Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json)
Hash identifier: 1RVoYcfxK2zh+WWTYd44mgrQ4iTUG1OuG8dAYSH9m2o=
Subject key identifier: D6:46:EE:33:15:7C:A8:69:72:10:38:C3:41:D5:14:E3:44:D8:39:D7
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 0194BA84B0662A13F09142D3100A2B472ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
Manifest number: 143F
Signing time: Fri 31 Jan 2025 04:00:45 +0000
Manifest this update: Fri 31 Jan 2025 04:00:45 +0000
Manifest next update: Sat 01 Feb 2025 04:00:45 +0000
Files and hashes: 1: 5Tj38Bsn0hJUYrmVNSahq5IYxas.roa (hash: GZ7T7PHhO62jK4WQFKNvOrwYNZYOPPS6icOBzwnz7nI=)
2: Dn1x9nqC0rA_VncF-BuvaeIn_Yc.roa (hash: HSjxAg+X+QFqjbXeKMYZbr1j8n6ewv+Jo99Iqhyk6hE=)
3: IhsNkpEObyOhrdScw0XLGeqSfjU.roa (hash: cYBkSPS8A7jki3ADlXunYLfb3jaAdvC2BeR0D6SyyQw=)
4: NGPkgc-gMBPWvfnpR_WESooqffM.roa (hash: h7f13JmtNSfs0kxRIebuhHcsUGxQLBWtTWJQue5vIeg=)
5: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: 6ngSO1sRVjR/pnz2K+NxyQBdFfLsbq6msHFMJZb4wek=)
6: lRLrr8PrmpyLA1Ah6iT6M53B97s.roa (hash: KztLb5hpOs++pyJMXHsFQs+/mWS279OT4VXn2Nei8oY=)
7: pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa (hash: EobRSKgdMhfP9qw1zU6ZKGGyelmEJlJ7Zo4kdI4/8FI=)
8: sTgj5gtBXlZvbQkuD303wv14ZJM.roa (hash: 2lGTVGTpWSlL4AKzK4tCKidrFOFRYmSZ+Qh+p4OiuBc=)
9: xYAjaUX4uCNzXlHnBrEe3pTnwq8.roa (hash: ZRrU0BuCfZiZQE1ZgdynzSg2G7rxR/CwnRvJV/ulWwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:b0:66:2a:13:f0:91:42:d3:10:0a:2b:47:2a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Jan 31 04:00:45 2025 GMT
Not After : Feb 1 04:00:45 2025 GMT
Subject: CN=d646ee33157ca869721038c341d514e344d839d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:70:b9:5d:75:3d:eb:83:e7:54:2a:c9:e5:34:
5a:e5:6b:b3:00:38:e7:1e:34:ce:5c:2a:7e:e5:d8:
db:e9:69:98:a9:2f:27:75:b4:3c:24:80:31:cd:b5:
4a:ff:48:68:b2:47:a2:b9:a0:a0:82:d5:3d:5c:53:
40:67:20:8f:bc:97:83:3e:b8:e9:bd:e1:9b:7f:e5:
7d:ff:44:f4:88:27:1f:e0:b1:88:af:b8:09:6e:06:
89:23:f2:b0:cd:d4:05:34:04:21:fa:9b:be:5b:85:
97:da:68:5a:b6:ef:75:d6:d2:37:c1:cb:1d:e3:1f:
a0:a6:19:69:96:ed:bf:4b:19:4f:8b:0e:d7:a0:c3:
d1:96:76:5d:fe:bc:0b:fa:06:fa:66:72:ed:dd:1b:
03:b3:9d:00:6c:f0:26:f2:1f:a6:9f:94:a9:00:c5:
86:ac:94:1b:f1:02:09:13:ee:7c:65:61:ac:06:4e:
c7:84:3a:05:f5:ef:28:f4:22:5d:c8:83:13:31:7d:
51:a4:17:18:a6:3b:22:97:fa:4d:f5:c5:e7:82:55:
e5:e1:69:74:60:6a:f0:ba:9f:b0:b1:b9:62:2d:3e:
