Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
File: CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft (raw, json)
Hash identifier: jINAJuhiwJmrLAibA2KzqaTrW8HJx20mca39tCWwoPQ=
Subject key identifier: FA:80:E4:0F:09:88:93:84:EF:58:E6:7F:09:E2:45:95:C9:D6:E1:AB
Authority key identifier: 0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
Certificate issuer: /CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Certificate serial: 0194BB970F6773BE1EBA5314C0FF77B41EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:26 +0000
Manifest this update: Fri 31 Jan 2025 09:00:26 +0000
Manifest next update: Sat 01 Feb 2025 09:00:26 +0000
Files and hashes: 1: CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl (hash: Saqmd8/XmMv0xi+us9lxIKKpI3o6Q6nRosGcReA4HTs=)
2: ZM-gSRhoMrGYnOYCigGO3KlUdxE.roa (hash: HD/5KvR+lV05wvXD394776vmYH6dBYVti0mPyMnQTNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:0f:67:73:be:1e:ba:53:14:c0:ff:77:b4:1e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Validity
Not Before: Jan 31 09:00:26 2025 GMT
Not After : Feb 1 09:00:26 2025 GMT
Subject: CN=fa80e40f09889384ef58e67f09e24595c9d6e1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:e7:d5:81:59:bf:f4:6b:88:34:65:8e:2e:
b1:b4:6b:0e:28:39:31:88:3f:5a:90:6f:1e:b9:07:
a5:ff:11:ab:97:2f:a3:53:02:d3:7c:7a:37:23:5e:
8e:f1:a6:94:df:68:23:b0:2a:d7:29:64:07:83:57:
fe:1b:51:03:0d:cb:26:25:ae:6d:43:27:6c:b6:2c:
22:10:47:3d:c3:cb:75:68:49:79:88:70:a4:18:fd:
c4:42:c7:95:af:09:09:04:88:24:c3:6d:d4:14:32:
bf:46:15:cd:b6:b0:48:38:ed:fe:b1:78:40:ad:84:
6f:30:e0:ee:c2:a8:4a:67:0b:93:38:73:73:25:75:
a9:25:f2:10:72:25:e8:f5:e6:d0:d8:f2:48:38:6f:
0d:5e:93:a2:8a:b0:c6:1c:1f:b8:f9:c9:97:d0:e5:
32:1f:49:8c:ae:69:7d:7d:bb:31:d2:f3:b6:6b:2b:
24:0c:23:af:59:27:2b:b6:b2:3b:aa:eb:c7:56:05:
f2:21:7d:4d:81:28:27:9a:3c:f1:fd:2a:63:73:6f:
2d:28:49:bd:87:ab:4a:4b:50:3b:ca:e5:b9:63:8f:
2e:e4:7b:7a:c7:60:3e:66:d4:03:92:93:d9:fd:6c:
1a:51:e7:fd:ac:7f:51:07:40:64:51:36:de:e9:66:
27:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:80:E4:0F:09:88:93:84:EF:58:E6:7F:09:E2:45:95:C9:D6:E1:AB
X509v3 Authority Key Identifier:
keyid:0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:12:05:08:1e:ea:cb:e5:5d:73:06:e2:11:60:83:e8:f2:6b:
63:84:13:15:46:30:ca:dc:cf:f5:eb:8b:14:26:4e:a5:60:eb:
d3:fb:6b:bb:ff:c6:ad:43:33:63:59:cf:5c:15:52:5e:86:4e:
8e:a2:6e:29:66:c4:88:4e:ce:65:82:70:d2:88:18:bc:b5:d6:
95:e7:9b:5b:11:c6:81:f0:c9:95:07:ca:90:dc:fd:de:fe:a5:
ce:e8:bf:1b:5a:cb:21:9a:ee:cc:42:4c:a2:78:6c:02:7a:c3:
60:22:71:40:01:e1:29:e3:18:48:9e:9d:f2:54:d5:9d:97:6d:
6b:e2:4e:dd:87:35:86:95:94:4f:82:88:a6:73:13:e6:2f:ea:
2b:1d:b0:2f:7a:60:f4:17:f5:ae:ea:22:43:bb:f6:cf:fd:58:
0f:ca:c0:cd:5d:81:d1:48:1b:3d:f0:77:12:6e:3c:74:3e:b6:
ab:54:f3:aa:60:2f:4d:aa:17:80:ac:77:8b:5f:0c:9d:6d:52:
b7:b6:47:c4:cf:4d:38:fc:c6:35:57:2a:6d:5b:ad:05:f6:55:
f2:4f:86:38:db:da:42:1c:29:44:47:7d:f8:bb:6e:4d:95:82:
ac:63:1c:2b:93:e5:a9:47:c7:0f:e2:d9:a1:3b:96:81:7f:2d:
e4:ec:90:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lw9nc74eulMUwP93tB61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzVhY2JmMzA1NTk2NjhlYTE4ZWEzZjEwYjI5N2VlNjRj
OGU0OTMwHhcNMjUwMTMxMDkwMDI2WhcNMjUwMjAxMDkwMDI2WjAzMTEwLwYDVQQD
EyhmYTgwZTQwZjA5ODg5Mzg0ZWY1OGU2N2YwOWUyNDU5NWM5ZDZlMWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwzn1YFZv/RriDRlji6xtGsOKDkx
iD9akG8euQel/xGrly+jUwLTfHo3I16O8aaU32gjsCrXKWQHg1f+G1EDDcsmJa5t
QydstiwiEEc9w8t1aEl5iHCkGP3EQseVrwkJBIgkw23UFDK/RhXNtrBIOO3+sXhA
rYRvMODuwqhKZwuTOHNzJXWpJfIQciXo9ebQ2PJIOG8NXpOiirDGHB+4+cmX0OUy
H0mMrml9fbsx0vO2ayskDCOvWScrtrI7quvHVgXyIX1NgSgnmjzx/Spjc28tKEm9
h6tKS1A7yuW5Y48u5Ht6x2A+ZtQDkpPZ/WwaUef9rH9RB0BkUTbe6WYnEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqA5A8JiJOE71jmfwniRZXJ1uGrMB8GA1UdIwQY
MBaAFAs1rL8wVZZo6hjqPxCyl+5kyOSTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pXc3Z6QlZsbWpxR09vX0VMS1g3bVRJNUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83MmZiNDUtMzBjNy00YTUzLWEyZGIt
YjRjOWUyYjBkMTU2LzEvQ3pXc3Z6QlZsbWpxR09vX0VMS1g3bVRJNUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83MmZiNDUtMzBjNy00YTUzLWEyZGItYjRjOWUyYjBkMTU2
LzEvQ3pXc3Z6QlZsbWpxR09vX0VMS1g3bVRJNUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhIFCB7q
y+VdcwbiEWCD6PJrY4QTFUYwytzP9euLFCZOpWDr0/tru//GrUMzY1nPXBVSXoZO
jqJuKWbEiE7OZYJw0ogYvLXWleebWxHGgfDJlQfKkNz93v6lzui/G1rLIZruzEJM
onhsAnrDYCJxQAHhKeMYSJ6d8lTVnZdta+JO3Yc1hpWUT4KIpnMT5i/qKx2wL3pg
9Bf1ruoiQ7v2z/1YD8rAzV2B0UgbPfB3Em48dD62q1TzqmAvTaoXgKx3i18MnW1S
t7ZHxM9NOPzGNVcqbVutBfZV8k+GONvaQhwpREd9+LtuTZWCrGMcK5PlqUfHD+LZ
oTuWgX8t5OyQrQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:54 2025 by rpki-client on console-fra.rpki-client.org