Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: +1TviLZ4CD8eOJnkKVtmb41/tsRICpAlstSY3CRoag4=
Subject key identifier: 0F:BE:17:AE:C2:F0:CF:4E:96:D3:71:F0:15:E8:8A:64:15:BA:98:4D
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 0194BB5FEBC8791704D586B06AD3E6907267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0AA7
Signing time: Fri 31 Jan 2025 08:00:13 +0000
Manifest this update: Fri 31 Jan 2025 08:00:13 +0000
Manifest next update: Sat 01 Feb 2025 08:00:13 +0000
Files and hashes: 1: JifjCFTHwQfGjK32vaW76jlBuD0.roa (hash: h7HzreIgn1zkAe8+SyKhsfHeNQ03cg69awNyBY5xA1I=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: uho+NiewHfDX4WEIOGOTIWme7tihnI+2QMfT37lNls4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:eb:c8:79:17:04:d5:86:b0:6a:d3:e6:90:72:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Jan 31 08:00:13 2025 GMT
Not After : Feb 1 08:00:13 2025 GMT
Subject: CN=0fbe17aec2f0cf4e96d371f015e88a6415ba984d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:6d:d8:11:27:5d:9d:f3:94:e6:c8:50:64:
f0:4c:a6:f0:4f:ce:f9:a1:84:d3:5d:b7:98:7b:7d:
15:40:0d:05:f1:3e:14:7d:9f:05:91:e7:11:5b:d6:
a4:7f:df:95:cb:24:4e:e1:bc:d6:67:28:50:ef:b7:
c5:06:4c:0c:82:bd:0d:80:b3:da:54:98:79:ba:87:
17:e2:da:71:e2:bf:4c:d5:73:2f:0f:98:63:b8:45:
e3:4b:b0:59:ad:e9:23:d5:1c:a9:e9:27:da:ad:5b:
a7:1b:a0:e8:ea:dc:b1:96:60:e2:98:13:23:77:31:
7f:2a:f0:0e:c9:6b:64:c7:46:fe:1a:71:cf:70:40:
d9:67:c2:fa:8e:67:2a:81:08:56:d9:23:8b:d3:57:
bb:76:78:58:00:7d:e4:6f:cb:cd:a1:6d:b0:db:ac:
1f:fa:3a:85:f7:6c:f5:e1:7b:d5:c8:a9:f2:3d:b1:
de:b7:19:d3:f8:6a:11:53:2a:33:ab:6d:f7:de:80:
6d:98:ed:f5:84:42:d3:03:50:78:64:0d:ae:51:83:
ad:2b:2d:5b:14:3d:0f:1b:0d:cd:be:4f:0c:57:75:
ca:87:fa:0f:25:ea:d1:b9:6e:33:d6:21:2c:92:6c:
84:9b:a5:86:be:d9:88:fc:d0:50:43:67:25:d9:81:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BE:17:AE:C2:F0:CF:4E:96:D3:71:F0:15:E8:8A:64:15:BA:98:4D
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:77:ca:c7:57:52:24:d3:94:92:83:8e:cb:86:29:02:68:cd:
43:e5:50:95:48:84:0f:3a:7e:ee:90:e4:b8:ab:44:3d:38:4f:
3a:6c:bf:35:a7:19:07:d4:b0:eb:6c:36:54:43:2c:88:f0:3c:
69:f0:01:f4:74:32:ec:68:f6:72:8e:bd:64:93:a6:69:30:38:
7a:a7:6d:95:1e:44:cb:40:13:4f:09:16:84:1a:3b:a2:c0:57:
60:62:48:5f:56:e2:d3:54:e2:99:65:bd:06:a0:d7:16:10:41:
5a:90:a1:f7:f4:54:6b:21:87:53:51:97:bc:1c:9f:58:47:9e:
eb:5d:0a:3f:57:b6:76:5a:2a:81:6d:1c:3b:42:4d:98:eb:89:
fa:a6:92:75:19:a4:f6:a0:9e:15:4f:37:8c:19:8c:bb:e6:9d:
ff:8a:44:04:4e:35:fb:42:30:52:93:b5:fa:a5:39:a6:df:51:
23:65:6b:c1:59:9d:80:66:fb:15:b5:2d:9f:d1:c6:dc:72:70:
6a:69:c1:35:6d:6b:a4:76:42:81:de:f6:1f:e2:8e:ff:c1:54:
8c:36:f4:1d:6a:b3:76:7b:cb:c6:6b:ca:eb:ff:52:66:c8:dd:
d3:4d:98:49:92:16:77:ca:79:dd:d8:55:9c:f2:43:63:56:4c:
05:52:82:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X+vIeRcE1YawatPmkHJnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMmYxYTExZGUxOTBjODFjMGI3NzUyY2Y1MmI1Njk0MjVk
YzU0Y2IwHhcNMjUwMTMxMDgwMDEzWhcNMjUwMjAxMDgwMDEzWjAzMTEwLwYDVQQD
EygwZmJlMTdhZWMyZjBjZjRlOTZkMzcxZjAxNWU4OGE2NDE1YmE5ODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj61t2BEnXZ3zlObIUGTwTKbwT875
oYTTXbeYe30VQA0F8T4UfZ8FkecRW9akf9+VyyRO4bzWZyhQ77fFBkwMgr0NgLPa
VJh5uocX4tpx4r9M1XMvD5hjuEXjS7BZrekj1Ryp6SfarVunG6Do6tyxlmDimBMj
dzF/KvAOyWtkx0b+GnHPcEDZZ8L6jmcqgQhW2SOL01e7dnhYAH3kb8vNoW2w26wf
+jqF92z14XvVyKnyPbHetxnT+GoRUyozq2333oBtmO31hELTA1B4ZA2uUYOtKy1b
FD0PGw3Nvk8MV3XKh/oPJerRuW4z1iEskmyEm6WGvtmI/NBQQ2cl2YGWiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA++F67C8M9OltNx8BXoimQVuphNMB8GA1UdIwQY
MBaAFLovGhHeGQyBwLd1LPUrVpQl3FTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWk4YUVkNFpESUhBdDNVczlTdFdsQ1hjVk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mOTY1MzItZDdmZi00NTM4LWJjY2Qt
MmQzOGU3Nzc5MzQ4LzEvdWk4YUVkNFpESUhBdDNVczlTdFdsQ1hjVk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mOTY1MzItZDdmZi00NTM4LWJjY2QtMmQzOGU3Nzc5MzQ4
LzEvdWk4YUVkNFpESUhBdDNVczlTdFdsQ1hjVk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXfKx1dS
JNOUkoOOy4YpAmjNQ+VQlUiEDzp+7pDkuKtEPThPOmy/NacZB9Sw62w2VEMsiPA8
afAB9HQy7Gj2co69ZJOmaTA4eqdtlR5Ey0ATTwkWhBo7osBXYGJIX1bi01TimWW9
BqDXFhBBWpCh9/RUayGHU1GXvByfWEee610KP1e2dloqgW0cO0JNmOuJ+qaSdRmk
9qCeFU83jBmMu+ad/4pEBE41+0IwUpO1+qU5pt9RI2VrwVmdgGb7FbUtn9HG3HJw
amnBNW1rpHZCgd72H+KO/8FUjDb0HWqzdnvLxmvK6/9SZsjd002YSZIWd8p53dhV
nPJDY1ZMBVKC3w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:16 2025 by rpki-client on console-fra.rpki-client.org