Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
File: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft (raw, json)
Hash identifier: FwL12vWeC+0LQ1hjrFObae9zG2Y+rjeGB1EX1+q7BqA=
Subject key identifier: 2A:2A:B0:00:50:86:0F:5D:80:DC:D1:E9:78:C4:C9:B7:B1:45:54:C1
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Certificate issuer: /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial: 0194BB96D1B9B2C6959BAB681E391422C7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
Manifest number: 06F1
Signing time: Fri 31 Jan 2025 09:00:10 +0000
Manifest this update: Fri 31 Jan 2025 09:00:10 +0000
Manifest next update: Sat 01 Feb 2025 09:00:10 +0000
Files and hashes: 1: NBepUJO_wJpnxRX9pJTgcXP4eoA.roa (hash: s4sVSw+QsBgi1se1V8v61lF7jwGyJQc1wtJojCUHwDE=)
2: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl (hash: m9qy1ANEpKp3TC8cOtBXaJbvU61FWecSXigCZSDB2eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:d1:b9:b2:c6:95:9b:ab:68:1e:39:14:22:c7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Validity
Not Before: Jan 31 09:00:10 2025 GMT
Not After : Feb 1 09:00:10 2025 GMT
Subject: CN=2a2ab00050860f5d80dcd1e978c4c9b7b14554c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:7e:a4:32:0e:26:af:71:97:54:70:ad:c3:
21:bc:3b:3e:20:95:2a:ec:f8:b2:80:69:0e:63:68:
af:6f:8d:1b:e4:a1:ec:06:0e:f4:f5:68:8c:e4:c0:
e4:0c:7b:ac:9e:b5:9c:e0:be:04:52:8a:35:2d:66:
fd:bf:63:e8:b2:23:2c:e8:03:5b:d6:bf:c6:2d:ad:
e5:30:eb:34:7d:4d:5a:09:a1:d2:8f:f9:d6:cb:4f:
50:12:03:d6:dd:eb:4e:b3:8d:09:57:cb:87:2d:ba:
af:08:a5:f4:08:50:1e:e6:30:33:2e:88:d5:87:b8:
de:4e:e8:4f:07:71:93:25:8c:5e:57:83:9a:42:ac:
25:d2:2e:ea:7f:87:12:21:94:40:b7:1a:58:99:0d:
0b:78:ea:5e:60:71:b2:56:20:a3:c1:0c:4c:21:5d:
49:67:49:dd:ee:6e:95:07:d4:b7:28:87:0b:d6:3f:
f8:39:49:14:20:72:dc:67:e5:9f:57:6f:9c:9d:68:
62:3e:96:29:6a:b3:52:d9:85:48:b9:27:b0:2f:ee:
12:5b:c5:31:ca:fe:f4:78:b2:9d:dd:f6:b5:45:13:
4a:19:af:90:de:53:88:d7:48:4e:38:ff:34:d2:44:
17:a8:6c:0b:e0:e0:57:b4:81:3b:d6:34:60:2e:cd:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2A:B0:00:50:86:0F:5D:80:DC:D1:E9:78:C4:C9:B7:B1:45:54:C1
X509v3 Authority Key Identifier:
keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:fc:f0:76:07:8d:21:8d:20:a3:96:dd:4a:ac:e1:05:2e:e3:
1b:7a:2a:7f:d3:7f:a5:b1:d5:79:e6:5d:c3:ba:67:40:6d:08:
08:9f:56:63:d5:70:b0:b5:0b:25:63:b9:bf:ac:d0:b4:7b:95:
c8:59:44:60:70:e6:eb:b8:a9:dc:b6:56:c8:89:a8:32:d3:0b:
02:88:1b:85:f3:6f:94:d8:e6:a9:2c:a4:8e:03:0a:e0:5a:65:
c2:04:a7:f2:9e:ec:30:7e:f6:b4:b6:56:5f:ea:fe:0a:4e:42:
74:14:bd:12:13:52:a2:a5:c0:c5:cf:cb:89:aa:71:e0:92:d6:
1e:c9:28:6a:0d:16:ef:fd:2e:31:4d:09:27:d9:be:ed:43:f5:
60:e2:c7:a5:26:ed:ec:09:65:9d:ed:85:f7:ff:15:bf:f8:4e:
25:a2:b3:ed:48:c9:dc:9b:a4:f9:2a:8b:0b:fa:e6:03:12:51:
73:29:68:e9:2a:e4:bf:95:15:2d:c9:e9:12:a9:0e:b7:9a:a9:
f3:1d:5c:ed:16:c5:e1:d4:02:4a:c5:77:28:98:d2:ac:71:c5:
03:d0:a9:30:49:c4:b5:70:91:07:6d:a8:11:8e:86:35:2b:20:
31:a5:00:02:8e:dd:fc:8f:af:e2:7d:97:45:44:dd:b8:7e:86:
12:55:fc:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ltG5ssaVm6toHjkUIsfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjE5OWU1NWMzNTNlZjdmM2QyYmY0YTRmZTM4ZGQxYTBh
ZDg1NjUwHhcNMjUwMTMxMDkwMDEwWhcNMjUwMjAxMDkwMDEwWjAzMTEwLwYDVQQD
EygyYTJhYjAwMDUwODYwZjVkODBkY2QxZTk3OGM0YzliN2IxNDU1NGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLp+pDIOJq9xl1RwrcMhvDs+IJUq
7PiygGkOY2ivb40b5KHsBg709WiM5MDkDHusnrWc4L4EUoo1LWb9v2PosiMs6ANb
1r/GLa3lMOs0fU1aCaHSj/nWy09QEgPW3etOs40JV8uHLbqvCKX0CFAe5jAzLojV
h7jeTuhPB3GTJYxeV4OaQqwl0i7qf4cSIZRAtxpYmQ0LeOpeYHGyViCjwQxMIV1J
Z0nd7m6VB9S3KIcL1j/4OUkUIHLcZ+WfV2+cnWhiPpYparNS2YVIuSewL+4SW8Ux
yv70eLKd3fa1RRNKGa+Q3lOI10hOOP800kQXqGwL4OBXtIE71jRgLs0XwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoqsABQhg9dgNzR6XjEybexRVTBMB8GA1UdIwQY
MBaAFGthmeVcNT7389K/Sk/jjdGgrYVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZjJjZWItZTlhOC00NzhjLTg4YzEt
M2RlNGVjZTNhYjJhLzEvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mZjJjZWItZTlhOC00NzhjLTg4YzEtM2RlNGVjZTNhYjJh
LzEvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPzwdgeN
IY0go5bdSqzhBS7jG3oqf9N/pbHVeeZdw7pnQG0ICJ9WY9VwsLULJWO5v6zQtHuV
yFlEYHDm67ip3LZWyImoMtMLAogbhfNvlNjmqSykjgMK4FplwgSn8p7sMH72tLZW
X+r+Ck5CdBS9EhNSoqXAxc/Liapx4JLWHskoag0W7/0uMU0JJ9m+7UP1YOLHpSbt
7Allne2F9/8Vv/hOJaKz7UjJ3Juk+SqLC/rmAxJRcylo6Srkv5UVLcnpEqkOt5qp
8x1c7RbF4dQCSsV3KJjSrHHFA9CpMEnEtXCRB22oEY6GNSsgMaUAAo7d/I+v4n2X
RUTduH6GElX8Zg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:17 2025 by rpki-client on console-fra.rpki-client.org