Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier: 80xrUelnpNcLHK8OfgcBNkEJzJT6dSkLCxFEIzwuFjg=
Subject key identifier: C2:24:B8:E2:4B:0C:45:33:10:A5:C0:D9:EA:AB:62:91:49:AC:EF:41
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 0194BABBCE4AEE0C3CC7AAA04908FD32C534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number: 1439
Signing time: Fri 31 Jan 2025 05:00:57 +0000
Manifest this update: Fri 31 Jan 2025 05:00:57 +0000
Manifest next update: Sat 01 Feb 2025 05:00:57 +0000
Files and hashes: 1: 3y2t9Y4w34qiFBdy_Ek4JJUO21Q.roa (hash: /TZVDNQyK0D1wC867uTU8KAEMW8e+Zi9YcbvlB1rMAE=)
2: EmNqWHZHvcbARh8MqUG6nxXKDnk.roa (hash: qFrAZp7TQYaT2zIiJ3kN/K/RUigkO6TizDHq1yApShI=)
3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: WwuqwMV4q2mQFq0mNuFVzUUUWKiuEa91o1QgRvpxw40=)
4: k0j78iVx37wwO7bDjCAVoyijDeU.roa (hash: x4YCjAIVRyxgn0vQG0zlSLFCcDO0MbVYoCzpTeJPa0I=)
5: oLh3yoxxKDPJ0rI4fFfhHDN8zHc.roa (hash: gc86IVswZ2auip9vASDEdi6AXEh5d/2Jw9bjMy6Pwd8=)
6: oqQMhQCTnCvqpL4FDtvR2ocumgk.roa (hash: 9N1juEbb6Fp6BQG9Mi2KAk0Vy7P2TkUjOEW3w+qZU1s=)
7: u7jBF_TQnJz9mTpZhXYq5nggn8c.roa (hash: wreTMB6pW+vrdjrRc+OCyHOCrMzU/JZ3/7CTFhlab7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:ce:4a:ee:0c:3c:c7:aa:a0:49:08:fd:32:c5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Jan 31 05:00:57 2025 GMT
Not After : Feb 1 05:00:57 2025 GMT
Subject: CN=c224b8e24b0c453310a5c0d9eaab629149acef41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:73:19:23:4c:87:2e:8e:07:a2:32:ad:4c:
26:49:60:3c:30:bc:6f:d7:51:bf:79:ae:d4:15:fb:
67:8e:6b:0c:bf:c1:fe:8d:fd:68:67:96:bf:14:7b:
27:d1:d6:24:04:86:ff:49:e3:42:47:84:b8:1a:42:
99:10:cb:b1:d2:43:3a:82:9c:c9:c3:01:79:c7:fe:
b9:9e:fb:d5:ff:71:6b:e9:53:ae:b1:82:89:b2:20:
6d:af:29:6f:29:64:a9:dd:1e:14:1c:25:78:ed:a0:
41:ac:bf:c9:1a:95:02:d9:d6:30:9e:1a:74:bc:a1:
74:54:1f:e6:d9:f6:38:87:a5:09:e2:f0:10:98:db:
46:84:9e:60:1d:b3:28:0f:1c:70:84:e9:76:ee:7a:
a2:34:53:dd:99:3a:ec:7c:67:87:04:07:84:dc:21:
65:3b:c6:8e:43:a0:8a:ef:a0:fa:6d:a4:0b:24:b3:
65:81:1e:5d:17:ae:81:3c:a4:d2:0d:62:1b:b2:9e:
8d:47:72:7d:9c:9b:63:91:c1:c6:2f:91:34:8a:0f:
f8:d5:ea:74:96:15:25:59:3e:6a:cc:fd:39:6c:5f:
64:21:51:5a:09:50:37:2c:87:c5:22:2f:e6:44:db:
e9:7d:e1:54:b7:fc:b2:56:57:60:9d:fc:e6:ef:02:
cd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:24:B8:E2:4B:0C:45:33:10:A5:C0:D9:EA:AB:62:91:49:AC:EF:41
