Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: 5S8rgCz3gQLdOu224HO4SOx273b//u8CAU+g9f5SfXA=
Subject key identifier: 62:21:A5:C4:DC:6C:86:58:DD:DE:EF:B9:7A:AE:A3:62:E8:2F:5B:BD
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 0194BA84617C9A920A874C25BC51EE7F1266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 04:00:25 +0000
Manifest this update: Fri 31 Jan 2025 04:00:25 +0000
Manifest next update: Sat 01 Feb 2025 04:00:25 +0000
Files and hashes: 1: B2KWviyku3mQduZIftTtv9f_Wko.roa (hash: L0tFun/t/g/1AW+2Ro3aFJKqECitA7KJ0Ci2/VOvYfs=)
2: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: f/55zfP+kiu0ABdzlBGpjBHIol5jLux6BcHYOak0aaM=)
3: gfaOusn6-X7BydpbAyAPOGJqVnY.roa (hash: R2bBwWhKC2UXRPobKdBOcv6MEU11M0B5SF79kwbkopk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:61:7c:9a:92:0a:87:4c:25:bc:51:ee:7f:12:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Jan 31 04:00:25 2025 GMT
Not After : Feb 1 04:00:25 2025 GMT
Subject: CN=6221a5c4dc6c8658dddeefb97aaea362e82f5bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:3b:e8:8e:5c:29:64:bb:fc:52:44:a4:a6:
5f:7d:53:82:26:ee:a0:a9:1f:de:5a:bc:ab:6e:6d:
f3:2e:71:e6:e2:58:de:1b:bd:00:dd:6e:a5:28:d4:
16:5c:ae:dd:30:54:c4:02:0e:d1:9e:12:62:3a:b0:
97:15:6e:64:60:ac:05:fc:c1:b1:a5:59:26:31:fd:
da:ea:96:15:5e:55:e1:57:97:cb:51:9b:ec:9d:5a:
28:be:48:70:c4:74:8b:76:19:d1:65:7d:80:23:12:
50:3e:46:6b:5d:4c:9b:13:5f:ec:43:32:ea:64:bb:
f5:d5:99:6e:3f:9b:2e:af:aa:e0:0b:e6:f3:f2:61:
0c:6a:80:b7:9b:0f:a2:f9:7f:57:1f:a3:0d:6c:4a:
ee:b6:0c:42:c1:da:b6:f4:4b:e4:0c:26:1e:3c:7f:
0b:62:f1:0e:e2:24:38:aa:44:83:c6:70:ed:ce:f0:
41:b7:27:b9:bd:e0:61:50:9d:ae:c5:37:a2:a1:d5:
6b:bd:7d:27:5d:bc:8a:e9:78:92:ed:09:d3:95:ec:
e7:32:ca:d4:0d:8d:be:9d:36:7e:e2:26:24:86:37:
94:0d:cf:2a:af:d4:eb:41:e8:86:c3:34:f2:a6:75:
65:0d:94:59:cb:d5:23:e1:9b:51:0a:c7:f6:78:54:
5e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:21:A5:C4:DC:6C:86:58:DD:DE:EF:B9:7A:AE:A3:62:E8:2F:5B:BD
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:eb:11:3a:24:54:5f:d1:f8:19:33:95:ba:b7:00:4f:12:d5:
aa:bc:eb:e9:b3:d6:49:ab:51:5e:0c:0c:2a:28:d3:b8:b1:71:
d7:6e:e6:5d:71:9d:ad:a8:7d:64:5d:14:1d:33:d2:af:0e:8c:
e9:d3:2d:1c:1d:35:19:cc:95:99:31:cf:11:ba:a0:c1:76:1b:
96:32:5e:61:cd:64:b1:8d:e5:7b:ab:c3:b2:3b:0d:b7:9d:47:
7d:e4:c7:85:12:c4:76:16:8d:1c:a8:c6:52:50:af:89:51:84:
40:ef:c5:d4:11:f8:50:e9:1e:b4:fb:05:66:b1:d2:90:3d:6e:
a0:e0:04:77:e1:35:63:63:74:03:39:89:4f:d8:5a:e8:44:a9:
b8:fb:db:c7:2d:11:2d:b7:14:89:98:2c:a0:43:e8:da:82:ef:
ca:89:d2:60:3f:28:c4:04:ce:d0:26:9f:22:ec:82:63:8d:b1:
02:31:9c:86:c1:20:c0:f6:b1:6e:56:a5:d5:0d:84:aa:7c:b8:
23:a2:56:89:21:cf:22:2d:b4:5d:e3:07:e7:f5:47:47:1c:a5:
d2:14:6d:0c:ea:96:44:e5:80:67:15:8d:20:1e:e4:92:89:4f:
24:a7:89:cc:36:8a:ae:fd:ec:a1:4b:d1:0e:17:e6:b7:c3:45:
9e:70:08:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hGF8mpIKh0wlvFHufxJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTk3ODZmMjI2Y2I2ZDQ5MGJmYjU0Mjk0ZTYxMWE3ZDUx
YThmMWUwHhcNMjUwMTMxMDQwMDI1WhcNMjUwMjAxMDQwMDI1WjAzMTEwLwYDVQQD
Eyg2MjIxYTVjNGRjNmM4NjU4ZGRkZWVmYjk3YWFlYTM2MmU4MmY1YmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6876I5cKWS7/FJEpKZffVOCJu6g
qR/eWryrbm3zLnHm4ljeG70A3W6lKNQWXK7dMFTEAg7RnhJiOrCXFW5kYKwF/MGx
pVkmMf3a6pYVXlXhV5fLUZvsnVoovkhwxHSLdhnRZX2AIxJQPkZrXUybE1/sQzLq
ZLv11ZluP5sur6rgC+bz8mEMaoC3mw+i+X9XH6MNbErutgxCwdq29EvkDCYePH8L
YvEO4iQ4qkSDxnDtzvBBtye5veBhUJ2uxTeiodVrvX0nXbyK6XiS7QnTleznMsrU
DY2+nTZ+4iYkhjeUDc8qr9TrQeiGwzTypnVlDZRZy9Uj4ZtRCsf2eFReswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIhpcTcbIZY3d7vuXquo2LoL1u9MB8GA1UdIwQY
MBaAFAhZeG8ibLbUkL+1QpTmEafVGo8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZsNGJ5SnN0dFNRdjdWQ2xPWVJwOVVhang0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQt
NTJmZTQ0MzQzNTBlLzEvQ0ZsNGJ5SnN0dFNRdjdWQ2xPWVJwOVVhang0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQtNTJmZTQ0MzQzNTBl
LzEvQ0ZsNGJ5SnN0dFNRdjdWQ2xPWVJwOVVhang0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyusROiRU
X9H4GTOVurcATxLVqrzr6bPWSatRXgwMKijTuLFx127mXXGdrah9ZF0UHTPSrw6M
6dMtHB01GcyVmTHPEbqgwXYbljJeYc1ksY3le6vDsjsNt51HfeTHhRLEdhaNHKjG
UlCviVGEQO/F1BH4UOketPsFZrHSkD1uoOAEd+E1Y2N0AzmJT9ha6ESpuPvbxy0R
LbcUiZgsoEPo2oLvyonSYD8oxATO0CafIuyCY42xAjGchsEgwPaxblal1Q2Eqny4
I6JWiSHPIi20XeMH5/VHRxyl0hRtDOqWROWAZxWNIB7kkolPJKeJzDaKrv3soUvR
Dhfmt8NFnnAIpQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:53 2025 by rpki-client on console-fra.rpki-client.org