Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
File: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft (raw, json)
Hash identifier: Rz+4SLd7537tGlZraomhZlGHXjZDK2Ps/PLPX5pfBYM=
Subject key identifier: 92:16:31:39:9F:9C:52:AF:A8:2E:2D:4B:28:FE:2C:F4:6C:6E:81:8F
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Certificate issuer: /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial: 0194BB971D8C963646679866E80C6A8B6A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
Manifest number: 0B35
Signing time: Fri 31 Jan 2025 09:00:30 +0000
Manifest this update: Fri 31 Jan 2025 09:00:30 +0000
Manifest next update: Sat 01 Feb 2025 09:00:30 +0000
Files and hashes: 1: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl (hash: PQVV513PryTSHu8dCN3B4GyVl419IwhHCSPLsx+sQj0=)
2: Ts2grdh3WhIBgvviR4SebdJHIVA.roa (hash: gCLhNsBpATqkGaeD3Tm7dpZpLjmibJqVgNt4Igote+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:1d:8c:96:36:46:67:98:66:e8:0c:6a:8b:6a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Validity
Not Before: Jan 31 09:00:30 2025 GMT
Not After : Feb 1 09:00:30 2025 GMT
Subject: CN=921631399f9c52afa82e2d4b28fe2cf46c6e818f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:51:ed:42:52:1e:29:70:2e:80:aa:54:01:
44:18:d6:3c:ef:54:88:40:80:17:4a:38:31:9c:bc:
b0:31:c9:5d:92:7c:1c:d9:bf:cc:a1:3e:b5:e4:e8:
ee:14:c7:54:1b:83:b7:e4:20:63:9b:26:22:26:da:
38:6c:7b:09:15:66:27:33:f9:33:1b:f7:55:11:71:
ed:44:19:b4:bb:6d:ae:b9:4b:19:d6:6a:bf:63:74:
85:d2:a3:6e:5b:46:86:96:37:52:5d:bb:59:b1:03:
1e:a9:4a:fc:ae:b7:5b:02:3c:65:dc:f3:11:cc:95:
66:f0:26:e5:fa:52:e6:d2:63:81:db:5f:5e:e2:d5:
06:52:8d:6b:e1:e4:47:64:51:05:a1:9f:7f:29:0b:
8e:fd:21:83:36:b0:8a:cd:77:84:2b:6f:36:71:52:
04:ca:82:cc:fd:09:59:10:df:79:ff:08:3d:51:38:
4e:3a:c0:d5:4e:33:96:07:c4:ec:8e:b6:95:1e:5c:
cc:d5:ac:69:67:88:9c:4a:de:c8:55:62:d1:4d:bd:
62:79:ac:26:ef:76:27:34:40:74:1b:df:ec:13:7a:
bd:6e:45:c8:c2:39:cf:b8:57:fb:1d:8a:82:99:ff:
9b:8b:46:51:7d:c6:dc:87:57:d3:f1:72:78:ea:bb:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:16:31:39:9F:9C:52:AF:A8:2E:2D:4B:28:FE:2C:F4:6C:6E:81:8F
X509v3 Authority Key Identifier:
keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ed:2a:91:f3:15:34:d0:05:9a:6d:8b:8d:ac:9d:82:7a:a2:
83:52:f2:54:60:b1:57:ad:b6:95:1a:62:cd:84:79:62:20:88:
43:6b:d2:f3:ea:a3:d6:22:47:91:eb:9b:64:91:69:4a:c9:ab:
17:ea:bf:3a:2a:15:24:c2:b6:66:2d:44:79:c4:55:cc:0a:26:
3e:f6:8f:09:d9:72:29:47:20:99:ef:fd:91:46:d3:b5:3b:2e:
50:e4:14:d4:10:28:ab:dc:4e:b4:70:4e:29:86:30:5a:86:b4:
67:3f:3b:19:65:a2:d5:73:3b:b9:4a:ee:43:ed:bb:b6:a6:63:
bc:f1:98:39:9e:6d:72:79:cb:07:2a:e4:7d:06:e0:29:11:6b:
d7:6a:f2:7f:4c:c0:53:51:9e:4a:5a:4f:51:05:62:aa:59:75:
56:d9:fe:2a:ee:37:6a:02:27:5b:8e:08:b0:71:fa:05:4a:40:
47:6f:20:0e:3d:50:f5:a5:9f:5f:59:27:b3:15:ed:1a:21:bf:
81:f4:76:21:58:6b:20:7e:eb:27:4d:0a:be:a8:18:0d:d6:6f:
64:f2:ee:0f:33:e8:2d:47:9b:f5:31:b1:b5:16:88:b0:b5:4d:
0c:7f:82:1a:9e:95:19:11:3c:43:96:1d:55:3e:3f:a5:a0:21:
b0:4a:4c:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lx2MljZGZ5hm6Axqi2pDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTEwOTQ0NzA0ZDcyM2M4ZGQ5Y2U3MzBjYWJmOTZmZTI2
YmFiMjUwHhcNMjUwMTMxMDkwMDMwWhcNMjUwMjAxMDkwMDMwWjAzMTEwLwYDVQQD
Eyg5MjE2MzEzOTlmOWM1MmFmYTgyZTJkNGIyOGZlMmNmNDZjNmU4MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttpR7UJSHilwLoCqVAFEGNY871SI
QIAXSjgxnLywMcldknwc2b/MoT615OjuFMdUG4O35CBjmyYiJto4bHsJFWYnM/kz
G/dVEXHtRBm0u22uuUsZ1mq/Y3SF0qNuW0aGljdSXbtZsQMeqUr8rrdbAjxl3PMR
zJVm8Cbl+lLm0mOB219e4tUGUo1r4eRHZFEFoZ9/KQuO/SGDNrCKzXeEK282cVIE
yoLM/QlZEN95/wg9UThOOsDVTjOWB8TsjraVHlzM1axpZ4icSt7IVWLRTb1ieawm
73YnNEB0G9/sE3q9bkXIwjnPuFf7HYqCmf+bi0ZRfcbch1fT8XJ46rsuhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIWMTmfnFKvqC4tSyj+LPRsboGPMB8GA1UdIwQY
MBaAFNChCURwTXI8jdnOcwyr+W/ia6slMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9mODUyZTUtOTE2Zi00ZDVlLWEzMDUt
OGEwZjA0NTA1NjQ3LzEvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9mODUyZTUtOTE2Zi00ZDVlLWEzMDUtOGEwZjA0NTA1NjQ3
LzEvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAne0qkfMV
NNAFmm2Ljaydgnqig1LyVGCxV622lRpizYR5YiCIQ2vS8+qj1iJHkeubZJFpSsmr
F+q/OioVJMK2Zi1EecRVzAomPvaPCdlyKUcgme/9kUbTtTsuUOQU1BAoq9xOtHBO
KYYwWoa0Zz87GWWi1XM7uUruQ+27tqZjvPGYOZ5tcnnLByrkfQbgKRFr12ryf0zA
U1GeSlpPUQViqll1Vtn+Ku43agInW44IsHH6BUpAR28gDj1Q9aWfX1knsxXtGiG/
gfR2IVhrIH7rJ00KvqgYDdZvZPLuDzPoLUeb9TGxtRaIsLVNDH+CGp6VGRE8Q5Yd
VT4/paAhsEpMAQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:32 2025 by rpki-client on console-fra.rpki-client.org