Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json)
Hash identifier: FsGh+g2lRupKXKaj0sYG/0wwYldspk2O+QWaQUqe8rw=
Subject key identifier: C4:DA:17:42:6E:0F:1D:CB:FB:A3:B7:44:B2:84:58:E7:1C:BE:03:1A
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 0194BB5FF8B2F7D2F4D39A6D843E420E0E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 08:00:16 +0000
Manifest this update: Fri 31 Jan 2025 08:00:16 +0000
Manifest next update: Sat 01 Feb 2025 08:00:16 +0000
Files and hashes: 1: 7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa (hash: xGbT8/8kQTWGMRGlRdu/Jth3qb8PIWWDn9MA5RF+54k=)
2: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: rHeezRp8WZEL5cTsz9X0H6rs71wheT2NnQOa/ui1EtM=)
3: aElB0_w7iL_LUpRU29R2Y75Dhrc.roa (hash: 1LiV/+sY4qGsrVLFK70gELnTzz3VangyIqPY1yxftrc=)
4: hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa (hash: 3RbNRO/4bn+lvyxkoMHSxqNiv9S4Xn+bWprhvyyRHQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f8:b2:f7:d2:f4:d3:9a:6d:84:3e:42:0e:0e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Jan 31 08:00:16 2025 GMT
Not After : Feb 1 08:00:16 2025 GMT
Subject: CN=c4da17426e0f1dcbfba3b744b28458e71cbe031a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:4f:55:99:9a:ea:e3:47:59:5c:fc:8b:08:
2f:1b:de:e7:74:cc:c5:c8:90:b8:d2:64:63:64:7b:
13:96:f0:b1:04:b5:e0:df:59:42:b5:79:a8:e1:24:
42:d8:08:19:58:f5:8b:99:76:dd:41:ff:21:bc:0b:
95:3b:69:5c:0f:97:20:d5:55:37:b9:a2:e2:ae:de:
fe:6d:6f:a9:9f:ea:32:30:5a:77:59:1a:ba:43:e9:
04:6b:1f:12:39:c5:34:ad:12:21:e9:b8:ae:90:9f:
1d:26:1c:dc:78:a1:76:7a:bb:c4:c7:16:f9:44:eb:
df:1e:23:8d:7f:ff:52:bd:e2:aa:62:c5:1d:10:bb:
b8:08:05:14:60:14:f2:b4:b6:7c:90:a3:da:19:c0:
3d:c9:8c:a7:bb:af:c9:0d:66:0f:84:7d:99:21:b2:
b6:47:c8:dc:7d:53:c6:c0:45:71:30:16:45:ec:05:
b3:56:57:a9:70:fb:0d:3d:ce:6c:04:97:46:6b:32:
89:48:71:44:ac:d5:d2:0d:f7:61:e6:f7:a4:fd:1c:
fb:73:90:3c:94:6c:99:3f:6a:59:89:cf:3b:6d:d1:
d1:53:97:0c:36:36:44:d0:b9:72:c8:b5:15:c0:3e:
56:a7:9a:cf:87:a9:89:de:4d:0a:be:d2:42:24:d0:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DA:17:42:6E:0F:1D:CB:FB:A3:B7:44:B2:84:58:E7:1C:BE:03:1A
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ef:96:a4:dd:88:cd:cd:f7:08:90:5d:a9:78:22:a4:87:82:
26:dd:0a:90:9b:f0:f6:b9:02:9f:b3:d1:c8:38:13:b6:68:2f:
59:70:7e:db:64:bc:a8:4e:69:e0:31:04:5d:6d:81:e5:76:e4:
21:3b:a7:2d:a0:d8:43:36:e8:07:79:0e:04:e9:fd:09:e8:b0:
ed:3c:e3:14:7a:7f:6f:c4:6b:e9:33:a7:ca:03:1e:07:0d:aa:
34:db:6d:42:cd:25:5b:59:b1:a9:31:78:cd:3f:11:47:7e:34:
e9:82:51:81:27:03:de:59:42:fa:e6:aa:00:a4:12:bc:33:f6:
a6:d9:70:b1:a5:61:b8:88:c7:b1:64:3f:5e:47:47:9a:73:97:
3b:9a:d6:b3:e5:28:05:88:a9:17:2d:aa:9d:17:81:ae:42:48:
65:7e:b1:16:a5:08:88:58:fa:5e:57:b7:76:07:f5:ee:f8:aa:
12:4b:e1:f4:81:61:b2:16:31:d3:b2:46:2c:dd:54:33:04:08:
ca:df:31:51:d8:8b:3e:45:66:3b:9b:0c:76:b2:6c:1a:a5:1e:
a0:48:4d:86:a0:c5:bd:43:aa:14:f7:f9:a1:b9:46:63:c1:5a:
7b:bf:b4:30:dd:b6:13:65:6d:9b:13:90:3d:26:c2:70:d3:ce:
5e:aa:76:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X/iy99L005pthD5CDg6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzM5NDAyYzQyYjNmODQ5OTVjNGQ1OGVmNjcwZThkMTZj
MmFmZTIwHhcNMjUwMTMxMDgwMDE2WhcNMjUwMjAxMDgwMDE2WjAzMTEwLwYDVQQD
EyhjNGRhMTc0MjZlMGYxZGNiZmJhM2I3NDRiMjg0NThlNzFjYmUwMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1ZPVZma6uNHWVz8iwgvG97ndMzF
yJC40mRjZHsTlvCxBLXg31lCtXmo4SRC2AgZWPWLmXbdQf8hvAuVO2lcD5cg1VU3
uaLirt7+bW+pn+oyMFp3WRq6Q+kEax8SOcU0rRIh6biukJ8dJhzceKF2ervExxb5
ROvfHiONf/9SveKqYsUdELu4CAUUYBTytLZ8kKPaGcA9yYynu6/JDWYPhH2ZIbK2
R8jcfVPGwEVxMBZF7AWzVlepcPsNPc5sBJdGazKJSHFErNXSDfdh5vek/Rz7c5A8
lGyZP2pZic87bdHRU5cMNjZE0LlyyLUVwD5Wp5rPh6mJ3k0KvtJCJNALVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTaF0JuDx3L+6O3RLKEWOccvgMaMB8GA1UdIwQY
MBaAFAIzlALEKz+EmVxNWO9nDo0Wwq/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2It
ZmM2NGJmYzNkMmY5LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2ItZmM2NGJmYzNkMmY5
LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG++WpN2I
zc33CJBdqXgipIeCJt0KkJvw9rkCn7PRyDgTtmgvWXB+22S8qE5p4DEEXW2B5Xbk
ITunLaDYQzboB3kOBOn9Ceiw7TzjFHp/b8Rr6TOnygMeBw2qNNttQs0lW1mxqTF4
zT8RR3406YJRgScD3llC+uaqAKQSvDP2ptlwsaVhuIjHsWQ/XkdHmnOXO5rWs+Uo
BYipFy2qnReBrkJIZX6xFqUIiFj6Xle3dgf17viqEkvh9IFhshYx07JGLN1UMwQI
yt8xUdiLPkVmO5sMdrJsGqUeoEhNhqDFvUOqFPf5oblGY8Fae7+0MN22E2VtmxOQ
PSbCcNPOXqp2eg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:00 2025 by rpki-client on console-fra.rpki-client.org