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:63:03:eb:90:d5:ad:97:fa:9d:0e:8f:62:ed:1c:9b:23:9f:
38:f6:67:3b:de:0e:01:78:d1:ea:00:f6:d0:08:c3:0c:8d:88:
99:e3:d8:79:8e:5f:8f:5e:c2:a7:19:18:8b:1d:d8:82:62:4b:
f2:90:db:d8:f6:6e:d6:f2:85:46:8b:d2:8d:29:64:ce:c4:92:
8f:01:62:d2:51:b1:cb:c7:b3:de:c7:f4:e7:68:83:d2:cb:bf:
81:4a:d6:c7:f7:0d:f7:99:f2:3e:a2:22:a5:d7:5a:4c:c3:e5:
fa:32:84:f8:c8:cb:18:d5:60:91:77:c9:a9:c9:ea:c0:ee:7d:
3f:f8:d0:92:76:81:b7:88:23:17:4e:f3:c6:31:b8:e6:c9:ac:
4f:de:26:34:3e:5a:95:59:d7:5a:d1:78:2a:57:f8:c6:4d:42:
31:eb:ed:b9:69:ce:90:b9:53:1b:31:ac:e5:c6:56:7d:b9:f4:
01:1a:88:14:cb:02:95:f3:a4:5d:33:8a:2a:45:2d:d7:a9:0b:
0f:df:05:61:10:c9:36:a0:9a:76:ea:02:5d:07:0b:08:0f:6b:
49:31:ed:25:9e:8d:71:47:bf:81:40:25:70:3a:62:b3:b5:0b:
cf:52:51:91:b0:18:57:f1:20:22:1e:b5:10:7b:97:84:11:ae:
aa:9d:e3:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u85K7gw8x6qgSQj9MsU0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjRjN2VjZmEzN2QyNDg3MTUyZmI5YmJiYWI1MGJlNzlk
ZTI2MTkwHhcNMjUwMTMxMDUwMDU3WhcNMjUwMjAxMDUwMDU3WjAzMTEwLwYDVQQD
EyhjMjI0YjhlMjRiMGM0NTMzMTBhNWMwZDllYWFiNjI5MTQ5YWNlZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYdzGSNMhy6OB6IyrUwmSWA8MLxv
11G/ea7UFftnjmsMv8H+jf1oZ5a/FHsn0dYkBIb/SeNCR4S4GkKZEMux0kM6gpzJ
wwF5x/65nvvV/3Fr6VOusYKJsiBtrylvKWSp3R4UHCV47aBBrL/JGpUC2dYwnhp0
vKF0VB/m2fY4h6UJ4vAQmNtGhJ5gHbMoDxxwhOl27nqiNFPdmTrsfGeHBAeE3CFl
O8aOQ6CK76D6baQLJLNlgR5dF66BPKTSDWIbsp6NR3J9nJtjkcHGL5E0ig/41ep0
lhUlWT5qzP05bF9kIVFaCVA3LIfFIi/mRNvpfeFUt/yyVldgnfzm7wLN+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIkuOJLDEUzEKXA2eqrYpFJrO9BMB8GA1UdIwQY
MBaAFD4kx+z6N9JIcVL7m7urUL553iYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMt
NDkzZDc3NGFhMWZmLzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMtNDkzZDc3NGFhMWZm
LzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmMD65DV
rZf6nQ6PYu0cmyOfOPZnO94OAXjR6gD20AjDDI2ImePYeY5fj17CpxkYix3YgmJL
8pDb2PZu1vKFRovSjSlkzsSSjwFi0lGxy8ez3sf052iD0su/gUrWx/cN95nyPqIi
pddaTMPl+jKE+MjLGNVgkXfJqcnqwO59P/jQknaBt4gjF07zxjG45smsT94mND5a
lVnXWtF4Klf4xk1CMevtuWnOkLlTGzGs5cZWfbn0ARqIFMsClfOkXTOKKkUt16kL
D98FYRDJNqCaduoCXQcLCA9rSTHtJZ6NcUe/gUAlcDpis7ULz1JRkbAYV/EgIh61
EHuXhBGuqp3jtQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:03 2025 by rpki-client on console-fra.rpki-client.org