Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
File: P1YjHn71MYG2MCYPVzmpOZgLzg8.mft (raw, json)
Hash identifier: m5nS9Jrck3DyHXbHiTyvwIrpr+Iy1MEd7AZg81Rzn+E=
Subject key identifier: D1:D6:64:3F:D9:F3:3A:79:F9:DD:D8:1E:26:4E:A4:7E:1A:EA:76:97
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Certificate issuer: /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial: 0194BA8481937C9DDD80193D8015CAB4E621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
Manifest number: 0470
Signing time: Fri 31 Jan 2025 04:00:33 +0000
Manifest this update: Fri 31 Jan 2025 04:00:33 +0000
Manifest next update: Sat 01 Feb 2025 04:00:33 +0000
Files and hashes: 1: N7wTPY9fMxEW9bxsO96kZUV-srk.roa (hash: uJjDkbG36UQdfaC7DvT1mlqCZKSOCWSqMQESz+y4GRo=)
2: P1YjHn71MYG2MCYPVzmpOZgLzg8.crl (hash: 4ii0jgIHL+94NgnAPLWIu9+aj44lqUGQRxn6GfUHCpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:81:93:7c:9d:dd:80:19:3d:80:15:ca:b4:e6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
Validity
Not Before: Jan 31 04:00:33 2025 GMT
Not After : Feb 1 04:00:33 2025 GMT
Subject: CN=d1d6643fd9f33a79f9ddd81e264ea47e1aea7697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:78:82:86:5b:90:6f:a7:08:78:ef:c5:3c:
f0:49:6b:55:b6:be:0e:77:9a:fa:81:eb:5e:37:b5:
78:dc:78:e3:95:8b:a6:3e:65:e4:a2:b1:7c:31:aa:
8e:36:89:dc:59:44:7f:7e:9a:ff:1e:7f:ee:54:8b:
25:4c:e3:ff:7b:f2:c4:42:ab:09:e3:34:8a:70:d2:
c4:49:ba:8d:5e:59:e7:45:ed:7b:46:32:62:0c:5b:
43:74:41:1d:f7:d3:38:53:66:23:46:10:1f:97:9a:
4a:bd:fa:eb:04:74:c6:fc:e2:89:c8:4b:7d:e1:a8:
68:d0:05:42:52:2c:a9:79:f4:90:61:f4:33:ce:fc:
cb:0e:1b:b3:3c:e4:c6:47:b3:94:85:14:fd:35:06:
eb:2b:6c:50:76:9a:9c:4f:6e:4a:bf:1a:06:70:15:
62:e6:1c:d5:7f:05:75:a0:3f:13:c1:31:45:ea:63:
24:22:e8:18:43:6b:27:ad:e4:92:85:0b:4f:44:25:
22:07:3a:22:c4:c3:d9:ce:98:21:14:2c:72:ac:4c:
98:49:ee:f9:e2:a7:38:e2:32:34:7c:05:2f:a1:bb:
d1:a9:7d:51:a8:47:60:9e:c6:8c:0c:9c:f4:ac:e6:
55:6e:b0:42:a2:69:46:db:d5:2a:1f:08:bc:b2:82:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:64:3F:D9:F3:3A:79:F9:DD:D8:1E:26:4E:A4:7E:1A:EA:76:97
X509v3 Authority Key Identifier:
keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4a:dd:9b:83:c2:2a:99:a1:12:d8:14:d1:8b:20:1d:38:32:
75:95:b1:1d:2c:eb:c6:e3:b0:ce:29:db:0b:0f:3c:0e:8e:57:
d0:ce:18:fb:91:a1:ee:8f:de:d3:f4:cd:14:fa:76:93:24:f7:
