Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File: c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier: DjNFN3z/xLMaZsr0+mIAExr7tvt11EqiqBS9IaI6rck=
Subject key identifier: 64:C1:D7:63:9D:1C:F1:E7:C1:C3:83:C9:01:D2:27:C8:82:D8:13:6D
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 0194BA847DBE0ACD88CA2D10CFC7F25131CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 04:00:32 +0000
Manifest this update: Fri 31 Jan 2025 04:00:32 +0000
Manifest next update: Sat 01 Feb 2025 04:00:32 +0000
Files and hashes: 1: 9Vc3AbW6vlZ_1l6ygzFXdiG_9DU.roa (hash: XyjyaFRHv8L+Xv8vUnenIR3U/Eb6y+TGYMaeT4tV8mY=)
2: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (hash: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=)
3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: lHsqOhw4VtCsGFVc1WeUv/A1uQIN/JDbASVzHwig9EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:7d:be:0a:cd:88:ca:2d:10:cf:c7:f2:51:31:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Jan 31 04:00:32 2025 GMT
Not After : Feb 1 04:00:32 2025 GMT
Subject: CN=64c1d7639d1cf1e7c1c383c901d227c882d8136d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:b1:7b:ee:c2:bf:e1:d6:c7:58:17:49:3b:
e9:df:f9:5f:07:a6:24:12:97:c4:52:9a:38:87:0c:
1d:4e:12:bc:f2:3d:39:91:54:5d:ce:48:ab:fc:b1:
38:92:c1:ef:e9:1d:bb:69:11:6b:43:d5:34:fe:f1:
2b:1b:1c:9f:eb:b5:0b:27:b5:64:4f:7d:08:5f:0c:
46:b4:27:6e:d1:09:30:fb:4e:72:14:a2:b2:c8:8d:
05:c9:98:48:54:ec:99:d5:b7:4f:d1:d9:a7:f5:07:
6c:d4:11:ea:a4:da:11:22:0f:26:70:3f:f4:fa:5e:
c1:e9:6c:76:1b:83:1d:82:a9:da:83:b1:b5:dd:02:
22:ae:72:b5:bd:fc:75:2b:a1:fa:73:98:20:cc:27:
7c:54:ad:42:b5:55:62:89:66:0f:72:c8:85:b8:aa:
66:6b:0d:10:ef:31:a2:ba:96:3a:e5:a9:11:c8:bf:
44:85:da:ba:28:35:f3:05:ee:15:4d:83:bb:c9:92:
cc:f3:df:a8:a0:c0:f9:f2:75:70:7a:50:f6:fd:a4:
fe:43:7f:c7:8b:8a:9b:2c:57:68:cc:b7:d4:2f:80:
05:ec:84:8b:ac:6d:b0:05:14:bb:13:f9:c1:be:4e:
dd:7d:f1:ab:e1:fc:b7:2a:24:f3:06:9f:fe:82:88:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C1:D7:63:9D:1C:F1:E7:C1:C3:83:C9:01:D2:27:C8:82:D8:13:6D
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:72:0f:9d:6b:b6:b6:61:9b:af:be:d0:77:74:3f:22:ef:e5:
52:59:13:48:ef:6c:7e:31:ad:d2:9f:d6:fc:82:1e:00:bf:31:
1e:ab:0b:7b:91:ca:4f:a7:86:9c:c5:5a:80:f7:5c:8c:c9:de:
3e:ba:f3:a8:02:98:1b:3e:1f:03:ac:5c:5a:ca:83:40:e6:e6:
b7:1b:9c:1a:c4:98:46:e7:2e:33:54:f1:9e:56:e3:52:3f:fe:
78:3c:ce:b5:80:75:28:d7:56:63:55:c9:c5:c6:56:88:78:f0:
44:25:f1:50:d1:1d:64:06:1a:9d:4e:10:c2:da:8d:f1:a3:a0:
f2:0b:ad:c1:ab:c1:55:2f:1a:b0:3d:b5:36:a8:14:2e:9e:13:
cd:d0:f8:2e:a3:99:47:1f:83:df:39:2e:a2:57:e2:90:85:0e:
b5:f5:2f:8d:d1:69:a6:02:40:46:ad:e0:77:5e:7a:69:fd:18:
2d:56:1a:34:2f:25:13:73:78:1a:2a:f5:ca:b0:33:9b:49:37:
fc:f6:e3:06:68:3f:58:29:ac:f3:f2:24:2a:47:77:a8:65:7b:
ef:f4:48:af:96:60:da:00:5b:3e:1a:eb:ff:80:f8:da:ac:66:
27:4c:c8:96:13:85:94:cc:24:10:31:00:ce:de:3e:2c:4a:a1:
7b:f3:7b:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hH2+Cs2Iyi0Qz8fyUTHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZTE1N2IyOTE4Y2FkY2E4YTVhOWZiYzY2ZTk3NzYwOGE2
ZGY1ZTEwHhcNMjUwMTMxMDQwMDMyWhcNMjUwMjAxMDQwMDMyWjAzMTEwLwYDVQQD
Eyg2NGMxZDc2MzlkMWNmMWU3YzFjMzgzYzkwMWQyMjdjODgyZDgxMzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sixe+7Cv+HWx1gXSTvp3/lfB6Yk
EpfEUpo4hwwdThK88j05kVRdzkir/LE4ksHv6R27aRFrQ9U0/vErGxyf67ULJ7Vk
T30IXwxGtCdu0Qkw+05yFKKyyI0FyZhIVOyZ1bdP0dmn9Qds1BHqpNoRIg8mcD/0
+l7B6Wx2G4Mdgqnag7G13QIirnK1vfx1K6H6c5ggzCd8VK1CtVViiWYPcsiFuKpm
aw0Q7zGiupY65akRyL9Ehdq6KDXzBe4VTYO7yZLM89+ooMD58nVwelD2/aT+Q3/H
i4qbLFdozLfUL4AF7ISLrG2wBRS7E/nBvk7dffGr4fy3KiTzBp/+gohc8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTB12OdHPHnwcODyQHSJ8iC2BNtMB8GA1UdIwQY
MBaAFHPhV7KRjK3KilqfvGbpd2CKbfXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAt
MDBhMTU0YjhlY2IxLzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAtMDBhMTU0YjhlY2Ix
LzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHIPnWu2
tmGbr77Qd3Q/Iu/lUlkTSO9sfjGt0p/W/IIeAL8xHqsLe5HKT6eGnMVagPdcjMne
PrrzqAKYGz4fA6xcWsqDQObmtxucGsSYRucuM1TxnlbjUj/+eDzOtYB1KNdWY1XJ
xcZWiHjwRCXxUNEdZAYanU4QwtqN8aOg8gutwavBVS8asD21NqgULp4TzdD4LqOZ
Rx+D3zkuolfikIUOtfUvjdFppgJARq3gd156af0YLVYaNC8lE3N4Gir1yrAzm0k3
/PbjBmg/WCms8/IkKkd3qGV77/RIr5Zg2gBbPhrr/4D42qxmJ0zIlhOFlMwkEDEA
zt4+LEqhe/N75A==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:28 2025 by rpki-client on console-fra.rpki-client.org