Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
File: tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft (raw, json)
Hash identifier: kXCo8xI3P88ZxoaahX4aKiDZJwZV2rR7/ExifQaKXKw=
Subject key identifier: 9B:DE:DB:2E:24:EA:13:05:84:6D:C2:53:04:B7:50:87:80:83:C1:D1
Authority key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
Certificate issuer: /CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Certificate serial: 0194BA8467DA01AC77CF0680EE1E0EEFEFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
Manifest number: 0D3E
Signing time: Fri 31 Jan 2025 04:00:27 +0000
Manifest this update: Fri 31 Jan 2025 04:00:27 +0000
Manifest next update: Sat 01 Feb 2025 04:00:27 +0000
Files and hashes: 1: n153dY1GpJ4_UwUqUY3HaTEGP7I.roa (hash: Xk7KXK61rmwLqoIHj+t2jV4riZg2jXu+cWnVquz+ZXA=)
2: tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl (hash: ZmLUS3Sb3xPGJfZuMU3Fqi9yHusxGoPPeg+Nb8RDgLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:67:da:01:ac:77:cf:06:80:ee:1e:0e:ef:ef:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Validity
Not Before: Jan 31 04:00:27 2025 GMT
Not After : Feb 1 04:00:27 2025 GMT
Subject: CN=9bdedb2e24ea1305846dc25304b750878083c1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:58:90:a9:d3:16:09:bc:20:41:09:74:dc:
7e:5d:ad:41:fb:10:19:d5:38:77:02:f3:28:ef:8c:
6b:8f:f6:5c:79:98:47:4b:3d:6d:22:57:95:30:51:
6d:6d:e4:2c:44:3f:48:e7:ff:f3:a2:6b:82:4a:3f:
a9:30:49:d7:e2:89:67:6c:27:fd:21:19:a9:51:d9:
1a:b3:e8:23:3c:b9:69:c5:0c:8c:63:76:1e:e2:84:
fc:54:5f:17:00:fb:66:83:c7:bb:da:65:3d:cf:ad:
28:e2:56:5d:ec:68:b3:19:2c:ea:90:bf:6a:13:25:
7b:8f:d1:76:1a:d5:12:63:32:af:31:1e:e6:85:68:
7f:d6:ed:2f:14:da:13:70:d4:31:c3:df:5b:ed:ec:
d6:d0:0c:d5:6e:18:dd:3d:5c:ad:3e:27:3e:dc:3d:
ce:f5:f1:42:d5:18:b9:f7:c1:c1:5a:17:20:6e:0c:
f9:51:82:26:de:cb:39:92:ae:25:a9:6c:0f:b2:4f:
fb:b0:e7:d3:7a:b0:d9:80:5c:46:5c:17:c2:3d:4a:
bb:02:ea:4e:41:7d:16:cd:9c:a6:3e:f1:90:19:26:
b5:cb:87:26:3e:3a:30:7c:4e:cb:88:57:e3:5d:c1:
fc:a7:d7:bf:ab:7e:75:a7:5a:4e:fb:9f:c9:56:14:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DE:DB:2E:24:EA:13:05:84:6D:C2:53:04:B7:50:87:80:83:C1:D1
X509v3 Authority Key Identifier:
keyid:B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9a:17:7e:19:ed:fd:dc:2f:33:60:e7:9c:8f:70:2f:68:08:
17:53:f8:91:00:c7:7f:0f:d0:38:f1:42:96:30:d5:88:26:ba:
