Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
File: JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft (raw, json)
Hash identifier: Oj9BdFmXC1sYPwKJMpbXO3b/W4z6BTUV5lMOKorja7A=
Subject key identifier: 05:1B:BE:01:D9:51:52:A1:B1:D9:25:78:5F:FF:21:EC:80:53:E3:1E
Authority key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
Certificate issuer: /CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Certificate serial: 0194BABB8C9B41CD4970691ED05EC5025254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
Manifest number: 0172
Signing time: Fri 31 Jan 2025 05:00:40 +0000
Manifest this update: Fri 31 Jan 2025 05:00:40 +0000
Manifest next update: Sat 01 Feb 2025 05:00:40 +0000
Files and hashes: 1: JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl (hash: BoRkG7/1BImoCLUxzWw6jJsCSNBTpFXhpi2Y2+Co5SA=)
2: iqsUTfguaYVXgXe8Vuc2DqYtis4.roa (hash: 7sUhJ+4DrqI1GXlkga4LbUKQ6fX31R18iQCPmLz2YM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:8c:9b:41:cd:49:70:69:1e:d0:5e:c5:02:52:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Validity
Not Before: Jan 31 05:00:40 2025 GMT
Not After : Feb 1 05:00:40 2025 GMT
Subject: CN=051bbe01d95152a1b1d925785fff21ec8053e31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:28:c9:e6:36:d7:21:1c:38:94:91:33:db:
8e:a9:14:db:7a:a0:e0:15:a9:60:84:2f:1d:05:01:
70:32:2f:14:f3:c7:61:71:f9:2b:83:3b:f6:f0:3d:
4e:e0:7b:9d:95:75:55:a0:91:9d:85:d0:55:fd:e7:
da:37:76:d1:a0:e7:22:81:86:83:0a:87:25:9b:cc:
63:dd:b8:f7:57:82:df:34:17:bf:27:c6:f2:90:19:
f7:13:cf:e3:b5:4d:46:95:58:88:75:12:99:da:d0:
9b:9f:e7:c6:19:28:80:d5:57:06:9d:4f:aa:33:1d:
16:4a:c0:b3:3c:bd:47:2b:4c:b4:e2:ea:7f:cc:27:
9a:03:34:00:d8:14:ec:a7:89:72:1b:4f:f1:d1:32:
f4:27:5d:85:6c:f2:53:6a:3e:7c:ca:9b:0a:60:5f:
93:ac:af:d0:40:0a:3c:75:7b:5b:be:0f:fa:da:22:
51:69:ca:13:5c:db:7c:ed:0e:01:60:30:b1:37:47:
d5:81:21:b7:b6:a8:4c:6e:85:92:ca:3c:60:9e:f6:
b8:9d:aa:fd:3b:5e:fb:c0:73:e9:58:8e:92:11:22:
ea:b6:1a:a7:d2:ed:8c:9b:b4:78:e5:a7:0c:49:d7:
83:0e:24:f9:c4:a4:33:b9:54:a8:c7:00:04:67:46:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1B:BE:01:D9:51:52:A1:B1:D9:25:78:5F:FF:21:EC:80:53:E3:1E
X509v3 Authority Key Identifier:
keyid:26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e8:b6:55:d5:30:db:5e:a8:75:7e:b7:5a:07:90:73:e7:16:
ba:83:ed:18:81:2d:a1:2a:63:17:8a:8a:ca:11:13:64:77:ba:
