Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
File: niN_MrrhSoH9on6ylGDDoO2jQkA.mft (raw, json)
Hash identifier: PPvgoLt4N18HwLcWFiqOhDORa4kZtQZAQRMutdbndOE=
Subject key identifier: AE:C6:7F:8A:28:4F:A9:48:25:36:5B:45:F1:36:E8:0E:CA:72:EA:BC
Authority key identifier: 9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
Certificate issuer: /CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Certificate serial: 0194BB28E9011861E73BDFC469F85AAB199F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
Manifest number: 0C30
Signing time: Fri 31 Jan 2025 07:00:07 +0000
Manifest this update: Fri 31 Jan 2025 07:00:07 +0000
Manifest next update: Sat 01 Feb 2025 07:00:07 +0000
Files and hashes: 1: duyGpoRiUSXpX71VT4XYnZHmGlA.roa (hash: BUaqTN98K6qCPpPRz7Abj2KUlyE692OgtKSmoKCDJkM=)
2: niN_MrrhSoH9on6ylGDDoO2jQkA.crl (hash: HC8v9p9l6O5a9TiDQ5oehJUNOlxdwiJJPBl5N9eqUsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:e9:01:18:61:e7:3b:df:c4:69:f8:5a:ab:19:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Validity
Not Before: Jan 31 07:00:07 2025 GMT
Not After : Feb 1 07:00:07 2025 GMT
Subject: CN=aec67f8a284fa94825365b45f136e80eca72eabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:0f:f9:58:c2:24:22:58:12:b7:f6:a4:71:
2b:6b:f3:5b:a2:f5:64:aa:b8:59:1a:39:db:a0:2a:
26:19:c6:5a:b5:eb:b7:4a:67:73:ff:54:42:b2:60:
cf:67:0d:c5:ed:87:a0:a2:cd:8c:af:1f:1b:8a:72:
e2:4d:0d:35:12:a6:04:3c:df:3c:0d:9f:8f:0e:da:
af:b8:7b:ca:8e:01:7d:ab:08:00:e3:ed:9b:72:0c:
a8:93:c1:7e:2e:75:91:bb:19:a9:d6:ad:84:0f:65:
70:b0:af:56:05:20:71:82:f5:fe:e3:ee:18:31:d9:
52:55:14:8e:86:8e:df:8b:eb:f0:5f:8e:2d:db:66:
a0:3d:98:13:8e:66:1b:ef:fd:c1:3b:f5:b8:63:7f:
a4:74:0c:75:ad:ac:ca:7a:a9:9c:8b:9c:4f:37:09:
41:2e:70:b4:44:14:9b:33:26:92:2e:0d:70:90:53:
f9:ba:68:b0:15:62:56:a2:e0:f5:10:f1:e3:05:0a:
bc:48:ba:67:eb:d0:9e:4b:53:2c:b8:eb:9f:7b:39:
b8:b4:9b:d5:e3:7b:6a:c6:96:ba:06:88:a6:4d:d0:
3a:2e:40:b5:de:43:75:14:09:9d:dd:af:e8:91:f6:
0c:90:5e:c5:e6:79:a8:4c:73:34:85:0a:2d:9d:28:
d8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:7F:8A:28:4F:A9:48:25:36:5B:45:F1:36:E8:0E:CA:72:EA:BC
X509v3 Authority Key Identifier:
keyid:9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9e:bb:c3:3f:06:9c:34:da:2a:6f:65:2a:d8:b2:fb:e6:73:
8d:ec:60:14:16:9f:1c:89:fb:4a:ce:8d:ce:1e:16:1e:03:b5:
2d:c5:13:b4:b9:d7:c5:40:f7:c9:5a:c8:11:1a:38:c2:ff:c3:
