Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
File: 0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft (raw, json)
Hash identifier: 978RA4usJbxwxaz0r0ZJLOn9+skGmT2gZj++xvsO1/g=
Subject key identifier: 15:A1:08:CB:88:99:18:21:EE:E6:F2:E4:58:DD:77:19:D9:76:AE:38
Authority key identifier: D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
Certificate issuer: /CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Certificate serial: 0194BA842306E5BCE7A050FFE5BE698A2418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 04:00:09 +0000
Manifest this update: Fri 31 Jan 2025 04:00:09 +0000
Manifest next update: Sat 01 Feb 2025 04:00:09 +0000
Files and hashes: 1: 0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl (hash: R8Ae40hHHLK8uLrgGsd/OC+aIT8mbKROtpWAdIxxlBs=)
2: KzisFaAGCo_M29Hpg-XLavrmucI.roa (hash: wKhDmEmJvmyWEhFCmOYqNzdMcRmXiu+WrBZbcpRXXA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:23:06:e5:bc:e7:a0:50:ff:e5:be:69:8a:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Validity
Not Before: Jan 31 04:00:09 2025 GMT
Not After : Feb 1 04:00:09 2025 GMT
Subject: CN=15a108cb88991821eee6f2e458dd7719d976ae38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:a5:58:44:00:d5:18:67:e6:ba:9e:3e:d5:
55:79:70:1c:d2:c9:41:b2:c2:7c:6a:ad:97:b8:86:
e1:7d:08:e3:ea:42:21:fd:de:79:48:10:c5:47:57:
b2:a4:dc:87:2c:d0:e4:8a:58:4e:f5:17:7e:ff:c2:
44:d3:cc:98:61:ff:2f:80:8b:ba:dc:e2:01:8d:ea:
da:7a:0f:91:3a:68:81:85:6b:73:7c:ee:0e:43:df:
97:94:33:71:1a:7f:f5:a2:58:fb:5a:1c:29:dc:84:
5d:11:46:2a:a0:8d:bd:41:bc:5c:1f:0c:52:2b:dc:
67:41:93:c7:c8:29:52:4e:3d:ba:ac:de:19:73:13:
77:f5:80:9b:20:9d:8c:be:a7:07:90:6d:0a:25:f9:
9e:12:5a:03:e0:c2:6e:7c:20:22:82:c7:70:0b:ae:
a6:ba:c7:f5:9e:b4:4c:39:51:e4:41:01:64:86:3a:
1a:11:a2:5d:22:a3:c6:4a:94:d8:aa:b9:29:0c:d1:
b3:bd:5b:d0:8b:a9:58:15:e3:3b:77:cb:31:48:c2:
c5:63:a8:a8:74:64:dc:42:ce:65:34:53:40:0d:90:
06:5b:f8:57:b6:fd:5c:64:50:44:bc:53:06:34:f5:
9c:33:98:c0:f0:b1:4d:22:d6:3b:a5:99:f1:9b:5a:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A1:08:CB:88:99:18:21:EE:E6:F2:E4:58:DD:77:19:D9:76:AE:38
X509v3 Authority Key Identifier:
keyid:D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:89:23:70:57:7c:0b:c6:78:38:3e:b7:23:73:69:00:11:ea:
16:da:f7:9c:5b:71:ec:69:d2:4b:27:12:dd:4b:65:ab:22:d4:
2d:70:13:b1:ac:36:51:a6:08:d5:65:2a:9e:19:c8:d4:b2:1c:
49:42:fc:6f:a9:e7:22:61:0b:27:25:c3:eb:10:93:20:6a:57:
58:60:8c:61:bb:1d:62:52:27:b1:ff:cb:f0:28:06:a0:99:30:
b7:2f:5d:fb:ec:61:1e:9d:e6:1b:ed:51:c8:74:97:73:2a:77:
83:6f:48:8f:39:7f:0b:3e:29:4e:a6:3e:83:f4:21:e4:6c:f7:
dd:f6:4d:aa:25:bd:a3:11:31:05:45:28:fe:85:7c:0b:f8:f9:
19:f9:8b:ed:27:2b:6e:8e:5e:65:ed:31:79:47:0d:e3:0b:b9:
86:32:83:e4:d9:f1:b0:21:ca:6c:ea:6a:79:49:4e:66:a9:7a:
a2:08:b2:57:2b:77:56:6f:40:47:08:06:e8:3e:89:7b:d3:ec:
a7:dd:2a:18:19:4e:8a:1d:0b:24:5d:f3:52:5a:c4:bb:fd:84:
fa:de:40:6d:73:45:ac:bc:a2:7c:c3:c9:fb:d4:91:0a:a3:69:
f0:31:1e:d1:49:47:d8:0e:c8:ea:5f:e4:e2:c5:40:75:54:03:
2b:3a:73:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hCMG5bznoFD/5b5piiQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRiMDhlMTMzOGE1NzlhZDM3ODk1MzVmYTczYTVlNTQ1
MTFmZjEwHhcNMjUwMTMxMDQwMDA5WhcNMjUwMjAxMDQwMDA5WjAzMTEwLwYDVQQD
EygxNWExMDhjYjg4OTkxODIxZWVlNmYyZTQ1OGRkNzcxOWQ5NzZhZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLKlWEQA1Rhn5rqePtVVeXAc0slB
ssJ8aq2XuIbhfQjj6kIh/d55SBDFR1eypNyHLNDkilhO9Rd+/8JE08yYYf8vgIu6
3OIBjeraeg+ROmiBhWtzfO4OQ9+XlDNxGn/1olj7Whwp3IRdEUYqoI29QbxcHwxS
K9xnQZPHyClSTj26rN4ZcxN39YCbIJ2MvqcHkG0KJfmeEloD4MJufCAigsdwC66m
usf1nrRMOVHkQQFkhjoaEaJdIqPGSpTYqrkpDNGzvVvQi6lYFeM7d8sxSMLFY6io
dGTcQs5lNFNADZAGW/hXtv1cZFBEvFMGNPWcM5jA8LFNItY7pZnxm1qUVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWhCMuImRgh7uby5FjddxnZdq44MB8GA1UdIwQY
MBaAFNCNsI4TOKV5rTeJU1+nOl5UUR/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkyd2poTTRwWG10TjRsVFg2YzZYbFJSSF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yYjJjYjMtY2NiNi00MWUwLTg5YmMt
MWI3NjA0NTFkYWM4LzEvMEkyd2poTTRwWG10TjRsVFg2YzZYbFJSSF9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yYjJjYjMtY2NiNi00MWUwLTg5YmMtMWI3NjA0NTFkYWM4
LzEvMEkyd2poTTRwWG10TjRsVFg2YzZYbFJSSF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIkjcFd8
C8Z4OD63I3NpABHqFtr3nFtx7GnSSycS3UtlqyLULXATsaw2UaYI1WUqnhnI1LIc
SUL8b6nnImELJyXD6xCTIGpXWGCMYbsdYlInsf/L8CgGoJkwty9d++xhHp3mG+1R
yHSXcyp3g29Ijzl/Cz4pTqY+g/Qh5Gz33fZNqiW9oxExBUUo/oV8C/j5GfmL7Scr
bo5eZe0xeUcN4wu5hjKD5NnxsCHKbOpqeUlOZql6ogiyVyt3Vm9ARwgG6D6Je9Ps
p90qGBlOih0LJF3zUlrEu/2E+t5AbXNFrLyifMPJ+9SRCqNp8DEe0UlH2A7I6l/k
4sVAdVQDKzpz0A==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:49 2025 by rpki-client on console-fra.rpki-client.org