e4:5a:7b:80:20:7d:d7:3e:71:03:49:ad:f7:8f:0f:53:17:32:
7e:c9:03:af:4f:07:b7:84:8b:5e:6d:93:3b:a6:1e:46:3b:12:
67:84:7d:89:16:7c:6a:51:b8:2c:95:d3:35:d0:af:8a:e9:58:
f6:23:50:f7:84:09:04:1a:57:d6:b3:02:ad:47:9d:4c:82:be:
b1:45:cc:59:3b:ba:ed:63:e4:98:2f:40:db:19:5c:d2:d0:93:
5e:c1:c3:1f:0b:e6:a5:f0:31:fe:e0:33:c8:16:c0:63:9d:b4:
f1:e2:f6:87:48:c4:cf:29:f7:0d:d7:6c:55:df:36:b4:45:bb:
62:74:c5:a2:18:7b:94:de:1e:ed:dd:6d:51:f6:f2:25:98:19:
8c:36:d4:4b:16:2c:5a:56:f3:79:7f:f7:e0:4d:83:35:e8:00:
02:c6:fa:45:8a:5a:2b:4b:e8:59:74:91:bb:d0:e5:91:c2:93:
f6:bf:5b:f2:48:15:64:fd:89:a7:94:fa:fe:b4:8a:77:dc:ed:
8c:ef:2d:b6:2e:67:b3:65:91:02:fb:4f:fb:fa:b5:d8:18:43:
24:ae:18:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u4ybQc1JcGke0F7FAlJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Nzk1MjBmYjgxYTQ1ZmNiYzQyYTZlOTM1NTgwN2ViOWE3
NjQxZjkwHhcNMjUwMTMxMDUwMDQwWhcNMjUwMjAxMDUwMDQwWjAzMTEwLwYDVQQD
EygwNTFiYmUwMWQ5NTE1MmExYjFkOTI1Nzg1ZmZmMjFlYzgwNTNlMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBwoyeY21yEcOJSRM9uOqRTbeqDg
FalghC8dBQFwMi8U88dhcfkrgzv28D1O4HudlXVVoJGdhdBV/efaN3bRoOcigYaD
Coclm8xj3bj3V4LfNBe/J8bykBn3E8/jtU1GlViIdRKZ2tCbn+fGGSiA1VcGnU+q
Mx0WSsCzPL1HK0y04up/zCeaAzQA2BTsp4lyG0/x0TL0J12FbPJTaj58ypsKYF+T
rK/QQAo8dXtbvg/62iJRacoTXNt87Q4BYDCxN0fVgSG3tqhMboWSyjxgnva4nar9
O177wHPpWI6SESLqthqn0u2Mm7R45acMSdeDDiT5xKQzuVSoxwAEZ0ZqCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUbvgHZUVKhsdkleF//IeyAU+MeMB8GA1UdIwQY
MBaAFCZ5Ug+4GkX8vEKm6TVYB+uadkH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm5sU0Q3Z2FSZnk4UXFicE5WZ0g2NXAyUWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84MGU2ZmMtM2FiYS00NWUxLWI5YWMt
ZmE4MjM5ZjZjNmIzLzEvSm5sU0Q3Z2FSZnk4UXFicE5WZ0g2NXAyUWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84MGU2ZmMtM2FiYS00NWUxLWI5YWMtZmE4MjM5ZjZjNmIz
LzEvSm5sU0Q3Z2FSZnk4UXFicE5WZ0g2NXAyUWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjui2VdUw
216odX63WgeQc+cWuoPtGIEtoSpjF4qKyhETZHe65Fp7gCB91z5xA0mt948PUxcy
fskDr08Ht4SLXm2TO6YeRjsSZ4R9iRZ8alG4LJXTNdCviulY9iNQ94QJBBpX1rMC
rUedTIK+sUXMWTu67WPkmC9A2xlc0tCTXsHDHwvmpfAx/uAzyBbAY5208eL2h0jE
zyn3DddsVd82tEW7YnTFohh7lN4e7d1tUfbyJZgZjDbUSxYsWlbzeX/34E2DNegA
Asb6RYpaK0voWXSRu9DlkcKT9r9b8kgVZP2Jp5T6/rSKd9ztjO8tti5ns2WRAvtP
+/q12BhDJK4YEg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:26 2025 by rpki-client on console-fra.rpki-client.org