Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
File: hcNSXWi2ERZWThbh3U5WywNcnIU.mft (raw, json)
Hash identifier: /OEP/IYO6pBQppARH2cMpgPnM4KRzwXIW4oAS9N3S6E=
Subject key identifier: 95:16:EE:2A:D5:8C:7D:6D:39:41:C4:D6:B5:5A:81:99:3F:21:C2:E9
Authority key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
Certificate issuer: /CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Certificate serial: 0194BB970BCE7861E7908FDECA4DE8DED7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 09:00:25 +0000
Manifest this update: Fri 31 Jan 2025 09:00:25 +0000
Manifest next update: Sat 01 Feb 2025 09:00:25 +0000
Files and hashes: 1: hEPXQgU_4RM48GU6YHvdaeu2Uew.roa (hash: Y8wvnBW02yBGPfnw7ReZF8CB9IAoGOhz+Y/sJITIMzc=)
2: hcNSXWi2ERZWThbh3U5WywNcnIU.crl (hash: lgSVKp6vYlqXv2wd9q40GQPj1apzzNG6f2AMSLKrygs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:0b:ce:78:61:e7:90:8f:de:ca:4d:e8:de:d7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Validity
Not Before: Jan 31 09:00:25 2025 GMT
Not After : Feb 1 09:00:25 2025 GMT
Subject: CN=9516ee2ad58c7d6d3941c4d6b55a81993f21c2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:b0:98:95:c2:7d:69:1d:b4:d3:14:f7:8b:
79:34:b0:5a:b7:91:28:14:17:db:c4:a0:18:a6:a4:
30:38:09:51:e5:1f:18:3f:5c:74:6f:eb:d0:d1:e7:
4e:a8:d0:41:d4:f3:46:ea:ba:ce:f7:83:49:75:6a:
95:7c:ee:1f:a0:2e:aa:37:97:37:00:ca:74:3f:c7:
0c:83:2c:65:3f:1b:56:91:88:2c:e1:5c:92:f2:dd:
d3:73:bd:48:66:8c:4f:a5:04:70:a2:a3:9e:79:99:
f2:b0:0d:d8:5a:f7:3b:41:d1:6e:06:c6:e1:b0:72:
88:98:09:15:f3:39:ba:51:1b:14:3d:e6:64:2d:90:
5f:4f:1c:56:0a:1d:ec:f4:ed:a9:7b:d6:b9:1e:a7:
e9:e4:66:ea:2d:99:a9:3f:6b:5e:4a:1c:8f:c1:29:
6c:d3:a8:57:a2:d9:a8:33:ef:fc:28:d2:65:66:01:
91:90:c7:dc:08:b0:cc:74:bd:16:e0:fc:1c:7f:85:
56:06:02:e7:c9:96:a5:20:1c:a8:a1:c6:96:7a:02:
33:0b:ec:26:b5:b8:2f:47:9c:db:bc:6d:cc:de:33:
1d:85:83:15:39:43:2f:b9:48:06:e0:83:b7:73:73:
df:cf:64:18:20:9d:32:d9:65:55:4f:b6:3b:2d:03:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:16:EE:2A:D5:8C:7D:6D:39:41:C4:D6:B5:5A:81:99:3F:21:C2:E9
X509v3 Authority Key Identifier:
keyid:85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2c:c5:b1:41:ef:33:3e:91:81:3f:e1:e8:e2:a4:02:67:ce:
4f:e6:41:26:4d:11:fd:6c:a0:05:5c:bd:32:5f:99:4d:0e:a6:
29:c3:c7:2c:36:58:f6:b2:83:91:ae:0c:50:36:15:65:bc:7e:
80:fc:1b:13:50:a8:13:68:b9:f1:8a:05:f2:e7:7e:5f:08:ff:
d4:23:9a:f2:e2:0f:9d:18:66:53:b9:83:10:03:0a:bf:33:02:
4c:42:d9:cc:39:13:0a:15:08:17:0d:04:bf:f1:f2:49:45:96:
b9:41:95:b9:a8:68:15:fb:86:3d:8e:da:a1:33:3b:53:d4:db:
1f:c6:1f:b5:11:30:29:45:62:ea:60:99:8c:20:b0:c5:06:ba:
04:98:67:54:12:3c:60:10:b5:7a:34:b1:b5:0d:42:b3:5c:bd:
b2:a7:7b:88:12:cc:a9:0c:02:46:23:9f:84:c5:67:2b:71:7d:
44:f2:64:62:cc:c8:6c:42:a0:71:5a:91:00:77:c9:ef:68:33:
22:ed:92:c6:67:87:37:a6:65:45:7a:0d:72:89:8c:61:ad:ba:
94:2f:16:fe:ee:35:ae:52:58:cf:0a:e9:a7:ba:fe:ef:e4:d7:
31:ce:05:eb:94:9a:3f:40:33:6f:1d:3c:df:4c:ad:76:eb:25:
93:85:70:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lwvOeGHnkI/eyk3o3tfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YzM1MjVkNjhiNjExMTY1NjRlMTZlMWRkNGU1NmNiMDM1
YzljODUwHhcNMjUwMTMxMDkwMDI1WhcNMjUwMjAxMDkwMDI1WjAzMTEwLwYDVQQD
Eyg5NTE2ZWUyYWQ1OGM3ZDZkMzk0MWM0ZDZiNTVhODE5OTNmMjFjMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlmwmJXCfWkdtNMU94t5NLBat5Eo
FBfbxKAYpqQwOAlR5R8YP1x0b+vQ0edOqNBB1PNG6rrO94NJdWqVfO4foC6qN5c3
AMp0P8cMgyxlPxtWkYgs4VyS8t3Tc71IZoxPpQRwoqOeeZnysA3YWvc7QdFuBsbh
sHKImAkV8zm6URsUPeZkLZBfTxxWCh3s9O2pe9a5Hqfp5GbqLZmpP2teShyPwSls
06hXotmoM+/8KNJlZgGRkMfcCLDMdL0W4Pwcf4VWBgLnyZalIByoocaWegIzC+wm
tbgvR5zbvG3M3jMdhYMVOUMvuUgG4IO3c3Pfz2QYIJ0y2WVVT7Y7LQO7UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUW7irVjH1tOUHE1rVagZk/IcLpMB8GA1UdIwQY
MBaAFIXDUl1othEWVk4W4d1OVssDXJyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ZmJlYzEtZWJkMi00MWJhLTgzZDkt
Njk0ZGJmYWRkYjhmLzEvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85ZmJlYzEtZWJkMi00MWJhLTgzZDktNjk0ZGJmYWRkYjhm
LzEvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABizFsUHv
Mz6RgT/h6OKkAmfOT+ZBJk0R/WygBVy9Ml+ZTQ6mKcPHLDZY9rKDka4MUDYVZbx+
gPwbE1CoE2i58YoF8ud+Xwj/1COa8uIPnRhmU7mDEAMKvzMCTELZzDkTChUIFw0E
v/HySUWWuUGVuahoFfuGPY7aoTM7U9TbH8YftREwKUVi6mCZjCCwxQa6BJhnVBI8
YBC1ejSxtQ1Cs1y9sqd7iBLMqQwCRiOfhMVnK3F9RPJkYszIbEKgcVqRAHfJ72gz
Iu2SxmeHN6ZlRXoNcomMYa26lC8W/u41rlJYzwrpp7r+7+TXMc4F65SaP0Azbx08
30ytduslk4VwWw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:28 2025 by rpki-client on console-fra.rpki-client.org