Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
File: 0aiWnX4yy_knZkstxDa5bnFJpis.mft (raw, json)
Hash identifier: KhJv/CXAFltAng7YkHlVk9Her2ZSbHlEM6ucqmiInRA=
Subject key identifier: 5C:36:15:32:5B:7D:86:8C:71:60:AD:F2:6B:11:61:1E:A1:03:C8:DF
Authority key identifier: D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
Certificate issuer: /CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Certificate serial: 0194BABB38A5EA9B0EE8640D872A4EC76D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
Manifest number: 0D60
Signing time: Fri 31 Jan 2025 05:00:19 +0000
Manifest this update: Fri 31 Jan 2025 05:00:19 +0000
Manifest next update: Sat 01 Feb 2025 05:00:19 +0000
Files and hashes: 1: 0aiWnX4yy_knZkstxDa5bnFJpis.crl (hash: aMwG8pdJyVMm0DFqqR1N+SsaCDaOy+AmadrSR9jEJts=)
2: p1fyn5poKGi3v6udklaZLK6DaPs.roa (hash: ksuBLRSUua1zFmd4JmcnhcAsP8MWyD8OR/dcK6d/pkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:38:a5:ea:9b:0e:e8:64:0d:87:2a:4e:c7:6d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Validity
Not Before: Jan 31 05:00:19 2025 GMT
Not After : Feb 1 05:00:19 2025 GMT
Subject: CN=5c3615325b7d868c7160adf26b11611ea103c8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:8a:03:3e:3e:d7:51:f4:7e:e6:e0:21:f6:
c1:bf:7a:37:c1:62:6c:e6:ec:09:6b:4c:94:c4:18:
dd:18:9a:4b:a1:28:65:6b:39:8d:a3:4e:1f:70:6b:
07:4f:cc:6f:40:2c:a2:1a:ae:ac:27:69:ac:3c:d0:
fb:73:af:95:3b:b3:b3:7b:21:17:0c:19:f6:09:73:
95:04:a7:d9:63:35:1e:72:54:a5:ca:4f:1f:fa:f9:
58:f1:89:a6:ef:f0:61:d4:08:fc:69:a0:59:74:aa:
1d:26:6b:6d:3f:b9:00:6e:86:fe:0d:56:66:f4:99:
d1:0f:14:25:1e:92:93:cf:a7:0c:26:85:4e:28:65:
3a:30:e8:11:8c:08:dc:33:5b:4c:f9:9f:0c:48:d6:
98:f1:c2:87:7f:e5:8d:b2:96:72:c1:22:8f:ee:2f:
9c:86:6a:25:02:e4:76:b1:79:1f:ea:23:e9:6c:43:
e2:2d:6f:6e:fc:cb:16:22:2e:72:1d:5e:87:36:d6:
96:31:b0:da:c0:e6:41:10:ae:62:94:f3:ae:aa:35:
eb:40:d8:40:2e:e5:2b:fa:22:95:4f:0b:00:63:8d:
69:66:ad:aa:c6:59:3c:8f:27:13:08:aa:ab:6a:9c:
7a:d0:57:fe:07:e1:a0:01:a1:6e:90:c0:f8:1c:36:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:36:15:32:5B:7D:86:8C:71:60:AD:F2:6B:11:61:1E:A1:03:C8:DF
X509v3 Authority Key Identifier:
keyid:D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:76:ad:6e:46:67:bb:6d:2c:e8:95:66:10:b3:ef:a7:7a:19:
45:ae:0d:f4:0c:a9:94:07:65:99:d7:0d:e2:c8:39:4b:a4:b6:
04:79:c3:83:9d:d8:a7:98:c6:10:c3:cf:07:23:6d:7b:c7:88:
ab:11:23:de:6e:47:01:46:4b:71:ef:3e:89:08:6a:96:68:2a:
13:1c:75:5c:2e:a3:c2:0f:88:5e:3b:5a:9d:5f:24:9a:2e:9a:
b5:04:56:71:a3:02:f0:3a:04:93:86:54:2f:cd:bf:3b:29:1c:
cf:bb:8c:a6:5d:28:77:5b:ee:b7:45:d0:f1:77:9c:10:a8:38:
51:b0:d0:14:3e:a2:16:61:34:c1:24:d0:95:eb:5d:a3:78:0e:
74:27:28:dd:9d:23:7c:5b:56:a7:70:d0:12:fa:74:3e:62:4d:
b7:2e:bf:50:e1:cb:3d:7b:20:01:51:a7:65:18:cc:29:58:89:
04:94:4b:fd:39:58:e6:4d:47:78:8c:30:b7:7c:b1:c7:6f:6e:
95:17:5b:b8:75:1d:18:35:1a:0d:92:48:57:e4:5f:e9:8f:a7:
de:f5:07:04:7b:22:48:b5:fc:84:0a:4a:3c:75:b6:0e:43:21:
bf:2f:0b:42:27:35:b4:75:6a:d3:60:30:10:50:1c:b2:97:70:
ea:f4:41:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uzil6psO6GQNhypOx22QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYTg5NjlkN2UzMmNiZjkyNzY2NGIyZGM0MzZiOTZlNzE0
OWE2MmIwHhcNMjUwMTMxMDUwMDE5WhcNMjUwMjAxMDUwMDE5WjAzMTEwLwYDVQQD
Eyg1YzM2MTUzMjViN2Q4NjhjNzE2MGFkZjI2YjExNjExZWExMDNjOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0mKAz4+11H0fubgIfbBv3o3wWJs
5uwJa0yUxBjdGJpLoShlazmNo04fcGsHT8xvQCyiGq6sJ2msPND7c6+VO7OzeyEX
DBn2CXOVBKfZYzUeclSlyk8f+vlY8Ymm7/Bh1Aj8aaBZdKodJmttP7kAbob+DVZm
9JnRDxQlHpKTz6cMJoVOKGU6MOgRjAjcM1tM+Z8MSNaY8cKHf+WNspZywSKP7i+c
hmolAuR2sXkf6iPpbEPiLW9u/MsWIi5yHV6HNtaWMbDawOZBEK5ilPOuqjXrQNhA
LuUr+iKVTwsAY41pZq2qxlk8jycTCKqrapx60Ff+B+GgAaFukMD4HDZW3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw2FTJbfYaMcWCt8msRYR6hA8jfMB8GA1UdIwQY
MBaAFNGolp1+Msv5J2ZLLcQ2uW5xSaYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGFpV25YNHl5X2tuWmtzdHhEYTVibkZKcGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yNzI5NGUtYjllNy00NjYwLTkzMmQt
MjEwNDhhNzM0YTQ2LzEvMGFpV25YNHl5X2tuWmtzdHhEYTVibkZKcGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yNzI5NGUtYjllNy00NjYwLTkzMmQtMjEwNDhhNzM0YTQ2
LzEvMGFpV25YNHl5X2tuWmtzdHhEYTVibkZKcGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3atbkZn
u20s6JVmELPvp3oZRa4N9AyplAdlmdcN4sg5S6S2BHnDg53Yp5jGEMPPByNte8eI
qxEj3m5HAUZLce8+iQhqlmgqExx1XC6jwg+IXjtanV8kmi6atQRWcaMC8DoEk4ZU
L82/Oykcz7uMpl0od1vut0XQ8XecEKg4UbDQFD6iFmE0wSTQletdo3gOdCco3Z0j
fFtWp3DQEvp0PmJNty6/UOHLPXsgAVGnZRjMKViJBJRL/TlY5k1HeIwwt3yxx29u
lRdbuHUdGDUaDZJIV+Rf6Y+n3vUHBHsiSLX8hApKPHW2DkMhvy8LQic1tHVq02Aw
EFAcspdw6vRB8Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:49 2025 by rpki-client on console-fra.rpki-client.org