Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
File: sHATRrrVXff13IGLu7z7t9sQcKs.mft (raw, json)
Hash identifier: K79VvtFFEoMHL8fUncCQJIY+jtU6H2zCe4O0N/EH8zk=
Subject key identifier: 22:69:1B:81:B0:BF:4A:BA:CF:96:6D:A4:78:3C:B1:3F:0E:C5:EB:2B
Authority key identifier: B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
Certificate issuer: /CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Certificate serial: 0194BC04F7EF7393E98072A7525BF4BCF729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
Manifest number: 05FE
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: 2vj5B04hPRrl36o4PSEreNmSh7Y.roa (hash: IJqTeCNZ6pF/BafJ55wl0YbKPxsnvPNim6xG4D9/f0M=)
2: sHATRrrVXff13IGLu7z7t9sQcKs.crl (hash: HpNrpaNjo5PnxCrRX2FbZRQD8K+Sj+QMhAWrNlta7fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f7:ef:73:93:e9:80:72:a7:52:5b:f4:bc:f7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=22691b81b0bf4abacf966da4783cb13f0ec5eb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:37:81:5d:85:f6:94:ec:17:8d:6c:9b:b3:
77:0a:7c:0c:2b:18:ed:00:94:da:ba:73:4e:ea:cc:
a6:34:b2:2d:2b:3c:2c:05:ea:eb:92:e2:df:c8:5c:
47:d5:14:56:d6:a3:7b:c5:85:4f:14:2f:bd:20:d1:
d0:fc:39:ce:b1:57:60:bf:55:ca:58:e6:cb:63:3d:
37:e1:f6:90:93:3b:ea:49:39:87:79:48:07:eb:40:
fb:fb:f0:09:28:de:31:77:39:db:28:30:50:28:9e:
97:22:2a:c2:29:77:a7:db:9f:5c:60:35:67:56:67:
1e:18:e1:27:f6:77:d1:aa:80:78:21:7b:c2:b4:4c:
7e:6e:a3:12:dd:d0:ca:cb:c7:ab:f1:f2:91:1e:82:
0d:3f:46:6f:53:3c:86:44:c2:54:77:a8:65:f8:25:
5c:0b:57:84:ea:c1:0c:c5:fe:41:59:57:1f:ae:49:
eb:c2:81:74:78:79:28:a2:b0:e6:23:d9:a2:7f:eb:
40:87:51:40:92:de:7d:e2:05:60:bb:e7:13:91:3d:
11:73:0c:69:85:97:ff:85:a1:b2:0e:b1:c7:3e:8d:
1c:7a:33:d9:2f:04:4f:99:49:a3:53:0b:3f:a9:0d:
94:4e:04:07:c2:2a:98:b2:f7:cf:8f:28:af:9c:74:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:69:1B:81:B0:BF:4A:BA:CF:96:6D:A4:78:3C:B1:3F:0E:C5:EB:2B
X509v3 Authority Key Identifier:
keyid:B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:49:3f:81:d1:0e:cd:e4:69:3a:e1:c2:cc:a5:32:cd:7f:ed:
50:ef:fe:da:d2:2a:5b:10:c7:6c:ad:f0:4f:68:df:53:a2:d5:
e3:d5:e6:a3:b1:4a:66:ea:6b:83:6d:de:c0:87:57:60:48:05:
34:a7:71:02:02:ab:91:11:36:a8:b9:8c:42:8f:16:a5:fb:75:
28:7f:c7:2f:a5:6a:69:68:6b:f1:be:7b:15:b6:92:32:95:d2:
de:87:20:01:53:3d:48:0c:3e:93:85:fe:12:98:fc:dc:5d:8f:
3b:04:09:db:e5:7e:45:9f:5a:9e:3d:40:7a:dd:21:2e:2b:69:
d7:d7:ac:e9:ca:fd:d6:e8:77:50:ea:2e:90:f6:4f:73:a4:0f:
0d:7d:94:76:97:7c:e2:57:1b:90:22:2b:50:7c:71:ff:a1:e7:
2a:7f:9c:7a:5e:05:9d:11:1e:a8:11:21:52:6d:f0:56:66:f2:
1e:e2:3a:6c:77:c0:f1:b5:94:68:43:8c:cb:23:89:18:34:b2:
fc:07:ea:91:6d:5e:e5:95:b8:cd:67:33:84:19:71:6a:9c:d8:
ef:70:02:c6:84:f1:8b:bd:e6:6a:e0:77:36:7b:80:2b:dd:98:
10:45:c1:0e:53:49:e4:d1:83:fc:3a:dd:f7:55:24:be:b5:b7:
68:ea:f4:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPfvc5PpgHKnUlv0vPcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNzAxMzQ2YmFkNTVkZjdmNWRjODE4YmJiYmNmYmI3ZGIx
MDcwYWIwHhcNMjUwMTMxMTEwMDI5WhcNMjUwMjAxMTEwMDI5WjAzMTEwLwYDVQQD
EygyMjY5MWI4MWIwYmY0YWJhY2Y5NjZkYTQ3ODNjYjEzZjBlYzVlYjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI83gV2F9pTsF41sm7N3CnwMKxjt
AJTaunNO6symNLItKzwsBerrkuLfyFxH1RRW1qN7xYVPFC+9INHQ/DnOsVdgv1XK
WObLYz034faQkzvqSTmHeUgH60D7+/AJKN4xdznbKDBQKJ6XIirCKXen259cYDVn
VmceGOEn9nfRqoB4IXvCtEx+bqMS3dDKy8er8fKRHoINP0ZvUzyGRMJUd6hl+CVc
C1eE6sEMxf5BWVcfrknrwoF0eHkoorDmI9mif+tAh1FAkt594gVgu+cTkT0Rcwxp
hZf/haGyDrHHPo0cejPZLwRPmUmjUws/qQ2UTgQHwiqYsvfPjyivnHQpJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJpG4Gwv0q6z5ZtpHg8sT8OxesrMB8GA1UdIwQY
MBaAFLBwE0a61V339dyBi7u8+7fbEHCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hBVFJyclZYZmYxM0lHTHU3ejd0OXNRY0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yZjVmMjItNzQzOS00MjA4LThiMzkt
N2QxMWZjZjE3MTIzLzEvc0hBVFJyclZYZmYxM0lHTHU3ejd0OXNRY0tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yZjVmMjItNzQzOS00MjA4LThiMzktN2QxMWZjZjE3MTIz
LzEvc0hBVFJyclZYZmYxM0lHTHU3ejd0OXNRY0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkk/gdEO
zeRpOuHCzKUyzX/tUO/+2tIqWxDHbK3wT2jfU6LV49Xmo7FKZuprg23ewIdXYEgF
NKdxAgKrkRE2qLmMQo8Wpft1KH/HL6VqaWhr8b57FbaSMpXS3ocgAVM9SAw+k4X+
Epj83F2POwQJ2+V+RZ9anj1Aet0hLitp19es6cr91uh3UOoukPZPc6QPDX2Udpd8
4lcbkCIrUHxx/6HnKn+cel4FnREeqBEhUm3wVmbyHuI6bHfA8bWUaEOMyyOJGDSy
/AfqkW1e5ZW4zWczhBlxapzY73ACxoTxi73mauB3NnuAK92YEEXBDlNJ5NGD/Drd
91UkvrW3aOr00A==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:50 2025 by rpki-client on console-fra.rpki-client.org