03:9d:03:35:a7:20:32:c5:7d:3d:c8:91:9d:a3:ba:4f:f9:0a:
c7:b4:fd:19:60:6c:e1:38:0c:27:d5:b1:4d:c8:8d:4f:84:5c:
0b:96:b0:fd:36:19:d2:f1:8a:3d:6d:71:f1:06:a4:34:63:37:
5a:01:e1:ed:90:cd:b4:ea:b0:04:10:e8:b2:d2:f4:fd:23:3a:
ff:fe:01:31:d2:d8:09:03:db:9a:54:14:b6:97:20:c5:06:52:
2a:8f:c3:49:b3:6b:99:2e:76:30:86:65:9c:c2:8d:58:95:0d:
91:f7:45:40:ad:19:2f:84:90:ca:6f:77:4d:27:7b:ec:78:ed:
b1:e3:4e:8d:49:e3:cb:37:83:13:db:93:ac:41:f1:3f:dd:da:
8c:62:e3:a2:6e:2f:75:a8:97:d9:07:3f:21:89:b8:0d:af:74:
83:60:ff:05:2d:ba:18:de:e1:26:32:10:6d:60:5e:92:d1:5c:
d7:36:30:19:ce:4a:09:a2:e0:81:d6:81:0f:42:b4:00:9e:da:
e3:65:ad:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hIGTfJ3dgBk9gBXKtOYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNTYyMzFlN2VmNTMxODFiNjMwMjYwZjU3MzlhOTM5OTgw
YmNlMGYwHhcNMjUwMTMxMDQwMDMzWhcNMjUwMjAxMDQwMDMzWjAzMTEwLwYDVQQD
EyhkMWQ2NjQzZmQ5ZjMzYTc5ZjlkZGQ4MWUyNjRlYTQ3ZTFhZWE3Njk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoR4goZbkG+nCHjvxTzwSWtVtr4O
d5r6geteN7V43HjjlYumPmXkorF8MaqONoncWUR/fpr/Hn/uVIslTOP/e/LEQqsJ
4zSKcNLESbqNXlnnRe17RjJiDFtDdEEd99M4U2YjRhAfl5pKvfrrBHTG/OKJyEt9
4aho0AVCUiypefSQYfQzzvzLDhuzPOTGR7OUhRT9NQbrK2xQdpqcT25KvxoGcBVi
5hzVfwV1oD8TwTFF6mMkIugYQ2snreSShQtPRCUiBzoixMPZzpghFCxyrEyYSe75
4qc44jI0fAUvobvRqX1RqEdgnsaMDJz0rOZVbrBComlG29UqHwi8soJ+9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHWZD/Z8zp5+d3YHiZOpH4a6naXMB8GA1UdIwQY
MBaAFD9WIx5+9TGBtjAmD1c5qTmYC84PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDFZakhuNzFNWUcyTUNZUFZ6bXBPWmdMemc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81YzJlMzYtYTlkYi00NTIyLWE2M2Ut
NDU1ZGRjN2Q5ZTM4LzEvUDFZakhuNzFNWUcyTUNZUFZ6bXBPWmdMemc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81YzJlMzYtYTlkYi00NTIyLWE2M2UtNDU1ZGRjN2Q5ZTM4
LzEvUDFZakhuNzFNWUcyTUNZUFZ6bXBPWmdMemc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkrdm4PC
KpmhEtgU0YsgHTgydZWxHSzrxuOwzinbCw88Do5X0M4Y+5Gh7o/e0/TNFPp2kyT3
A50DNacgMsV9PciRnaO6T/kKx7T9GWBs4TgMJ9WxTciNT4RcC5aw/TYZ0vGKPW1x
8QakNGM3WgHh7ZDNtOqwBBDostL0/SM6//4BMdLYCQPbmlQUtpcgxQZSKo/DSbNr
mS52MIZlnMKNWJUNkfdFQK0ZL4SQym93TSd77HjtseNOjUnjyzeDE9uTrEHxP93a
jGLjom4vdaiX2Qc/IYm4Da90g2D/BS26GN7hJjIQbWBektFc1zYwGc5KCaLggdaB
D0K0AJ7a42WtAg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:24 2025 by rpki-client on console-fra.rpki-client.org