Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier: TbTJGVNpJvY6N0LXAlBUIuUOEMyBn2EWEDszvPK4Els=
Subject key identifier: 2F:28:2B:8A:50:8D:61:A9:4E:A7:CF:F0:E1:8E:5A:81:C3:C2:AB:6E
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 0194BB96C6A359D7F298643E6FC770BA56AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number: 08D7
Signing time: Fri 31 Jan 2025 09:00:08 +0000
Manifest this update: Fri 31 Jan 2025 09:00:08 +0000
Manifest next update: Sat 01 Feb 2025 09:00:08 +0000
Files and hashes: 1: GTkSynOSR7JJ8hFIh874atQ2kys.roa (hash: WFZgsIYIpZf3qUaXsQ6Bchk/4++gg/bi1AspWX+Djq8=)
2: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: k+AegnKL+LR1wGnAKHgh0lIY4CJH3XaZrgojtUbuBts=)
3: qLBwfOuFs3K7TRJtu9mhTqn2oCI.roa (hash: t1+dGuENDhf8xhcNT9hdJi3ibea4hMiZnxDqhvWQ4xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:c6:a3:59:d7:f2:98:64:3e:6f:c7:70:ba:56:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Jan 31 09:00:08 2025 GMT
Not After : Feb 1 09:00:08 2025 GMT
Subject: CN=2f282b8a508d61a94ea7cff0e18e5a81c3c2ab6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:64:a9:3e:43:5b:27:27:47:c0:95:34:71:
09:47:86:a4:b8:04:d0:92:81:c4:1b:6c:81:15:84:
b2:cb:fe:a6:1b:44:f5:41:67:42:d6:10:3a:d3:54:
7a:e9:7f:14:06:9d:95:0b:3d:17:c0:9e:d3:b1:98:
41:91:ee:03:79:57:47:78:23:83:08:0c:d6:7e:a1:
81:df:fd:a8:be:d6:49:80:90:17:90:1c:55:32:8b:
2a:4b:60:40:88:76:24:18:cd:82:cf:af:f2:b0:bc:
fa:f4:db:99:20:d2:4c:a9:04:e7:22:12:d4:06:1f:
90:ec:2a:7c:2b:70:96:df:c9:c1:7d:bf:3c:e2:df:
3c:5f:a8:5d:49:9f:63:42:7b:7c:13:db:53:aa:6b:
c5:1b:90:3e:55:89:c0:ca:7c:4d:d8:e3:d7:0f:6c:
b4:0f:5a:c5:72:0c:46:8b:0d:d0:4e:cd:ed:69:da:
39:ec:50:3a:a6:05:9d:d8:8f:4f:e9:1c:b1:18:6d:
76:f3:42:bc:5d:00:74:1d:3f:b4:40:ac:e3:88:9c:
4c:ac:91:cd:80:69:e3:64:18:97:0a:45:ec:ea:f1:
74:e4:1f:84:d4:1d:cc:9f:00:91:9c:77:71:44:91:
3a:b8:32:4f:54:0c:7b:03:34:e7:69:a1:82:ad:35:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:28:2B:8A:50:8D:61:A9:4E:A7:CF:F0:E1:8E:5A:81:C3:C2:AB:6E
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c5:f7:43:40:51:33:1f:76:0a:7e:23:41:23:ab:c0:09:14:
18:e0:3e:b3:75:f6:f8:44:6f:52:f3:4b:dc:07:95:cf:bf:ed:
f9:6d:a4:b0:07:dc:fd:0e:23:05:fb:65:a8:59:ac:4f:8a:1e:
82:21:61:43:5a:37:78:b3:34:84:f2:be:50:c9:8c:7d:0f:4c:
8c:63:fe:b4:6d:33:6e:01:07:fc:38:56:fb:f8:e9:bc:ff:f2:
f1:7d:c9:d0:42:3e:d2:ea:5b:45:31:09:5e:04:d9:4e:2b:60:
52:40:d6:d6:b4:2c:f5:fc:93:5b:a5:67:47:f6:03:d8:ad:6e:
d2:0d:60:2f:c5:b9:a0:af:a6:96:be:af:01:de:19:39:ee:58:
21:c4:4e:1e:81:aa:18:19:28:3c:61:42:51:16:2f:cc:f6:f1:
af:5f:8c:8a:68:66:16:04:51:b9:9c:71:43:23:fe:76:38:62:
c5:eb:1e:b5:de:9a:7c:0a:3e:36:7f:83:87:fa:7f:e9:67:a9:
58:f4:e2:cd:6f:2d:0d:28:e5:d1:7a:17:09:96:6f:28:d2:14:
28:e5:35:97:66:ee:9f:23:9a:b8:f0:4d:ff:46:02:de:5a:a2:
8f:75:86:5c:e5:0e:64:49:39:e6:c2:a3:58:2f:2a:8c:a7:34:
6b:5c:b8:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lsajWdfymGQ+b8dwulaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OGU5YjJlZWZiMjA1MzQyMzgyYjYwNzJhOTAzZjlkOTgz
NzA3MWEwHhcNMjUwMTMxMDkwMDA4WhcNMjUwMjAxMDkwMDA4WjAzMTEwLwYDVQQD
EygyZjI4MmI4YTUwOGQ2MWE5NGVhN2NmZjBlMThlNWE4MWMzYzJhYjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbZkqT5DWycnR8CVNHEJR4akuATQ
koHEG2yBFYSyy/6mG0T1QWdC1hA601R66X8UBp2VCz0XwJ7TsZhBke4DeVdHeCOD
CAzWfqGB3/2ovtZJgJAXkBxVMosqS2BAiHYkGM2Cz6/ysLz69NuZINJMqQTnIhLU
Bh+Q7Cp8K3CW38nBfb884t88X6hdSZ9jQnt8E9tTqmvFG5A+VYnAynxN2OPXD2y0
D1rFcgxGiw3QTs3tado57FA6pgWd2I9P6RyxGG1280K8XQB0HT+0QKzjiJxMrJHN
gGnjZBiXCkXs6vF05B+E1B3MnwCRnHdxRJE6uDJPVAx7AzTnaaGCrTXkHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8oK4pQjWGpTqfP8OGOWoHDwqtuMB8GA1UdIwQY
MBaAFGaOmy7vsgU0I4K2ByqQP52YNwcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMt
NGMwOGZmZTEwMDc2LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMtNGMwOGZmZTEwMDc2
LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8X3Q0BR
Mx92Cn4jQSOrwAkUGOA+s3X2+ERvUvNL3AeVz7/t+W2ksAfc/Q4jBftlqFmsT4oe
giFhQ1o3eLM0hPK+UMmMfQ9MjGP+tG0zbgEH/DhW+/jpvP/y8X3J0EI+0upbRTEJ
XgTZTitgUkDW1rQs9fyTW6VnR/YD2K1u0g1gL8W5oK+mlr6vAd4ZOe5YIcROHoGq
GBkoPGFCURYvzPbxr1+MimhmFgRRuZxxQyP+djhixesetd6afAo+Nn+Dh/p/6Wep
WPTizW8tDSjl0XoXCZZvKNIUKOU1l2bunyOauPBN/0YC3lqij3WGXOUOZEk55sKj
WC8qjKc0a1y4Fw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:06 2025 by rpki-client on console-fra.rpki-client.org