f0:45:7b:83:44:17:d9:5a:89:0a:61:bf:fc:4e:9e:cc:7f:36:
57:f2:95:35:0d:2f:70:8c:4d:a5:c6:a8:e6:ef:eb:d4:83:39:
39:d3:3e:26:29:f1:18:08:45:c3:2e:63:6b:0b:0d:a2:f9:5a:
f1:97:c1:2b:8c:b7:11:52:2e:2c:0a:35:2a:a0:2f:59:1a:e5:
05:de:0e:76:0d:8e:7b:3c:7c:83:31:18:bd:82:18:fb:8e:c9:
e3:ff:ff:0f:74:ca:cb:e9:c9:4a:20:32:24:74:81:08:95:7a:
c5:2e:2f:09:d4:45:c1:01:f1:18:76:6d:b0:d0:9c:42:04:e1:
a0:2f:34:6f:9c:e7:27:3b:54:75:88:7c:66:a5:b6:79:bf:7f:
4a:cf:61:e7:b2:43:96:8a:1f:98:8d:9f:a5:b6:22:89:c4:c2:
10:6f:aa:91:49:60:74:a9:7e:1f:26:8f:e9:f5:76:f3:d9:c8:
87:03:88:6e:51:31:40:55:55:09:d5:6e:5e:3f:c8:7b:96:fe:
a3:45:7f:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KOkBGGHnO9/EafhaqxmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMjM3ZjMyYmFlMTRhODFmZGEyN2ViMjk0NjBjM2EwZWRh
MzQyNDAwHhcNMjUwMTMxMDcwMDA3WhcNMjUwMjAxMDcwMDA3WjAzMTEwLwYDVQQD
EyhhZWM2N2Y4YTI4NGZhOTQ4MjUzNjViNDVmMTM2ZTgwZWNhNzJlYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwacP+VjCJCJYErf2pHEra/NbovVk
qrhZGjnboComGcZateu3Smdz/1RCsmDPZw3F7Yegos2Mrx8binLiTQ01EqYEPN88
DZ+PDtqvuHvKjgF9qwgA4+2bcgyok8F+LnWRuxmp1q2ED2VwsK9WBSBxgvX+4+4Y
MdlSVRSOho7fi+vwX44t22agPZgTjmYb7/3BO/W4Y3+kdAx1razKeqmci5xPNwlB
LnC0RBSbMyaSLg1wkFP5umiwFWJWouD1EPHjBQq8SLpn69CeS1MsuOufezm4tJvV
43tqxpa6BoimTdA6LkC13kN1FAmd3a/okfYMkF7F5nmoTHM0hQotnSjYRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7Gf4ooT6lIJTZbRfE26A7Kcuq8MB8GA1UdIwQY
MBaAFJ4jfzK64UqB/aJ+spRgw6Dto0JAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmlOX01ycmhTb0g5b242eWxHRERvTzJqUWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81ZDZlYmQtYThlZS00NzRjLWI3MWEt
YTY0MmNjODViYzcxLzEvbmlOX01ycmhTb0g5b242eWxHRERvTzJqUWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81ZDZlYmQtYThlZS00NzRjLWI3MWEtYTY0MmNjODViYzcx
LzEvbmlOX01ycmhTb0g5b242eWxHRERvTzJqUWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASp67wz8G
nDTaKm9lKtiy++ZzjexgFBafHIn7Ss6Nzh4WHgO1LcUTtLnXxUD3yVrIERo4wv/D
8EV7g0QX2VqJCmG//E6ezH82V/KVNQ0vcIxNpcao5u/r1IM5OdM+JinxGAhFwy5j
awsNovla8ZfBK4y3EVIuLAo1KqAvWRrlBd4Odg2Oezx8gzEYvYIY+47J4///D3TK
y+nJSiAyJHSBCJV6xS4vCdRFwQHxGHZtsNCcQgThoC80b5znJztUdYh8ZqW2eb9/
Ss9h57JDloofmI2fpbYiicTCEG+qkUlgdKl+HyaP6fV289nIhwOIblExQFVVCdVu
Xj/Ie5b+o0V/zg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:25 2025 by rpki-client on console-fra.rpki-client.org