Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
File: MryjKc1OJWX_DRPoNVpuxMwXlOE.mft (raw, json)
Hash identifier: /xLJHLwdzYSk8+fUDIpBtwoHqspT1nrenYL81YDp9E0=
Subject key identifier: E6:2A:0C:6F:CA:E1:97:E9:CC:97:9B:EA:C3:29:9C:56:15:DA:AF:6E
Authority key identifier: 32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
Certificate issuer: /CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Certificate serial: 0194BBCEDEC56133A7B7F5CF4FD9AD1A657E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
Manifest number: 0ADD
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: EY9B7xHMl-Tku1EaPiHTMSJd4UY.roa (hash: fngf8eQs7Bwu0pM4j6i0WPj4gj/7hDrn6NltGJxnSqw=)
2: MryjKc1OJWX_DRPoNVpuxMwXlOE.crl (hash: JxjOWyZMlrCVjLAPZbKm4Z3IgtuZ85GhcBfMF55Tjb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:de:c5:61:33:a7:b7:f5:cf:4f:d9:ad:1a:65:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=e62a0c6fcae197e9cc979beac3299c5615daaf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:9e:eb:25:0d:fc:06:cf:8b:95:d1:40:18:
03:91:e7:61:48:93:7e:3b:17:7d:7c:f5:9c:ef:1d:
27:46:81:bc:a9:2e:28:f4:5b:ee:73:56:80:5f:e7:
f0:04:52:a7:ac:32:db:1f:2e:35:cf:c7:c3:f2:1d:
e9:cf:90:c8:1c:ac:87:2a:da:49:c5:11:57:4d:99:
2d:24:0d:ce:77:b4:95:48:fb:4b:3c:f1:7f:3b:92:
fc:b5:73:a4:ee:79:e8:76:37:f1:4d:3b:5c:d5:f7:
fa:99:4f:44:71:f6:cc:4c:41:c3:8e:3c:af:09:da:
0a:97:a1:44:ba:dc:9e:92:87:28:f6:d0:57:63:cb:
23:77:b8:74:7b:c1:31:23:89:ca:e1:f6:da:84:d6:
53:03:75:ea:b9:74:8e:9c:68:ce:91:5b:d6:10:1d:
c0:c3:e4:e8:40:01:0e:3d:47:61:37:46:57:7c:4b:
53:98:5a:d0:a1:59:fb:d6:fb:3d:81:97:99:f1:bd:
6a:96:ec:7c:6e:98:97:b6:3a:31:2a:be:a7:76:9a:
17:26:42:51:d1:90:f8:2d:f1:34:1a:eb:6e:f7:66:
bb:28:12:1b:b6:d8:05:9c:3b:dc:51:fd:f5:52:41:
79:eb:c4:e0:e7:ec:e6:2a:8c:98:ef:7f:94:b6:18:
84:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2A:0C:6F:CA:E1:97:E9:CC:97:9B:EA:C3:29:9C:56:15:DA:AF:6E
X509v3 Authority Key Identifier:
keyid:32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6d:1c:c8:f3:31:69:8a:e4:f8:ec:03:92:74:ce:ed:55:d8:
ea:d1:00:c1:16:d4:c3:2a:aa:ed:11:70:92:ea:99:1d:d8:20:
48:a1:1e:37:b4:e6:7e:68:6c:7c:43:3a:f9:fe:00:78:28:bf:
0c:a9:01:4f:fd:a2:95:6a:f8:c4:56:57:26:bc:d4:e7:67:db:
ba:01:0d:df:53:86:29:64:37:d7:17:5f:4d:57:2b:1d:d7:94:
0e:5f:ae:af:73:bf:42:41:80:27:84:70:25:c6:ba:2c:4f:00:
f2:67:f1:12:a1:b5:23:c3:20:5d:f0:7b:95:a6:f5:8e:18:e7:
29:ea:3c:f0:6f:c7:f0:a2:19:84:7d:15:cf:b7:8e:66:59:d3:
16:95:3e:3a:35:c8:b2:65:b2:6d:b8:02:c3:1e:b0:9d:2c:be:
c2:0c:77:8b:a3:f9:4c:79:8c:94:18:f6:8a:1a:df:11:7d:ad:
04:26:fb:c7:cd:c6:c0:4b:ac:0d:ab:f7:4f:99:a5:ec:ce:d1:
37:47:32:aa:11:7f:e9:11:0b:53:e1:e0:fd:05:f5:86:b3:50:
14:f5:fa:e9:01:26:5b:67:45:45:43:de:0a:58:4a:a7:bf:0d:
32:07:a3:89:cb:4c:82:83:b3:bb:bd:c6:da:92:46:15:53:58:
a1:a2:8d:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zt7FYTOnt/XPT9mtGmV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYmNhMzI5Y2Q0ZTI1NjVmZjBkMTNlODM1NWE2ZWM0Y2Mx
Nzk0ZTEwHhcNMjUwMTMxMTAwMTI0WhcNMjUwMjAxMTAwMTI0WjAzMTEwLwYDVQQD
EyhlNjJhMGM2ZmNhZTE5N2U5Y2M5NzliZWFjMzI5OWM1NjE1ZGFhZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmme6yUN/AbPi5XRQBgDkedhSJN+
Oxd9fPWc7x0nRoG8qS4o9Fvuc1aAX+fwBFKnrDLbHy41z8fD8h3pz5DIHKyHKtpJ
xRFXTZktJA3Od7SVSPtLPPF/O5L8tXOk7nnodjfxTTtc1ff6mU9EcfbMTEHDjjyv
CdoKl6FEutyekoco9tBXY8sjd7h0e8ExI4nK4fbahNZTA3XquXSOnGjOkVvWEB3A
w+ToQAEOPUdhN0ZXfEtTmFrQoVn71vs9gZeZ8b1qlux8bpiXtjoxKr6ndpoXJkJR
0ZD4LfE0Gutu92a7KBIbttgFnDvcUf31UkF568Tg5+zmKoyY73+UthiEvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYqDG/K4ZfpzJeb6sMpnFYV2q9uMB8GA1UdIwQY
MBaAFDK8oynNTiVl/w0T6DVabsTMF5ThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXJ5aktjMU9KV1hfRFJQb05WcHV4TXdYbE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iZDhjZjYtMWRiOC00YWMwLThkZDYt
MTdiZTQxN2U5NGRjLzEvTXJ5aktjMU9KV1hfRFJQb05WcHV4TXdYbE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9iZDhjZjYtMWRiOC00YWMwLThkZDYtMTdiZTQxN2U5NGRj
LzEvTXJ5aktjMU9KV1hfRFJQb05WcHV4TXdYbE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn20cyPMx
aYrk+OwDknTO7VXY6tEAwRbUwyqq7RFwkuqZHdggSKEeN7TmfmhsfEM6+f4AeCi/
DKkBT/2ilWr4xFZXJrzU52fbugEN31OGKWQ31xdfTVcrHdeUDl+ur3O/QkGAJ4Rw
Jca6LE8A8mfxEqG1I8MgXfB7lab1jhjnKeo88G/H8KIZhH0Vz7eOZlnTFpU+OjXI
smWybbgCwx6wnSy+wgx3i6P5THmMlBj2ihrfEX2tBCb7x83GwEusDav3T5ml7M7R
N0cyqhF/6RELU+Hg/QX1hrNQFPX66QEmW2dFRUPeClhKp78NMgejictMgoOzu73G
2pJGFVNYoaKNTg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:28 2025 by rpki-client on console-fra.rpki-client.org