Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: Zeb2L5Maf8J2yM1Of/4EiDSD3QTtEl3Z/RRgr8IZDPg=
Subject key identifier: CD:23:3B:66:E7:F6:F8:B3:33:BD:C9:99:A4:C8:BE:A6:C5:13:B2:8F
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 0194BABB3CA1685A8373B8544DFEA52EE6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 0DF3
Signing time: Fri 31 Jan 2025 05:00:20 +0000
Manifest this update: Fri 31 Jan 2025 05:00:20 +0000
Manifest next update: Sat 01 Feb 2025 05:00:20 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: bW2n7BHQp6RPstDthXzGnCQvssOPxsLuKxUcWrYLJ/U=)
2: wvWJOusH9NjJmboQYN_96qUtjQA.roa (hash: lhwOpS83eW02+y1JcgzOi5Azi+mkqj4nFLbrmvvJkxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:3c:a1:68:5a:83:73:b8:54:4d:fe:a5:2e:e6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Jan 31 05:00:20 2025 GMT
Not After : Feb 1 05:00:20 2025 GMT
Subject: CN=cd233b66e7f6f8b333bdc999a4c8bea6c513b28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:53:2f:64:fa:87:2d:85:1a:6c:db:9b:1a:
18:dc:5f:92:ef:60:8b:d1:fe:1a:be:1f:40:24:69:
eb:3e:6c:84:97:f8:56:7f:c5:bb:55:11:da:d9:7e:
ad:0f:43:59:72:43:bc:1d:d7:5e:bf:7b:bc:05:0a:
5e:b1:13:75:1e:3a:98:1e:bf:80:89:64:66:f7:8a:
ce:28:24:0b:08:fa:6f:8c:a5:38:ad:7d:b7:5b:ba:
33:8a:79:fe:07:6d:bc:c8:92:bb:93:dd:56:a5:d9:
17:3c:dc:c2:fd:31:96:78:4e:93:ff:7c:e6:a2:26:
e4:1e:f1:f9:53:3b:4e:a8:91:53:83:f8:fe:f7:1a:
6b:4d:15:d4:ff:76:e6:99:45:d0:a9:30:6e:ce:0b:
6a:f7:fd:a1:ec:03:20:ec:02:19:19:a4:42:86:61:
62:d2:fc:83:bf:5b:f2:bf:57:d7:48:9f:f2:bb:a4:
1d:14:91:9c:c4:3d:50:a7:13:17:19:d1:59:04:0a:
83:00:81:8f:71:d6:af:bd:77:2e:88:d8:e2:2f:50:
b9:72:66:7f:5c:56:55:2f:77:ae:8b:46:4f:79:87:
2a:1e:d0:e3:55:8a:5f:b3:54:82:64:fc:3e:65:03:
5a:bc:2d:de:a7:82:0d:96:a7:a9:18:68:8c:d4:0d:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:23:3B:66:E7:F6:F8:B3:33:BD:C9:99:A4:C8:BE:A6:C5:13:B2:8F
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f4:79:82:27:25:55:08:b6:21:cb:93:db:6a:3d:88:66:33:
11:a6:2f:12:05:86:37:63:c9:50:b3:6b:41:01:65:82:3b:c0:
66:dd:07:66:76:8e:e9:89:41:0e:db:e3:9d:06:63:0a:57:ea:
c7:69:f8:4d:12:00:1f:8c:bd:b3:8b:86:f5:8f:df:58:2d:59:
8b:bb:c9:ad:4c:b1:3f:e3:e3:cf:c4:ca:9d:39:2c:86:c5:ad:
ea:91:a1:dd:9a:d3:f5:56:49:ed:1d:f2:cd:4f:ac:90:d1:4f:
13:33:f0:8e:51:f7:79:77:f1:20:9e:1d:c7:36:3e:4f:4f:70:
01:f3:58:34:7e:c6:d4:f0:45:ba:b2:8c:c3:85:01:db:2f:1f:
14:ee:88:fd:36:d4:2d:65:fb:c1:63:00:a5:00:59:7c:d6:3e:
43:91:4b:ee:2f:4f:fa:e5:4c:fb:b1:24:8e:4f:34:49:97:84:
a6:4b:9d:7c:96:79:02:15:e7:e0:db:fd:6f:f7:fa:db:06:f2:
e2:17:06:fa:60:1f:70:16:2e:0c:2e:42:cd:26:20:4e:86:8f:
8a:c1:55:75:97:d4:40:fa:ea:8e:8d:cf:19:70:d8:48:dc:5b:
49:9c:15:93:70:be:9e:cf:6b:91:52:bd:58:84:d5:12:61:cc:
d9:7d:1f:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uzyhaFqDc7hUTf6lLubxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDAzZTcxZWY4YzNkOTczY2U3NmQ0MjA0MmY3ZGZhMTg5
MTY4OGIwHhcNMjUwMTMxMDUwMDIwWhcNMjUwMjAxMDUwMDIwWjAzMTEwLwYDVQQD
EyhjZDIzM2I2NmU3ZjZmOGIzMzNiZGM5OTlhNGM4YmVhNmM1MTNiMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKdTL2T6hy2FGmzbmxoY3F+S72CL
0f4avh9AJGnrPmyEl/hWf8W7VRHa2X6tD0NZckO8Hddev3u8BQpesRN1HjqYHr+A
iWRm94rOKCQLCPpvjKU4rX23W7ozinn+B228yJK7k91WpdkXPNzC/TGWeE6T/3zm
oibkHvH5UztOqJFTg/j+9xprTRXU/3bmmUXQqTBuzgtq9/2h7AMg7AIZGaRChmFi
0vyDv1vyv1fXSJ/yu6QdFJGcxD1QpxMXGdFZBAqDAIGPcdavvXcuiNjiL1C5cmZ/
XFZVL3eui0ZPeYcqHtDjVYpfs1SCZPw+ZQNavC3ep4INlqepGGiM1A3sQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0jO2bn9vizM73JmaTIvqbFE7KPMB8GA1UdIwQY
MBaAFAtAPnHvjD2XPOdtQgQvffoYkWiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQt
MGM2ODc3N2E0MDE5LzEvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQtMGM2ODc3N2E0MDE5
LzEvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfR5gicl
VQi2IcuT22o9iGYzEaYvEgWGN2PJULNrQQFlgjvAZt0HZnaO6YlBDtvjnQZjClfq
x2n4TRIAH4y9s4uG9Y/fWC1Zi7vJrUyxP+Pjz8TKnTkshsWt6pGh3ZrT9VZJ7R3y
zU+skNFPEzPwjlH3eXfxIJ4dxzY+T09wAfNYNH7G1PBFurKMw4UB2y8fFO6I/TbU
LWX7wWMApQBZfNY+Q5FL7i9P+uVM+7Ekjk80SZeEpkudfJZ5AhXn4Nv9b/f62wby
4hcG+mAfcBYuDC5CzSYgToaPisFVdZfUQPrqjo3PGXDYSNxbSZwVk3C+ns9rkVK9
WITVEmHM2X0frA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:13 2025 by rpki-client on console-fra.rpki-client.org