58:69:48:ca:c1:54:df:6f:f0:b8:98:95:31:48:f4:
f4:2a:9c:2d:e6:17:cf:62:97:40:23:3e:d5:70:83:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:46:EE:33:15:7C:A8:69:72:10:38:C3:41:D5:14:E3:44:D8:39:D7
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e6:a4:d1:51:b1:1d:d8:62:4b:e4:af:45:e2:89:86:fe:91:
d1:ac:32:0a:ca:b4:0a:a9:53:6d:fe:01:fe:ab:c2:16:14:8b:
42:e7:e7:bd:b5:54:15:a8:4e:6c:90:01:96:52:fc:71:26:53:
16:9e:69:e5:3a:1b:3c:f7:57:e8:f5:5b:cb:af:90:d2:02:ed:
5f:7c:b0:20:0a:01:53:1d:98:5b:46:fb:bd:a6:05:e2:19:65:
56:c6:16:52:c9:ce:f9:ad:52:98:bf:f6:8b:88:3e:6d:95:dd:
91:86:c7:38:21:f9:be:e9:08:23:e4:b3:55:75:43:61:f5:00:
b1:ce:68:c6:b7:a0:84:7f:a9:e7:94:d1:54:86:6b:cf:f9:4a:
ba:cf:e0:94:0d:97:28:41:85:b1:7c:ea:6c:1a:20:fe:7c:cf:
cb:be:ed:28:49:c8:f1:a7:35:1c:24:30:2d:c8:2d:7a:b0:8a:
46:41:53:ca:48:b0:2e:51:60:fc:8d:38:0f:be:15:04:e3:d3:
a2:8e:b0:85:19:83:c7:2d:d2:83:42:ac:c4:5c:c5:31:09:2b:
40:fe:30:d4:34:ed:68:e6:cb:53:00:64:e2:11:4e:e5:fe:ac:
94:77:a2:25:79:8a:fa:ee:3b:8f:09:21:aa:e5:9f:72:b9:61:
a3:a1:78:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hLBmKhPwkULTEAorRyq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2
NzdiY2QwHhcNMjUwMTMxMDQwMDQ1WhcNMjUwMjAxMDQwMDQ1WjAzMTEwLwYDVQQD
EyhkNjQ2ZWUzMzE1N2NhODY5NzIxMDM4YzM0MWQ1MTRlMzQ0ZDgzOWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HC5XXU964PnVCrJ5TRa5WuzADjn
HjTOXCp+5djb6WmYqS8ndbQ8JIAxzbVK/0hoskeiuaCggtU9XFNAZyCPvJeDPrjp
veGbf+V9/0T0iCcf4LGIr7gJbgaJI/KwzdQFNAQh+pu+W4WX2mhatu911tI3wcsd
4x+gphlplu2/SxlPiw7XoMPRlnZd/rwL+gb6ZnLt3RsDs50AbPAm8h+mn5SpAMWG
rJQb8QIJE+58ZWGsBk7HhDoF9e8o9CJdyIMTMX1RpBcYpjsil/pN9cXnglXl4Wl0
YGrwup+wsbliLT5YaUjKwVTfb/C4mJUxSPT0Kpwt5hfPYpdAIz7VcIOqDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZG7jMVfKhpchA4w0HVFONE2DnXMB8GA1UdIwQY
MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt
NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk
LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOak0VGx
HdhiS+SvReKJhv6R0awyCsq0CqlTbf4B/qvCFhSLQufnvbVUFahObJABllL8cSZT
Fp5p5TobPPdX6PVby6+Q0gLtX3ywIAoBUx2YW0b7vaYF4hllVsYWUsnO+a1SmL/2
i4g+bZXdkYbHOCH5vukII+SzVXVDYfUAsc5oxreghH+p55TRVIZrz/lKus/glA2X
KEGFsXzqbBog/nzPy77tKEnI8ac1HCQwLcgterCKRkFTykiwLlFg/I04D74VBOPT
oo6whRmDxy3Sg0KsxFzFMQkrQP4w1DTtaObLUwBk4hFO5f6slHeiJXmK+u47jwkh
quWfcrlho6F4nw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:04 2025 by rpki-client on console-fra.rpki-client.org