Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: tJGp3JU4kSfNVdsZWCBrC7J5wrFJ1uo2zEw53/CSwos=
Subject key identifier: 6F:9B:67:F2:1B:94:BD:0B:1F:83:3E:70:28:F0:A7:FE:4B:A5:48:91
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 0194BAF2675DE0C04E11E33B8AF0DDFCCEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 4C
Signing time: Fri 31 Jan 2025 06:00:35 +0000
Manifest this update: Fri 31 Jan 2025 06:00:35 +0000
Manifest next update: Sat 01 Feb 2025 06:00:35 +0000
Files and hashes: 1: K09nrG0KqTizFLHUaMNyxM0z2ro.roa (hash: cExkaCJNm1PmYW065hiBGP/O4kugBu6fZ2Nczp2MsYg=)
2: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: eJ8jQoxKCIpyRxfcuBmbRVkVgzqeh5CjWlZM+wSjQOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:67:5d:e0:c0:4e:11:e3:3b:8a:f0:dd:fc:ce:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Jan 31 06:00:35 2025 GMT
Not After : Feb 1 06:00:35 2025 GMT
Subject: CN=6f9b67f21b94bd0b1f833e7028f0a7fe4ba54891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:85:1b:00:2f:c8:20:9e:38:53:5d:44:96:
2e:db:b7:e2:ae:36:f0:73:99:0f:53:ef:02:3c:7a:
c6:23:31:a7:99:bc:66:0a:69:3c:5f:03:07:1e:db:
c9:c4:4f:c6:b5:19:1a:7c:45:9c:7b:06:21:69:d3:
d1:e7:1e:95:d4:75:8f:ec:04:01:7f:8f:8e:f8:01:
a6:96:7a:b0:59:70:58:9b:88:e3:c2:3b:de:ff:dd:
43:6c:be:4e:a5:4b:f8:65:b9:85:43:b4:1e:c1:f1:
58:1a:36:c0:a2:54:86:47:9f:d6:11:1f:24:34:a7:
fd:bc:50:98:53:77:40:ed:16:4f:66:5f:87:7a:5f:
b0:96:ae:a5:0a:e2:cd:4a:de:00:7f:74:97:be:8c:
3a:2d:2d:07:7a:9e:5c:88:24:95:90:2c:98:7d:c6:
45:b5:f3:85:20:6c:9c:9c:e7:64:18:08:b7:76:15:
64:15:cf:07:b8:0c:c4:40:2f:7a:57:95:38:50:cc:
2b:10:a4:ec:2a:e5:bc:ec:98:51:7a:27:d4:ad:6a:
fc:73:fb:69:72:cc:41:c3:1c:b2:13:7e:d4:2d:74:
49:a9:06:e8:bb:3f:ec:dc:0a:ed:7c:94:39:4d:3d:
71:64:83:43:05:f6:f5:68:2b:10:80:4d:98:cd:fa:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9B:67:F2:1B:94:BD:0B:1F:83:3E:70:28:F0:A7:FE:4B:A5:48:91
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:76:ec:83:56:e4:69:14:83:70:0f:3a:05:d0:45:14:4c:34:
8c:7b:66:68:3f:e9:35:75:b9:b4:98:ba:0a:1d:c5:ca:8e:d8:
ad:7c:0f:00:08:a9:9d:7d:25:10:9c:e6:f8:f5:e5:67:c4:61:
51:1c:42:ab:b0:5a:dd:25:90:89:0a:3b:78:df:9a:a2:14:be:
03:9d:5b:54:0e:3e:2b:f3:f9:d6:6e:e9:8a:09:a6:04:98:a6:
45:f7:78:82:6d:68:ba:bc:6c:cf:e7:9b:eb:0a:1c:ca:c3:aa:
cc:01:94:b0:7d:c9:a7:34:0e:42:19:d5:3b:49:43:78:2b:e5:
ef:ff:1e:8b:7f:43:33:c3:4e:75:57:ce:16:e5:07:81:c7:cf:
e1:d4:03:fc:aa:62:57:b6:45:b6:d7:b0:92:64:dd:6c:3c:5d:
84:98:d3:08:6c:53:95:0a:f4:da:bf:4c:0e:7f:db:1f:a4:30:
01:bf:9d:fe:28:1b:ef:49:51:7b:e9:be:01:ac:12:bd:42:ff:
30:af:2d:ad:29:d3:c9:02:bb:d7:49:a1:36:27:47:6c:ef:19:
60:7b:99:3f:cd:43:92:30:25:aa:ac:d8:f8:83:3e:ef:1e:47:
93:5e:82:00:f6:04:40:06:5a:fb:ee:5e:13:a4:29:f3:48:25:
7a:b4:ad:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68mdd4MBOEeM7ivDd/M7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGQ0NzRmOTQ2OTRhODEwNGY1ZTQxM2FiMmI5YzA5NTU5
Yjc5ZjAwHhcNMjUwMTMxMDYwMDM1WhcNMjUwMjAxMDYwMDM1WjAzMTEwLwYDVQQD
Eyg2ZjliNjdmMjFiOTRiZDBiMWY4MzNlNzAyOGYwYTdmZTRiYTU0ODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFuFGwAvyCCeOFNdRJYu27firjbw
c5kPU+8CPHrGIzGnmbxmCmk8XwMHHtvJxE/GtRkafEWcewYhadPR5x6V1HWP7AQB
f4+O+AGmlnqwWXBYm4jjwjve/91DbL5OpUv4ZbmFQ7QewfFYGjbAolSGR5/WER8k
NKf9vFCYU3dA7RZPZl+Hel+wlq6lCuLNSt4Af3SXvow6LS0Hep5ciCSVkCyYfcZF
tfOFIGycnOdkGAi3dhVkFc8HuAzEQC96V5U4UMwrEKTsKuW87JhReifUrWr8c/tp
csxBwxyyE37ULXRJqQbouz/s3ArtfJQ5TT1xZINDBfb1aCsQgE2Yzfql+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+bZ/IblL0LH4M+cCjwp/5LpUiRMB8GA1UdIwQY
MBaAFEdNR0+UaUqBBPXkE6srnAlVm3nwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzkt
MGI2ZjAwMmQxOTc4LzEvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzktMGI2ZjAwMmQxOTc4
LzEvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3bsg1bk
aRSDcA86BdBFFEw0jHtmaD/pNXW5tJi6Ch3Fyo7YrXwPAAipnX0lEJzm+PXlZ8Rh
URxCq7Ba3SWQiQo7eN+aohS+A51bVA4+K/P51m7pigmmBJimRfd4gm1ourxsz+eb
6wocysOqzAGUsH3JpzQOQhnVO0lDeCvl7/8ei39DM8NOdVfOFuUHgcfP4dQD/Kpi
V7ZFttewkmTdbDxdhJjTCGxTlQr02r9MDn/bH6QwAb+d/igb70lRe+m+AawSvUL/
MK8trSnTyQK710mhNidHbO8ZYHuZP81DkjAlqqzY+IM+7x5Hk16CAPYEQAZa++5e
E6Qp80glerStVg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:52 2025 by rpki-client on console-fra.rpki-client.org