Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File: X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier: 1ff1AgM+1bqgHn5j+W7cvkImL2Hj/5WaeMPxB7sJ/gw=
Subject key identifier: 7A:D1:2E:76:61:8A:64:7B:8E:82:A9:E5:4C:AE:40:B5:11:F4:38:F4
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 0194BB9701778E59CD0CB37AC94204BACD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number: 091F
Signing time: Fri 31 Jan 2025 09:00:23 +0000
Manifest this update: Fri 31 Jan 2025 09:00:23 +0000
Manifest next update: Sat 01 Feb 2025 09:00:23 +0000
Files and hashes: 1: KXplrrjoXk-pwean-b2EUxmjWf0.roa (hash: SADzPbjQpUkns1iDSl5tKZ2PbDzP9GLXflBpqt90i+0=)
2: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: +pM2u7cuPj1nLVlf7qXNarYavHeYTmGOjTlaYS3LCx0=)
3: hacshKY0tbOUkqvYc39HoDnofn8.roa (hash: JxLfxo4h3+yvwbhiN20U02vAC8X/psm8Gy+LvSzn9K0=)
4: tl08I-n58Omn0yrfhuxp8KWpULk.roa (hash: KzSe5Vgxc5D5oBSEecsymsgmqwAX4NdXILrgqAyHjOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:01:77:8e:59:cd:0c:b3:7a:c9:42:04:ba:cd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Jan 31 09:00:23 2025 GMT
Not After : Feb 1 09:00:23 2025 GMT
Subject: CN=7ad12e76618a647b8e82a9e54cae40b511f438f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:27:94:96:64:67:c1:ea:46:b3:cd:3e:93:47:
9a:2d:60:4f:ef:63:0c:0a:8b:c1:5e:7a:b0:2a:80:
88:dd:8d:f5:86:98:f0:91:0b:d3:89:3d:d3:28:2f:
39:b3:cb:10:0d:45:20:cb:95:0e:cd:65:62:fe:02:
d9:3b:02:b5:70:3b:3c:2b:8e:ee:38:9f:54:1b:83:
7a:f2:ac:08:17:3f:39:59:91:9b:5c:bb:75:6f:b6:
db:e9:1d:cb:f2:f6:bd:75:a6:ca:b8:01:de:ad:dc:
36:71:3d:69:13:b7:66:7d:2f:0e:b3:8a:a6:35:0f:
23:ef:5a:27:2d:a0:05:d4:85:93:97:ac:95:31:fc:
c2:84:f9:b8:f7:c8:bb:23:dc:7d:3d:8b:71:d8:ff:
d1:16:0b:f5:a1:f6:63:0e:20:85:c1:dc:29:f2:8f:
02:7a:88:3c:72:56:c2:46:78:36:62:45:36:44:bc:
8c:ea:c9:b0:32:b6:e6:9d:4c:90:05:43:95:10:d4:
40:59:c7:2a:48:5f:28:8c:72:7d:00:ad:a5:67:1c:
ad:f0:7f:46:67:43:5a:2c:ce:20:b2:a0:34:28:5b:
45:eb:a9:96:a7:fb:a1:ff:19:ee:bd:c4:1e:29:fe:
44:86:ea:5e:ca:24:00:cf:3b:2c:d9:d9:6f:66:9f:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D1:2E:76:61:8A:64:7B:8E:82:A9:E5:4C:AE:40:B5:11:F4:38:F4
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:80:44:b8:8e:e0:a2:1e:93:52:db:98:ea:03:71:df:25:bc:
69:19:20:e5:75:bc:e8:2b:59:f9:0b:5e:62:f2:0c:78:3a:42:
3e:db:e2:ca:e9:a1:39:80:e4:d5:37:d8:a0:ec:9b:7a:b3:de:
b7:08:66:7d:75:e2:47:1c:3a:ce:81:50:66:5e:b3:3a:c4:5e:
53:f6:81:f3:ca:cb:43:43:a6:ed:4c:c1:73:be:8c:8c:1d:03:
c2:4a:61:b2:68:0e:5f:db:c6:9e:5d:3c:5e:f4:b2:cb:01:76:
d9:6e:03:f4:40:98:0e:b3:02:36:68:97:19:08:6c:12:1a:e4:
b4:1c:91:38:48:38:de:be:b4:8a:a2:0a:c6:c5:af:2a:a4:5b:
f9:3f:89:5c:88:a0:d7:3f:fa:7e:8c:c5:06:ff:e8:d7:be:28:
82:04:40:fe:c0:89:43:3d:52:5d:3e:67:5f:11:0e:38:5e:a3:
95:46:4d:0e:b9:5e:02:13:48:ff:b5:e3:86:9e:fb:c4:31:38:
d2:81:c7:ee:1a:3a:09:7d:ab:24:c1:38:55:18:11:52:0b:8e:
5c:69:6f:5a:94:8c:82:98:1c:20:bb:0e:03:34:89:f9:27:34:
89:94:46:b8:54:2b:81:5a:32:e4:51:49:db:5f:b2:72:e3:56:
ed:0e:5a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lwF3jlnNDLN6yUIEus1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmE2MjU1ZGVkYWExYTFiNmIxN2NiOGVhOTFlMDJkNDEy
Yjg3MTgwHhcNMjUwMTMxMDkwMDIzWhcNMjUwMjAxMDkwMDIzWjAzMTEwLwYDVQQD
Eyg3YWQxMmU3NjYxOGE2NDdiOGU4MmE5ZTU0Y2FlNDBiNTExZjQzOGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yeUlmRnwepGs80+k0eaLWBP72MM
CovBXnqwKoCI3Y31hpjwkQvTiT3TKC85s8sQDUUgy5UOzWVi/gLZOwK1cDs8K47u
OJ9UG4N68qwIFz85WZGbXLt1b7bb6R3L8va9dabKuAHerdw2cT1pE7dmfS8Os4qm
NQ8j71onLaAF1IWTl6yVMfzChPm498i7I9x9PYtx2P/RFgv1ofZjDiCFwdwp8o8C
eog8clbCRng2YkU2RLyM6smwMrbmnUyQBUOVENRAWccqSF8ojHJ9AK2lZxyt8H9G
Z0NaLM4gsqA0KFtF66mWp/uh/xnuvcQeKf5EhupeyiQAzzss2dlvZp9D5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrRLnZhimR7joKp5UyuQLUR9Dj0MB8GA1UdIwQY
MBaAFF+6YlXe2qGhtrF8uOqR4C1BK4cYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEt
NjFlNTEyYmEyNWI3LzEvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEtNjFlNTEyYmEyNWI3
LzEvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoBEuI7g
oh6TUtuY6gNx3yW8aRkg5XW86CtZ+QteYvIMeDpCPtviyumhOYDk1TfYoOyberPe
twhmfXXiRxw6zoFQZl6zOsReU/aB88rLQ0Om7UzBc76MjB0DwkphsmgOX9vGnl08
XvSyywF22W4D9ECYDrMCNmiXGQhsEhrktByROEg43r60iqIKxsWvKqRb+T+JXIig
1z/6fozFBv/o174oggRA/sCJQz1SXT5nXxEOOF6jlUZNDrleAhNI/7Xjhp77xDE4
0oHH7ho6CX2rJME4VRgRUguOXGlvWpSMgpgcILsOAzSJ+Sc0iZRGuFQrgVoy5FFJ
21+ycuNW7Q5aUQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:10 2025 by rpki-client on console-fra.rpki-client.org