Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: 4fyPZAPd2EoAjrUmeYgEq3cnNaHn4w8G3F3fmTrinMg=
Subject key identifier: DD:85:C0:68:61:D0:08:7F:50:F6:F0:B6:AA:61:15:4F:F4:7F:26:F0
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 0194BAF246D91D1C93BF8AD5625D2BF4CB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 0581
Signing time: Fri 31 Jan 2025 06:00:27 +0000
Manifest this update: Fri 31 Jan 2025 06:00:27 +0000
Manifest next update: Sat 01 Feb 2025 06:00:27 +0000
Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=)
2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: HQl8di/quKFYxM7qfG2t7W75gudonvZgInOYnevVzHs=)
3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=)
4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:46:d9:1d:1c:93:bf:8a:d5:62:5d:2b:f4:cb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Jan 31 06:00:27 2025 GMT
Not After : Feb 1 06:00:27 2025 GMT
Subject: CN=dd85c06861d0087f50f6f0b6aa61154ff47f26f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:1e:f5:eb:77:b2:87:f9:e0:c3:06:a8:f5:
23:e4:bd:b1:06:04:8d:12:d2:bd:29:67:d5:99:9c:
08:6d:1b:3f:d8:54:86:fe:54:ba:73:fc:64:9c:c3:
db:1b:c0:c4:de:e8:a0:bb:01:7c:91:e1:c9:c9:52:
2e:6a:53:b1:d8:15:19:64:a2:51:c5:75:7d:92:5c:
96:8d:b8:66:a5:b6:2b:ad:cd:8f:e7:40:bf:e8:b1:
9a:b4:b9:7a:75:0b:e0:69:b8:c4:bf:4c:b6:9b:a6:
29:e5:79:6a:fd:d5:05:6a:92:4a:c7:ba:58:08:90:
1a:b5:dd:7f:97:11:93:17:af:b2:de:ac:f4:1c:06:
08:1e:2b:95:ed:3e:7a:b5:dd:c6:81:07:9e:59:dd:
85:d8:57:7b:7b:01:5d:38:13:ba:a4:1d:b1:b8:44:
8d:cc:b5:14:3e:ad:17:23:d1:af:da:63:39:4e:71:
cb:2b:69:1e:aa:96:73:84:bd:2c:cc:09:f3:08:3f:
f0:e7:65:c4:86:5f:9f:46:32:0a:06:6e:28:d6:9d:
32:39:4a:93:25:fb:a1:63:06:e5:b7:cf:b2:08:f8:
50:b8:db:db:84:83:61:9f:f0:2c:94:40:7e:79:10:
4d:52:74:ec:29:0f:6c:22:d2:af:07:e6:9f:5c:3b:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:85:C0:68:61:D0:08:7F:50:F6:F0:B6:AA:61:15:4F:F4:7F:26:F0
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:be:22:bb:a9:1b:68:89:c2:3d:b4:36:55:6b:3b:05:47:60:
e5:93:62:15:6c:b0:17:33:22:2a:27:c2:7d:e3:b8:4d:e6:af:
b3:d6:72:e5:09:e0:31:ff:0d:d1:ee:5c:37:74:a2:71:19:a6:
2e:2e:b9:56:66:83:50:bd:83:c7:f8:88:a5:d4:05:dd:08:7b:
ac:7e:16:45:c8:7b:ea:10:e5:8b:2d:c8:2a:1f:13:82:37:ed:
2f:36:be:19:ad:a2:ed:29:ea:2b:dc:fd:b7:18:19:6c:ab:40:
b0:f5:06:d4:ec:fa:e3:2d:94:0f:e0:3c:17:45:fd:9f:de:ef:
ee:20:5b:ea:6b:b8:b1:63:b8:5d:0e:1f:27:70:96:bf:17:bb:
10:04:2b:c2:b1:c0:ad:f9:64:a4:68:32:a2:98:19:d4:6d:0f:
17:4a:f4:2b:6d:63:6f:5e:07:be:04:c2:67:65:50:63:d3:18:
80:a8:cc:42:fa:ee:d0:1d:95:f1:45:32:34:23:4a:82:69:f1:
97:3a:6a:bc:b7:93:8c:54:ac:84:61:6c:55:70:27:76:94:f8:
b2:17:49:27:5e:19:3b:80:3d:c1:c5:28:1a:28:06:34:47:ef:
82:12:f0:09:ae:b1:91:d3:ec:9a:69:c9:a3:74:f2:29:2f:fb:
d8:4a:77:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68kbZHRyTv4rVYl0r9MuWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OGNjNTJhMDcwN2NjMzQwYWM5YzdmNmU5MDI4YjY0Yjcw
MjY3YmMwHhcNMjUwMTMxMDYwMDI3WhcNMjUwMjAxMDYwMDI3WjAzMTEwLwYDVQQD
EyhkZDg1YzA2ODYxZDAwODdmNTBmNmYwYjZhYTYxMTU0ZmY0N2YyNmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7Qe9et3sof54MMGqPUj5L2xBgSN
EtK9KWfVmZwIbRs/2FSG/lS6c/xknMPbG8DE3uiguwF8keHJyVIualOx2BUZZKJR
xXV9klyWjbhmpbYrrc2P50C/6LGatLl6dQvgabjEv0y2m6Yp5Xlq/dUFapJKx7pY
CJAatd1/lxGTF6+y3qz0HAYIHiuV7T56td3GgQeeWd2F2Fd7ewFdOBO6pB2xuESN
zLUUPq0XI9Gv2mM5TnHLK2keqpZzhL0szAnzCD/w52XEhl+fRjIKBm4o1p0yOUqT
JfuhYwblt8+yCPhQuNvbhINhn/AslEB+eRBNUnTsKQ9sItKvB+afXDu5tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2FwGhh0Ah/UPbwtqphFU/0fybwMB8GA1UdIwQY
MBaAFEWMxSoHB8w0CsnH9ukCi2S3Ame8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81YTdkMmYtNTE2OC00NzIwLThjZTAt
NzA0MTQ5NjE5YzQ2LzEvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81YTdkMmYtNTE2OC00NzIwLThjZTAtNzA0MTQ5NjE5YzQ2
LzEvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe74iu6kb
aInCPbQ2VWs7BUdg5ZNiFWywFzMiKifCfeO4Teavs9Zy5QngMf8N0e5cN3SicRmm
Li65VmaDUL2Dx/iIpdQF3Qh7rH4WRch76hDliy3IKh8TgjftLza+Ga2i7SnqK9z9
txgZbKtAsPUG1Oz64y2UD+A8F0X9n97v7iBb6mu4sWO4XQ4fJ3CWvxe7EAQrwrHA
rflkpGgyopgZ1G0PF0r0K21jb14HvgTCZ2VQY9MYgKjMQvru0B2V8UUyNCNKgmnx
lzpqvLeTjFSshGFsVXAndpT4shdJJ14ZO4A9wcUoGigGNEfvghLwCa6xkdPsmmnJ
o3TyKS/72Ep3Qw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:12 2025 by rpki-client on console-fra.rpki-client.org