Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
File: PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft (raw, json)
Hash identifier: cLHJo1YTZsp10KTxElsEesGCVnb4I2xTCyFoiBKrQ0g=
Subject key identifier: D9:C6:99:E4:50:21:D8:97:13:8A:0F:83:28:D0:F7:72:05:13:F2:F5
Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
Certificate issuer: /CN=3c9f400f884f7030318eb6be74c528485abe4460
Certificate serial: 0194BB5FFA3995E736AC3069FF1E65A38484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
Manifest number: BD
Signing time: Fri 31 Jan 2025 08:00:16 +0000
Manifest this update: Fri 31 Jan 2025 08:00:16 +0000
Manifest next update: Sat 01 Feb 2025 08:00:16 +0000
Files and hashes: 1: 5CyBpeLyifB2AFAXOFh8yVUvCwE.roa (hash: JsDCYkyYiFX4qZJz2FVAXDqsZF5P1tX4kX3+rULf7lU=)
2: PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl (hash: UI7SItE9p2BdZM0fB6Ejmu2Sahn1lY3DOJBdMWLHUPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:fa:39:95:e7:36:ac:30:69:ff:1e:65:a3:84:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460
Validity
Not Before: Jan 31 08:00:16 2025 GMT
Not After : Feb 1 08:00:16 2025 GMT
Subject: CN=d9c699e45021d897138a0f8328d0f7720513f2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f8:5b:8e:f5:da:f1:3a:24:10:ec:9f:b7:f3:
23:49:e3:44:18:5d:bb:6c:e4:3e:7c:e4:f6:65:4f:
f6:3a:1c:22:ea:31:59:7c:3d:bc:2c:31:55:c1:76:
f7:d9:d3:21:18:04:1c:be:37:67:c0:32:80:8d:43:
01:a7:fa:1e:e3:ae:c5:78:4d:4a:e5:b5:9b:0d:92:
2d:6e:2d:13:93:6e:ab:a2:4e:16:60:37:28:85:ce:
e3:a7:b0:c1:18:01:bb:a1:1c:00:57:2d:97:77:a7:
be:2b:23:d2:61:1b:ec:17:9f:c1:5c:cd:ca:1b:dd:
4b:03:b7:42:48:2a:3f:13:73:d5:c6:97:d1:4c:40:
44:6c:86:2d:94:8f:60:5a:83:9d:8b:24:af:79:29:
d7:10:d0:8f:94:c2:da:cc:31:14:6a:9a:16:c5:93:
8a:75:3b:91:58:3f:d1:e0:e6:75:2d:24:06:c6:83:
3d:8e:41:bc:0a:48:d8:6c:6b:e0:a8:97:70:e3:8e:
0c:b2:99:4e:8c:f6:ac:d5:68:e4:2d:67:06:79:e1:
1a:52:a9:b5:ac:f6:69:c5:b5:b0:2e:75:b7:91:c9:
13:c6:2f:36:39:63:e0:16:29:88:98:ca:70:11:04:
1b:17:6d:2d:1a:4c:47:1a:54:80:2b:9c:38:6d:87:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C6:99:E4:50:21:D8:97:13:8A:0F:83:28:D0:F7:72:05:13:F2:F5
X509v3 Authority Key Identifier:
keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9e:f4:d3:e5:88:ef:be:a3:c3:ec:8b:9f:d1:7a:71:68:a7:
06:3d:ce:fc:c5:56:3e:52:ad:98:9b:05:dd:8e:4d:1d:97:41:
5c:61:01:a7:d3:a9:5c:2f:5b:aa:d6:63:a9:2b:ae:30:b1:ed:
a5:09:68:c9:5c:1c:42:c9:90:bb:35:bc:89:8f:4d:5b:2d:da:
9a:63:67:d5:b6:58:51:b6:0e:48:21:79:2f:6d:10:30:58:29:
a5:ce:b0:4f:96:88:6b:4e:b0:56:14:f6:11:42:b0:83:98:3a:
10:6e:cf:a3:a3:32:b1:6f:74:6a:6e:70:62:24:71:c4:91:34:
5e:9f:c7:b5:b0:2e:12:ed:ce:b7:73:3e:38:74:45:61:15:78:
e8:17:ef:b4:d0:ea:6f:33:8f:2b:e8:da:63:42:47:e6:e4:9b:
e0:9f:b9:ac:68:0e:ed:70:a7:74:6f:42:fe:e5:81:db:64:68:
cf:ac:80:86:ec:5e:74:e3:7f:dc:ed:7a:f2:cd:e0:b4:3d:02:
63:0e:fb:a7:e3:a8:22:81:86:10:a4:72:a9:4b:5f:b6:d1:83:
33:f6:d3:eb:e6:a7:f0:18:03:b3:02:f4:76:3b:ff:5e:7a:86:
de:56:71:05:57:23:8c:79:06:0f:1d:49:a0:f9:b8:ad:a6:2b:
17:62:90:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X/o5lec2rDBp/x5lo4SEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOWY0MDBmODg0ZjcwMzAzMThlYjZiZTc0YzUyODQ4NWFi
ZTQ0NjAwHhcNMjUwMTMxMDgwMDE2WhcNMjUwMjAxMDgwMDE2WjAzMTEwLwYDVQQD
EyhkOWM2OTllNDUwMjFkODk3MTM4YTBmODMyOGQwZjc3MjA1MTNmMmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9/hbjvXa8TokEOyft/MjSeNEGF27
bOQ+fOT2ZU/2Ohwi6jFZfD28LDFVwXb32dMhGAQcvjdnwDKAjUMBp/oe467FeE1K
5bWbDZItbi0Tk26rok4WYDcohc7jp7DBGAG7oRwAVy2Xd6e+KyPSYRvsF5/BXM3K
G91LA7dCSCo/E3PVxpfRTEBEbIYtlI9gWoOdiySveSnXENCPlMLazDEUapoWxZOK
dTuRWD/R4OZ1LSQGxoM9jkG8CkjYbGvgqJdw444MsplOjPas1WjkLWcGeeEaUqm1
rPZpxbWwLnW3kckTxi82OWPgFimImMpwEQQbF20tGkxHGlSAK5w4bYdY3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnGmeRQIdiXE4oPgyjQ93IFE/L1MB8GA1UdIwQY
MBaAFDyfQA+IT3AwMY62vnTFKEhavkRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NGFiZDUtMTkxZi00Zjg4LWJkZTEt
Zjg0OGRkYzVhMGIyLzEvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84NGFiZDUtMTkxZi00Zjg4LWJkZTEtZjg0OGRkYzVhMGIy
LzEvUEo5QUQ0aFBjREF4anJhLWRNVW9TRnEtUkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmp700+WI
776jw+yLn9F6cWinBj3O/MVWPlKtmJsF3Y5NHZdBXGEBp9OpXC9bqtZjqSuuMLHt
pQloyVwcQsmQuzW8iY9NWy3ammNn1bZYUbYOSCF5L20QMFgppc6wT5aIa06wVhT2
EUKwg5g6EG7Po6MysW90am5wYiRxxJE0Xp/HtbAuEu3Ot3M+OHRFYRV46BfvtNDq
bzOPK+jaY0JH5uSb4J+5rGgO7XCndG9C/uWB22Roz6yAhuxedON/3O168s3gtD0C
Yw77p+OoIoGGEKRyqUtfttGDM/bT6+an8BgDswL0djv/XnqG3lZxBVcjjHkGDx1J
oPm4raYrF2KQnQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:47 2025 by rpki-client on console-fra.rpki-client.org