Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: ElOMFPYtjG+rL+/s6/U/pQRt0QGxTgsLGZc5WBwamio=
Subject key identifier: 10:F1:B4:04:2C:92:45:56:62:63:7D:E0:62:0C:89:43:BF:87:98:20
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 0194C507D412F94F5DA12F2571222F10EB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 01A4
Signing time: Sun 02 Feb 2025 05:00:12 +0000
Manifest this update: Sun 02 Feb 2025 05:00:12 +0000
Manifest next update: Mon 03 Feb 2025 05:00:12 +0000
Files and hashes: 1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: W1hy0p3X9/O9Rg6NIxQbQRL8DtgMeDeN8o5EY8527oQ=)
3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:d4:12:f9:4f:5d:a1:2f:25:71:22:2f:10:eb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Feb 2 05:00:12 2025 GMT
Not After : Feb 3 05:00:12 2025 GMT
Subject: CN=10f1b4042c92455662637de0620c8943bf879820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cf:38:4e:af:be:bc:d9:36:a3:83:a9:27:1b:
5a:79:82:c1:8d:74:85:e3:72:75:4b:43:60:94:f9:
ae:95:44:82:04:29:28:eb:c5:be:f0:ad:36:09:bf:
62:30:cb:3d:6d:7e:bc:04:29:ba:b5:07:a0:68:81:
99:06:d7:95:f9:87:05:7c:b7:c8:8d:e6:bb:8f:a8:
60:19:f6:3d:d2:63:9c:d2:4c:3f:92:7b:6f:ca:fd:
bb:a5:cb:92:d1:4b:36:c9:f0:da:cb:f4:9d:87:4b:
e4:22:dd:84:77:c6:68:fc:10:f7:17:2b:10:b0:5f:
69:99:b7:a1:fa:eb:1e:61:67:0f:53:8a:cc:67:3c:
0f:64:80:d2:23:ba:70:8f:0a:f9:f8:9b:a2:88:a4:
5a:16:1c:71:76:e2:6f:fc:13:7a:23:f2:06:72:5b:
70:74:5e:66:48:f2:ce:6c:14:ec:38:89:cd:25:b7:
4f:64:e2:e8:bd:15:bb:52:b8:a7:49:9b:9d:db:85:
1e:b9:2d:d6:71:03:ae:5b:c1:7e:fe:81:59:98:93:
cd:b4:1a:3d:6b:d2:f7:24:e1:11:0b:93:86:2a:07:
35:79:1f:9e:a3:86:4c:11:75:cc:ad:cf:1b:39:7a:
c5:dd:e9:b4:e6:59:ac:0f:78:89:45:e8:8f:f7:8e:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:B4:04:2C:92:45:56:62:63:7D:E0:62:0C:89:43:BF:87:98:20
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1b:ee:c4:53:e5:4d:eb:ad:f5:a7:fd:2f:6e:ac:59:de:3e:
d2:71:bd:5d:ed:81:ca:d1:18:9b:60:f5:42:52:20:ef:44:b4:
cf:39:5b:a6:65:3b:e7:a9:4f:9e:9e:6f:ee:21:68:3b:1e:77:
c4:f3:06:2f:33:96:5d:33:0c:a1:77:9a:3a:4c:d4:94:cd:3a:
c8:92:90:22:79:da:3f:ca:49:a6:49:c5:c2:62:d4:35:ac:f3:
e6:97:14:be:3f:a5:52:7c:ab:bc:43:70:84:07:74:48:90:53:
79:6e:8f:2c:b8:46:b8:c3:2e:cd:72:ec:dd:0b:7e:95:92:be:
b7:ad:5c:71:ff:df:4e:46:be:5f:1d:33:ba:ab:c2:86:c3:67:
d0:bc:4e:64:cf:f9:5b:f4:30:a4:24:3d:a2:b2:6a:f1:f2:20:
08:eb:06:e7:1a:20:80:e4:f2:63:74:01:3b:d2:29:76:a8:77:
81:81:d0:d0:1f:58:15:55:dd:aa:76:28:8f:e7:8e:28:56:9a:
7c:82:ab:43:72:b3:6b:b8:e7:64:35:75:cf:3a:49:d9:8f:df:
cf:30:31:26:6b:f3:e1:a0:f0:5e:0d:5b:e7:a4:b9:54:e4:4c:
ff:de:d3:d3:de:fe:ba:41:ed:4c:c2:55:30:2a:99:cd:de:db:
34:58:76:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTFB9QS+U9doS8lcSIvEOtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZmI1ODJjMWNkMTg4MWYyZDQ2ZDBhNzAzODJjYWI2OTIy
NWYxYTkwHhcNMjUwMjAyMDUwMDEyWhcNMjUwMjAzMDUwMDEyWjAzMTEwLwYDVQQD
EygxMGYxYjQwNDJjOTI0NTU2NjI2MzdkZTA2MjBjODk0M2JmODc5ODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c84Tq++vNk2o4OpJxtaeYLBjXSF
43J1S0NglPmulUSCBCko68W+8K02Cb9iMMs9bX68BCm6tQegaIGZBteV+YcFfLfI
jea7j6hgGfY90mOc0kw/kntvyv27pcuS0Us2yfDay/Sdh0vkIt2Ed8Zo/BD3FysQ
sF9pmbeh+useYWcPU4rMZzwPZIDSI7pwjwr5+JuiiKRaFhxxduJv/BN6I/IGcltw
dF5mSPLObBTsOInNJbdPZOLovRW7UrinSZud24UeuS3WcQOuW8F+/oFZmJPNtBo9
a9L3JOERC5OGKgc1eR+eo4ZMEXXMrc8bOXrF3em05lmsD3iJReiP947BCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDxtAQskkVWYmN94GIMiUO/h5ggMB8GA1UdIwQY
MBaAFJj7WCwc0YgfLUbQpwOCyraSJfGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lYzQwMWMtNDRlNC00ZmNjLWIwMzct
M2JjNDQxMDFlYzAwLzEvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lYzQwMWMtNDRlNC00ZmNjLWIwMzctM2JjNDQxMDFlYzAw
LzEvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhvuxFPl
Teut9af9L26sWd4+0nG9Xe2BytEYm2D1QlIg70S0zzlbpmU756lPnp5v7iFoOx53
xPMGLzOWXTMMoXeaOkzUlM06yJKQInnaP8pJpknFwmLUNazz5pcUvj+lUnyrvENw
hAd0SJBTeW6PLLhGuMMuzXLs3Qt+lZK+t61ccf/fTka+Xx0zuqvChsNn0LxOZM/5
W/QwpCQ9orJq8fIgCOsG5xoggOTyY3QBO9Ipdqh3gYHQ0B9YFVXdqnYoj+eOKFaa
fIKrQ3Kza7jnZDV1zzpJ2Y/fzzAxJmvz4aDwXg1b56S5VORM/97T097+ukHtTMJV
MCqZzd7bNFh2+Q==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:56 2025 by rpki-client