Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
File: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft (raw, json)
Hash identifier: XGS/dygSEkJCtfuWPQoxq9pWKzQST+Mdr60/+efpr/k=
Subject key identifier: 56:19:32:B9:6D:7A:FD:0C:B3:99:9B:AB:A1:07:F0:8D:58:E8:53:98
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Certificate issuer: /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial: 0194BA84B7053024899A35BC981A18E96956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 04:00:47 +0000
Manifest this update: Fri 31 Jan 2025 04:00:47 +0000
Manifest next update: Sat 01 Feb 2025 04:00:47 +0000
Files and hashes: 1: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl (hash: HUEQI87sYlisTw9m9FhKco1gphd2zShG1orT4MltEb0=)
2: bdqrLURz5G694Fm80xmKAo0IogU.roa (hash: hG0r7jG1QmA/uFg4gCQdR2alotLJA0SQybpT8Ey91vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:b7:05:30:24:89:9a:35:bc:98:1a:18:e9:69:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
Validity
Not Before: Jan 31 04:00:47 2025 GMT
Not After : Feb 1 04:00:47 2025 GMT
Subject: CN=561932b96d7afd0cb3999baba107f08d58e85398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:94:01:da:89:47:cb:88:75:a7:3d:86:1c:
e5:d9:d0:1d:eb:d4:7d:99:08:fd:bd:a7:1c:fc:ab:
20:8b:6d:98:fd:26:b7:31:2f:d0:38:ab:80:56:e9:
40:ea:3d:de:28:7d:45:7b:20:a8:6e:f2:32:55:1e:
2a:a8:fa:69:23:07:58:fa:30:8d:a5:4b:b2:b4:d4:
c3:6d:96:4d:c8:26:91:22:29:10:03:03:13:22:2d:
da:f9:6b:b1:01:6b:46:25:23:69:e3:6e:21:e9:70:
06:79:5c:e5:0e:87:fd:5b:e0:21:4c:27:73:f0:8b:
d5:24:71:0e:0a:97:9b:f3:eb:25:a4:f3:5e:44:66:
33:38:d1:dd:e7:60:d6:9f:69:7a:24:03:fd:38:cf:
36:26:ee:7b:91:dc:c2:42:3c:07:7d:7d:6b:09:15:
6e:26:27:a6:3d:e8:32:32:18:df:ab:41:0c:e7:85:
2a:fb:ca:46:82:2f:db:9f:c7:ed:22:dc:6e:e6:b6:
be:d0:82:ed:23:5b:b9:ef:f9:c2:98:7f:ea:2f:79:
d6:9c:45:22:a4:ee:a3:3d:25:a8:08:5e:94:b2:6e:
6f:af:4b:1b:58:6d:33:42:fe:ed:6c:2d:f5:74:55:
ac:ab:39:76:ed:6d:fb:7f:b5:e8:04:30:ec:9d:0d:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:19:32:B9:6D:7A:FD:0C:B3:99:9B:AB:A1:07:F0:8D:58:E8:53:98
X509v3 Authority Key Identifier:
keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:88:0b:86:48:16:1a:9c:88:95:9a:d9:20:93:c2:b9:92:35:
1d:70:b9:d9:74:e8:be:5e:33:7c:60:32:3b:e3:13:c1:46:41:
b7:39:ff:7d:f7:a1:fe:c3:2a:21:3f:cd:76:d8:af:16:f3:5e:
a5:78:55:9c:f6:20:c3:6b:ba:63:4c:64:3a:eb:7d:8a:03:5d:
58:e9:52:84:f1:52:22:4a:59:ba:a6:a4:4d:d2:ed:35:1b:cf:
dc:be:c8:05:7f:48:15:98:f6:d0:1a:2b:9f:0d:d7:dd:cd:db:
4f:aa:7c:6f:56:b8:d9:5c:d1:df:77:79:70:e8:a1:7e:e0:b9:
81:22:35:29:5d:c6:74:72:81:76:94:51:36:f4:c0:61:25:96:
11:a5:0e:47:d1:a5:26:18:a5:a4:ea:41:34:a2:ce:00:1f:4a:
ba:76:66:7f:da:31:83:be:eb:3c:d9:96:46:e5:18:c9:ec:4a:
ad:4c:51:85:2d:b1:d2:8b:a3:8b:ee:4b:56:25:d8:15:a9:cf:
6a:85:19:6a:06:f3:fb:4c:b3:9d:b7:62:31:a3:a5:0c:73:ff:
3e:b0:be:90:09:12:22:a4:14:88:33:61:8a:6a:74:2a:9b:68:
c3:0b:95:1f:0f:32:08:bc:ac:fe:fe:02:5f:8a:23:81:a4:bb:
00:e0:bd:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hLcFMCSJmjW8mBoY6WlWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZjBhMzljZmFkZjkxMGY2YjEzMmFkMjI4ZTYwNjU2MTg4
N2EwNmMwHhcNMjUwMTMxMDQwMDQ3WhcNMjUwMjAxMDQwMDQ3WjAzMTEwLwYDVQQD
Eyg1NjE5MzJiOTZkN2FmZDBjYjM5OTliYWJhMTA3ZjA4ZDU4ZTg1Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsuUAdqJR8uIdac9hhzl2dAd69R9
mQj9vacc/Ksgi22Y/Sa3MS/QOKuAVulA6j3eKH1FeyCobvIyVR4qqPppIwdY+jCN
pUuytNTDbZZNyCaRIikQAwMTIi3a+WuxAWtGJSNp424h6XAGeVzlDof9W+AhTCdz
8IvVJHEOCpeb8+slpPNeRGYzONHd52DWn2l6JAP9OM82Ju57kdzCQjwHfX1rCRVu
JiemPegyMhjfq0EM54Uq+8pGgi/bn8ftItxu5ra+0ILtI1u57/nCmH/qL3nWnEUi
pO6jPSWoCF6Usm5vr0sbWG0zQv7tbC31dFWsqzl27W37f7XoBDDsnQ2uHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYZMrltev0Ms5mbq6EH8I1Y6FOYMB8GA1UdIwQY
MBaAFNrwo5z635EPaxMq0ijmBlYYh6BsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mZmE0NTctMzRjOC00OGMyLTllYmMt
OTJiMjA3ZjY0MWIxLzEvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mZmE0NTctMzRjOC00OGMyLTllYmMtOTJiMjA3ZjY0MWIx
LzEvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIgLhkgW
GpyIlZrZIJPCuZI1HXC52XTovl4zfGAyO+MTwUZBtzn/ffeh/sMqIT/NdtivFvNe
pXhVnPYgw2u6Y0xkOut9igNdWOlShPFSIkpZuqakTdLtNRvP3L7IBX9IFZj20Bor
nw3X3c3bT6p8b1a42VzR33d5cOihfuC5gSI1KV3GdHKBdpRRNvTAYSWWEaUOR9Gl
JhilpOpBNKLOAB9KunZmf9oxg77rPNmWRuUYyexKrUxRhS2x0ouji+5LViXYFanP
aoUZagbz+0yznbdiMaOlDHP/PrC+kAkSIqQUiDNhimp0KptowwuVHw8yCLys/v4C
X4ojgaS7AOC9eQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:02 2025 by rpki-client on console-fra.rpki-client.org