07:66:2f:0e:31:5d:19:e2:72:12:bc:fe:bd:c0:13:ca:1e:4f:
3b:2c:31:4c:1c:2b:3c:a5:72:b4:93:41:a2:74:92:61:df:5f:
35:af:2c:03:f3:e4:05:36:bd:d3:90:24:c6:a2:39:7d:09:76:
63:dc:81:c2:d0:b7:ca:c8:6a:9c:b9:24:ae:e2:97:83:fd:9c:
35:b8:2e:69:67:dc:59:72:69:d7:cf:5c:79:42:e1:45:45:a1:
c8:c0:db:bd:ce:d7:e9:4f:03:94:53:8d:16:00:17:9f:da:84:
cd:92:f8:44:86:6f:fe:f0:b6:11:ec:11:0b:30:0a:26:57:91:
8a:ba:57:21:f6:59:ff:3d:e8:b5:b6:ac:28:65:65:97:ef:d8:
26:bf:87:65:81:49:0c:b0:0c:1e:6d:7e:1e:40:63:7f:ac:25:
5f:a7:a9:1d:13:60:5e:75:c6:46:a5:50:13:a6:4d:f4:ec:24:
a4:d5:f8:e1:57:ea:75:40:3f:5c:ad:50:68:c0:e3:5f:ec:7a:
30:00:ee:32:16:db:71:1f:81:e3:70:05:1c:c9:1a:a5:bc:de:
17:66:b7:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hGfaAax3zwaA7h4O7+/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NzQ1YmI4ZWYwMDg4Y2I1MTlhNDA5NWQ2NTE3MTllZjUx
ZWUzNTQwHhcNMjUwMTMxMDQwMDI3WhcNMjUwMjAxMDQwMDI3WjAzMTEwLwYDVQQD
Eyg5YmRlZGIyZTI0ZWExMzA1ODQ2ZGMyNTMwNGI3NTA4NzgwODNjMWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry1YkKnTFgm8IEEJdNx+Xa1B+xAZ
1Th3AvMo74xrj/ZceZhHSz1tIleVMFFtbeQsRD9I5//zomuCSj+pMEnX4olnbCf9
IRmpUdkas+gjPLlpxQyMY3Ye4oT8VF8XAPtmg8e72mU9z60o4lZd7GizGSzqkL9q
EyV7j9F2GtUSYzKvMR7mhWh/1u0vFNoTcNQxw99b7ezW0AzVbhjdPVytPic+3D3O
9fFC1Ri598HBWhcgbgz5UYIm3ss5kq4lqWwPsk/7sOfTerDZgFxGXBfCPUq7AupO
QX0WzZymPvGQGSa1y4cmPjowfE7LiFfjXcH8p9e/q351p1pO+5/JVhQp2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJve2y4k6hMFhG3CUwS3UIeAg8HRMB8GA1UdIwQY
MBaAFLV0W7jvAIjLUZpAldZRcZ71HuNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhSYnVPOEFpTXRSbWtDVjFsRnhudlVlNDFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xNWFmZTUtNDJiMy00Y2U2LTlkOWQt
ODdjMzM2OGNiM2ZhLzEvdFhSYnVPOEFpTXRSbWtDVjFsRnhudlVlNDFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8xNWFmZTUtNDJiMy00Y2U2LTlkOWQtODdjMzM2OGNiM2Zh
LzEvdFhSYnVPOEFpTXRSbWtDVjFsRnhudlVlNDFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZoXfhnt
/dwvM2DnnI9wL2gIF1P4kQDHfw/QOPFCljDViCa6B2YvDjFdGeJyErz+vcATyh5P
OywxTBwrPKVytJNBonSSYd9fNa8sA/PkBTa905AkxqI5fQl2Y9yBwtC3yshqnLkk
ruKXg/2cNbguaWfcWXJp189ceULhRUWhyMDbvc7X6U8DlFONFgAXn9qEzZL4RIZv
/vC2EewRCzAKJleRirpXIfZZ/z3otbasKGVll+/YJr+HZYFJDLAMHm1+HkBjf6wl
X6epHRNgXnXGRqVQE6ZN9OwkpNX44VfqdUA/XK1QaMDjX+x6MADuMhbbcR+B43AF
HMkapbzeF2a3iw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:19 2025 by rpki-client on console-fra.rpki-client.org