Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
File: bEU8CR9sDKSwKxxMoXu2XR3haJU.mft (raw, json)
Hash identifier: 4QudzfK87O6m8M8XvxnBKtvPvMLIBI91W4m85xZnz24=
Subject key identifier: 02:B5:DB:8E:DE:76:8E:63:86:75:0F:98:19:11:5F:7A:62:45:F5:3D
Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Certificate issuer: /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Certificate serial: 0194BA846C388B2DFE31A0795EB6FBC51F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 04:00:28 +0000
Manifest this update: Fri 31 Jan 2025 04:00:28 +0000
Manifest next update: Sat 01 Feb 2025 04:00:28 +0000
Files and hashes: 1: NQq8etUndTjVgxrhy44nBmqGCOM.roa (hash: j7zhzvWt94q6NzpdciEQjpp4LDZ9qKJXwX2H3/CEMus=)
2: bEU8CR9sDKSwKxxMoXu2XR3haJU.crl (hash: uLcKnCrQx4nAgbyZ1UjxkmezRZymwVEi3fc4es2N2C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:6c:38:8b:2d:fe:31:a0:79:5e:b6:fb:c5:1f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Validity
Not Before: Jan 31 04:00:28 2025 GMT
Not After : Feb 1 04:00:28 2025 GMT
Subject: CN=02b5db8ede768e6386750f9819115f7a6245f53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:0e:f2:12:76:42:10:d2:bc:77:3c:78:b4:
41:a9:f6:28:e7:24:9f:bf:03:9a:73:8c:56:0b:3f:
37:a0:66:17:d0:7f:97:aa:5b:9b:14:7c:74:d3:a0:
b6:3f:5b:63:3d:d6:58:92:70:96:71:7d:2f:09:0d:
5b:c2:69:fb:e4:97:94:0a:c5:b1:a5:f1:cd:d5:ab:
3a:e1:1e:12:82:92:11:2f:57:75:32:34:df:ab:cd:
47:92:82:35:d6:ea:25:43:87:95:b2:ba:bc:75:bf:
4f:68:6a:7a:a1:db:80:53:b9:5a:1c:71:1a:17:3a:
0f:b5:82:c8:d5:a5:34:12:a3:b6:62:1b:56:7b:33:
8f:23:34:2c:84:1a:cd:b5:0c:aa:be:f0:78:b3:9b:
b0:d3:d3:24:45:3c:62:32:e0:01:d7:95:52:d8:ff:
05:12:50:78:15:1b:aa:b4:fe:fb:58:d4:7a:63:a7:
ed:79:db:f7:79:4a:7a:b2:a4:2a:0e:46:b7:c5:cc:
11:9e:72:de:d9:5e:c9:84:60:38:73:88:02:ab:f6:
02:2b:c0:71:2f:94:12:36:7c:d3:4e:4e:54:be:a5:
09:ab:47:65:58:71:2c:59:de:09:b3:bd:ea:f8:4b:
a5:db:fd:e3:39:54:6f:a1:64:43:a9:61:c6:5f:6a:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B5:DB:8E:DE:76:8E:63:86:75:0F:98:19:11:5F:7A:62:45:F5:3D
X509v3 Authority Key Identifier:
keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8d:54:6c:5a:03:77:0a:e4:5e:a3:8e:39:9c:22:37:cc:c8:
3c:de:ad:9a:aa:6a:af:18:3c:80:8d:ce:7e:d5:3e:ad:61:8c:
f6:61:4b:b0:f3:67:be:88:96:4e:33:01:fd:63:cd:39:07:ef:
d0:5d:2d:81:8f:de:7b:28:b5:89:0b:d1:18:aa:2b:eb:2a:63:
45:b3:ee:59:87:6a:1e:19:8f:a5:5c:6d:54:fd:b2:6d:da:3c:
d6:2b:a6:39:17:3e:73:3a:bd:b8:0c:1a:2e:1e:78:3b:77:22:
e9:d2:8d:f4:78:b4:13:20:f8:3a:c1:b7:44:00:b9:84:53:7e:
6b:92:3d:cf:d4:d9:37:18:f4:54:99:5e:72:3e:63:30:b0:d8:
c7:4b:25:c0:65:d7:97:48:4e:8d:ca:9b:74:10:a2:a1:f1:72:
a6:37:be:40:b7:ba:d6:20:3f:5e:33:b0:e6:dc:fd:e6:23:ca:
5e:7c:44:ac:a1:11:53:57:ae:23:95:f1:29:34:ed:7c:9a:7e:
21:54:05:dc:f5:ad:6f:a4:5e:79:11:51:01:5f:f4:04:32:94:
ac:4e:82:fb:a5:b0:53:a8:af:8d:07:54:d3:7a:02:9e:f4:92:
b8:c1:c3:6a:5a:a2:88:2a:1f:ab:4a:58:f8:fc:c4:07:be:a0:
2d:98:66:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hGw4iy3+MaB5Xrb7xR9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNDUzYzA5MWY2YzBjYTRiMDJiMWM0Y2ExN2JiNjVkMWRl
MTY4OTUwHhcNMjUwMTMxMDQwMDI4WhcNMjUwMjAxMDQwMDI4WjAzMTEwLwYDVQQD
EygwMmI1ZGI4ZWRlNzY4ZTYzODY3NTBmOTgxOTExNWY3YTYyNDVmNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDEO8hJ2QhDSvHc8eLRBqfYo5ySf
vwOac4xWCz83oGYX0H+XqlubFHx006C2P1tjPdZYknCWcX0vCQ1bwmn75JeUCsWx
pfHN1as64R4SgpIRL1d1MjTfq81HkoI11uolQ4eVsrq8db9PaGp6oduAU7laHHEa
FzoPtYLI1aU0EqO2YhtWezOPIzQshBrNtQyqvvB4s5uw09MkRTxiMuAB15VS2P8F
ElB4FRuqtP77WNR6Y6ftedv3eUp6sqQqDka3xcwRnnLe2V7JhGA4c4gCq/YCK8Bx
L5QSNnzTTk5UvqUJq0dlWHEsWd4Js73q+Eul2/3jOVRvoWRDqWHGX2prqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAK1247edo5jhnUPmBkRX3piRfU9MB8GA1UdIwQY
MBaAFGxFPAkfbAyksCscTKF7tl0d4WiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xOThkZjctNzk5Mi00NGRmLWE2Y2Et
YmVjMGU5ZWU0YTI1LzEvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xOThkZjctNzk5Mi00NGRmLWE2Y2EtYmVjMGU5ZWU0YTI1
LzEvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa41UbFoD
dwrkXqOOOZwiN8zIPN6tmqpqrxg8gI3OftU+rWGM9mFLsPNnvoiWTjMB/WPNOQfv
0F0tgY/eeyi1iQvRGKor6ypjRbPuWYdqHhmPpVxtVP2ybdo81iumORc+czq9uAwa
Lh54O3ci6dKN9Hi0EyD4OsG3RAC5hFN+a5I9z9TZNxj0VJlecj5jMLDYx0slwGXX
l0hOjcqbdBCiofFypje+QLe61iA/XjOw5tz95iPKXnxErKERU1euI5XxKTTtfJp+
IVQF3PWtb6ReeRFRAV/0BDKUrE6C+6WwU6ivjQdU03oCnvSSuMHDalqiiCofq0pY
+PzEB76gLZhmBA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:48 2025 by rpki-client on console-fra.rpki-client.org