Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
File: 9Ma33VF1vo23oFIvfU5BxcQsayk.mft (raw, json)
Hash identifier: SuBrSlF5lLm+VCqqN4JIFrHrDenPp3raDGls88shBEs=
Subject key identifier: EC:8D:6B:E7:53:15:BA:4F:73:32:EF:AF:3F:15:22:9D:11:A6:B9:78
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 0194BAF24656FC32468FC3337D7F7C80892F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
Manifest number: 10B3
Signing time: Fri 31 Jan 2025 06:00:27 +0000
Manifest this update: Fri 31 Jan 2025 06:00:27 +0000
Manifest next update: Sat 01 Feb 2025 06:00:27 +0000
Files and hashes: 1: 9Ma33VF1vo23oFIvfU5BxcQsayk.crl (hash: OU+3w+yxDyN5ufPRZG/P2XpKssMDKcvChnkkhP0fydI=)
2: qfFwvTio97FSRHjQYuRGTKpqDNg.roa (hash: svdnZox06xTajQljreSGSixFuAOWPF1/7KNajKyZt9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:46:56:fc:32:46:8f:c3:33:7d:7f:7c:80:89:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Jan 31 06:00:27 2025 GMT
Not After : Feb 1 06:00:27 2025 GMT
Subject: CN=ec8d6be75315ba4f7332efaf3f15229d11a6b978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:36:8c:b9:d5:b1:2b:b4:4e:5e:32:61:34:
f8:05:3f:18:0c:97:4f:cf:ee:b5:ce:80:82:aa:d2:
17:e1:a0:c1:dd:c3:c6:f7:c4:d6:d0:56:1a:fa:e5:
2b:d8:07:e2:7d:3e:2e:6c:ca:c1:0b:af:4c:ca:df:
c7:43:66:18:34:b9:26:8e:f4:dc:a7:18:12:68:21:
26:41:a2:a5:0e:06:bf:95:39:c4:c4:a2:51:bd:9f:
2b:a5:e6:49:cc:dc:55:2b:d3:9e:ad:ac:57:82:d9:
2f:65:86:36:68:0d:79:36:6b:8f:f9:e7:53:3d:b2:
64:ff:75:1f:a8:26:41:bc:38:8f:13:52:f4:12:72:
ca:5a:72:4c:2e:95:33:8a:1d:cb:66:75:24:37:86:
fc:fd:90:e7:a5:c4:aa:8f:92:49:2c:1d:a0:0e:41:
32:f6:9b:00:33:54:3f:56:31:d2:2b:35:b7:1b:1f:
65:dc:72:92:00:c9:48:da:38:98:15:1a:50:09:e0:
b3:ef:ad:d0:65:51:01:8b:a8:a6:70:db:b6:56:9f:
a6:7e:23:b3:5b:7a:c7:3b:01:5b:9a:1c:be:0b:97:
9d:7b:90:da:0e:e1:bb:43:c3:a8:32:53:be:88:32:
06:ae:5b:0f:23:3f:a9:94:96:64:67:85:ab:e7:7c:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8D:6B:E7:53:15:BA:4F:73:32:EF:AF:3F:15:22:9D:11:A6:B9:78
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:67:73:2e:1f:8c:87:35:23:af:b4:8c:e4:3d:00:aa:e5:76:
18:da:d1:af:39:bf:f8:ef:ba:04:51:0d:a1:65:3c:66:01:df:
3f:c6:6e:08:ed:7d:87:0b:98:cf:f1:66:fa:a5:56:2f:20:18:
b4:44:01:e2:f3:32:84:1c:e7:c1:ad:d0:bd:44:04:9b:c4:4e:
73:eb:e1:0e:ab:0f:15:8e:1b:bd:05:cf:ec:18:81:7d:24:6c:
cb:69:43:1a:6a:00:39:fd:6b:f3:ad:f0:3b:5e:dd:34:1c:48:
db:c6:fc:b9:9d:44:ae:55:12:02:ec:e7:45:57:0d:51:bd:4d:
20:1d:88:08:4e:34:e8:ac:65:ed:31:ff:04:1f:bc:e7:41:37:
7f:91:2b:b9:23:c2:90:4e:6c:99:4b:a0:95:9d:70:87:c5:91:
55:19:80:a6:26:cc:7d:be:d4:da:53:26:de:ad:60:bd:62:67:
9a:46:a1:76:69:a7:8f:be:9f:ca:a3:8f:66:87:42:3b:42:d4:
cc:8d:9b:e8:8b:b9:47:f6:48:38:bd:6d:9e:84:c1:d8:0f:3e:
34:49:8c:fc:03:45:90:da:37:d7:8e:ec:d6:6d:f6:5c:a3:e0:
11:9a:c4:0e:4e:57:8e:11:27:0d:ac:7d:33:e6:20:a1:6d:5a:
6e:fd:47:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68kZW/DJGj8MzfX98gIkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzZiN2RkNTE3NWJlOGRiN2EwNTIyZjdkNGU0MWM1YzQy
YzZiMjkwHhcNMjUwMTMxMDYwMDI3WhcNMjUwMjAxMDYwMDI3WjAzMTEwLwYDVQQD
EyhlYzhkNmJlNzUzMTViYTRmNzMzMmVmYWYzZjE1MjI5ZDExYTZiOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYE2jLnVsSu0Tl4yYTT4BT8YDJdP
z+61zoCCqtIX4aDB3cPG98TW0FYa+uUr2AfifT4ubMrBC69Myt/HQ2YYNLkmjvTc
pxgSaCEmQaKlDga/lTnExKJRvZ8rpeZJzNxVK9OeraxXgtkvZYY2aA15NmuP+edT
PbJk/3UfqCZBvDiPE1L0EnLKWnJMLpUzih3LZnUkN4b8/ZDnpcSqj5JJLB2gDkEy
9psAM1Q/VjHSKzW3Gx9l3HKSAMlI2jiYFRpQCeCz763QZVEBi6imcNu2Vp+mfiOz
W3rHOwFbmhy+C5ede5DaDuG7Q8OoMlO+iDIGrlsPIz+plJZkZ4Wr53wBNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyNa+dTFbpPczLvrz8VIp0Rprl4MB8GA1UdIwQY
MBaAFPTGt91Rdb6Nt6BSL31OQcXELGspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGIt
OWIyMWI2ZjY2NzlhLzEvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGItOWIyMWI2ZjY2Nzlh
LzEvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmdzLh+M
hzUjr7SM5D0AquV2GNrRrzm/+O+6BFENoWU8ZgHfP8ZuCO19hwuYz/Fm+qVWLyAY
tEQB4vMyhBznwa3QvUQEm8ROc+vhDqsPFY4bvQXP7BiBfSRsy2lDGmoAOf1r863w
O17dNBxI28b8uZ1ErlUSAuznRVcNUb1NIB2ICE406Kxl7TH/BB+850E3f5EruSPC
kE5smUuglZ1wh8WRVRmApibMfb7U2lMm3q1gvWJnmkahdmmnj76fyqOPZodCO0LU
zI2b6Iu5R/ZIOL1tnoTB2A8+NEmM/ANFkNo3147s1m32XKPgEZrEDk5XjhEnDax9
M+YgoW1abv1HBg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:13 2025 by rpki-client on console-fra.rpki-client.org