e3:f9:24:15:5b:37:07:d3:68:52:9a:00:8f:ce:
ae:86:8d:81:84:79:ae:71:41:93:7f:fb:f8:79:d7:5c:29:b7:
69:c0:1b:89:f9:9b:d6:6a:ea:1d:8c:93:ba:69:71:67:7c:0b:
e0:dc:e7:7f:48:a9:57:b3:e0:59:a0:de:29:f9:31:4f:35:c1:
10:1b:52:cf:f8:1e:97:4c:47:5f:40:4e:ec:70:a3:2a:ea:20:
df:e0:99:9a:35:fe:6f:20:2a:f9:9a:e9:cf:28:3c:79:45:21:
42:b5:a6:26:0f:b7:82:f1:08:75:10:33:4e:14:47:48:4c:3f:
35:7a:2c:08:db:ef:43:45:fd:77:36:e1:71:6a:21:25:10:c4:
92:0c:42:02:2f:65:23:e2:5e:00:3a:40:0f:90:3d:8b:48:17:
c5:42:79:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0SEmoWVmdwrgkKW4gdNKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNWQ1YjdmNzkyNjQ0ZmY3MDcyYTQzYWNjOWM4NjUxOTRi
ZTRhZGMwHhcNMjUwMjAyMDQwMDI3WhcNMjUwMjAzMDQwMDI3WjAzMTEwLwYDVQQD
EygwYmU0OWZiNWU3MDE3N2JhYjQ5ODY5YmRjNzg4ZjA1MDU5YzZlYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mEhL7Yg6guA5B4zH8Q/uM3BxWwc
J8ER9McP0GB3Cj+boYfxxG/t5+hCqc9Z5ulBKZhSvz7wNVSb4b3DuouAA6BhAco5
BhZ1FtPuwvCo9rYRmAVr/6jScMolEeLD0nnO6JY/zA/x1AZK2DU0HNSH8sbkuMsq
a9ElueY0N6ScukTKfSxNVoYisIRhfAE4ijXbE3VNOEF39sQ6xQ78tn/VJ6BnPzUJ
rHExNwZLIYxzPR8CgFA4rbLFAWJ8rjOrcBxRrhIfTi2HOlwgH+7b0UvWGJanr+Sa
fIHDpn34MPibKfOtL6hQ9SSc8oRSuXV0KftQ+G4QaxjrJ39OLfQQUipumwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvkn7XnAXe6tJhpvceI8FBZxusvMB8GA1UdIwQY
MBaAFJ9dW395JkT/cHKkOsychlGUvkrcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjExYmYza21SUDl3Y3FRNnpKeUdVWlMtU3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YTc5MDEtODVkOC00M2VhLWFkYjIt
Nzk5OTEwYzE1NDVmLzEvbjExYmYza21SUDl3Y3FRNnpKeUdVWlMtU3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80YTc5MDEtODVkOC00M2VhLWFkYjItNzk5OTEwYzE1NDVm
LzEvbjExYmYza21SUDl3Y3FRNnpKeUdVWlMtU3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOCD44+k
a0i1WIneim+NipSwO8AVLJlxBrbRQh2H8YjUYZ3Ya+jtVwTp8BH3IglSYOiTT1+b
9cHediQzmI0wl02Xav+6QJgf9KtlhSDtEmJdEUIjzFohiirx80fT3+P5JBVbNwfT
aFKaAI/OroaNgYR5rnFBk3/7+HnXXCm3acAbifmb1mrqHYyTumlxZ3wL4Nznf0ip
V7PgWaDeKfkxTzXBEBtSz/gel0xHX0BO7HCjKuog3+CZmjX+byAq+Zrpzyg8eUUh
QrWmJg+3gvEIdRAzThRHSEw/NXosCNvvQ0X9dzbhcWohJRDEkgxCAi9lI+JeADpA
D5A9i0gXxUJ5rA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:21 2025 by rpki-client