Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier: cL7XTQ/pxlo2W6p4hzo+G+SJR2kDKUdNjyOIObkxAic=
Subject key identifier: 81:CE:06:DB:7F:42:BD:AF:7E:7D:1F:8B:50:28:D4:54:0C:BE:DA:EC
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 0194BB292472FBBC1AFDF8C09033F3524964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number: 1410
Signing time: Fri 31 Jan 2025 07:00:23 +0000
Manifest this update: Fri 31 Jan 2025 07:00:23 +0000
Manifest next update: Sat 01 Feb 2025 07:00:23 +0000
Files and hashes: 1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: r+h0N2DIT7To3a47vYw7Bn3EL6ilifzwKK97NoVnDSE=)
2: g44wD4exlc1l3mqvr27NiUmB6UU.roa (hash: O/hdodBPqzpKMCb1MTByZVkRCwAsxnmyTBvaXtpscq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:24:72:fb:bc:1a:fd:f8:c0:90:33:f3:52:49:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Jan 31 07:00:23 2025 GMT
Not After : Feb 1 07:00:23 2025 GMT
Subject: CN=81ce06db7f42bdaf7e7d1f8b5028d4540cbedaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:a3:ad:84:6e:3b:50:ed:67:45:4c:73:41:
e2:dc:4e:9e:03:6b:3d:cd:bc:8a:ca:6b:50:2f:f6:
21:1c:09:f5:e8:ac:68:66:2f:76:ea:82:e5:26:a9:
a0:eb:68:fc:85:fe:44:05:48:cc:45:2a:15:c9:91:
c0:1d:b2:09:ba:0d:a1:40:5f:54:ff:2d:83:e2:f3:
d0:f8:ae:26:55:8e:0f:88:f4:dd:90:2f:88:2b:64:
4f:6b:12:1d:7d:e1:db:0f:72:b9:7f:eb:34:1a:87:
e6:e1:b6:be:68:51:0a:e1:0f:48:fd:15:a1:05:b1:
df:ab:65:71:fb:22:08:d9:4a:ee:94:89:31:47:7f:
6a:f7:ff:82:3a:55:b6:9d:ab:fc:b3:22:5c:52:a0:
4c:e7:9f:ed:36:b2:91:a6:39:ef:28:15:45:d7:b4:
e4:4c:c1:34:f9:0c:c1:cc:46:5d:e2:cf:da:4c:90:
ca:99:bf:21:70:6e:6a:14:24:76:a2:68:7e:53:a9:
e3:77:11:ba:43:db:7b:08:7b:f4:97:85:2d:0f:3a:
e6:b6:07:9d:ca:e1:dd:82:f5:cf:3d:66:9e:33:88:
f4:48:14:ae:d1:89:74:88:8d:c1:4f:4e:b4:67:46:
ad:47:14:75:8c:5e:66:67:c2:95:db:c3:15:41:4d:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:06:DB:7F:42:BD:AF:7E:7D:1F:8B:50:28:D4:54:0C:BE:DA:EC
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b7:f5:af:b9:0e:61:65:71:6f:c8:78:31:da:41:ab:1a:ee:
de:62:a2:f2:58:1f:43:16:37:5f:1b:0d:0b:d2:33:0b:36:67:
4d:91:00:ea:f8:e2:af:90:b9:a0:44:91:a2:12:34:e6:2b:08:
9c:8c:56:39:28:b3:bb:3c:80:8f:1b:10:aa:32:8c:07:71:bf:
48:46:31:15:44:bb:35:10:cd:02:41:4d:83:18:65:c5:66:59:
5c:72:5c:32:6a:62:0d:35:26:35:b0:c5:f7:db:e6:e2:18:5f:
74:19:d8:a8:d5:b5:37:3e:88:5f:7a:34:9e:6e:ee:37:d5:2b:
13:b5:62:cb:f9:0a:f2:92:67:c9:4c:0f:7c:32:6a:b3:2e:e8:
f2:62:ed:06:00:44:cc:88:91:a8:f7:69:7b:61:ec:5f:f1:8d:
74:1d:1f:b1:d6:b0:29:68:53:4c:14:72:c4:b9:15:2c:7a:89:
6b:40:3b:77:6a:38:4f:0b:d1:c3:70:c5:fa:c1:3d:3b:bd:d2:
09:0d:62:37:32:0a:e8:76:4b:25:78:cc:37:16:7c:78:f6:b8:
4e:17:dd:89:2c:31:94:32:e0:a6:d7:d0:60:de:19:ad:ac:be:
e7:e3:7d:a5:c2:96:ce:eb:fb:e2:39:6d:a6:9f:1e:2e:3c:77:
85:84:85:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KSRy+7wa/fjAkDPzUklkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmFmMzMwMmY2YTQ5ZjdlYjY5MWFjNDk1OWUxYWNmOTVk
YjZjZTcwHhcNMjUwMTMxMDcwMDIzWhcNMjUwMjAxMDcwMDIzWjAzMTEwLwYDVQQD
Eyg4MWNlMDZkYjdmNDJiZGFmN2U3ZDFmOGI1MDI4ZDQ1NDBjYmVkYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN+jrYRuO1DtZ0VMc0Hi3E6eA2s9
zbyKymtQL/YhHAn16KxoZi926oLlJqmg62j8hf5EBUjMRSoVyZHAHbIJug2hQF9U
/y2D4vPQ+K4mVY4PiPTdkC+IK2RPaxIdfeHbD3K5f+s0Gofm4ba+aFEK4Q9I/RWh
BbHfq2Vx+yII2UrulIkxR39q9/+COlW2nav8syJcUqBM55/tNrKRpjnvKBVF17Tk
TME0+QzBzEZd4s/aTJDKmb8hcG5qFCR2omh+U6njdxG6Q9t7CHv0l4UtDzrmtged
yuHdgvXPPWaeM4j0SBSu0Yl0iI3BT060Z0atRxR1jF5mZ8KV28MVQU1ozQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHOBtt/Qr2vfn0fi1Ao1FQMvtrsMB8GA1UdIwQY
MBaAFBYq8zAvakn362kaxJWeGs+V22znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMt
ZTc3NWQ1ZmFhOWUzLzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMtZTc3NWQ1ZmFhOWUz
LzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLf1r7kO
YWVxb8h4MdpBqxru3mKi8lgfQxY3XxsNC9IzCzZnTZEA6vjir5C5oESRohI05isI
nIxWOSizuzyAjxsQqjKMB3G/SEYxFUS7NRDNAkFNgxhlxWZZXHJcMmpiDTUmNbDF
99vm4hhfdBnYqNW1Nz6IX3o0nm7uN9UrE7Viy/kK8pJnyUwPfDJqsy7o8mLtBgBE
zIiRqPdpe2HsX/GNdB0fsdawKWhTTBRyxLkVLHqJa0A7d2o4TwvRw3DF+sE9O73S
CQ1iNzIK6HZLJXjMNxZ8ePa4ThfdiSwxlDLgptfQYN4Zray+5+N9pcKWzuv74jlt
pp8eLjx3hYSFmA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:25 2025 by rpki-client on console-fra.rpki-client.org