Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
File: cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json)
Hash identifier: J/yq8B0hDBSMj7AN8Rqc3+ZA0hR5xGsRDzSH1xcKnhc=
Subject key identifier: E2:50:6C:D2:9B:45:76:A1:89:64:1D:65:62:E1:2B:99:22:59:94:F3
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial: 0194BB293B6913D4A822B2ED178F81974327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
Manifest number: 1035
Signing time: Fri 31 Jan 2025 07:00:29 +0000
Manifest this update: Fri 31 Jan 2025 07:00:29 +0000
Manifest next update: Sat 01 Feb 2025 07:00:29 +0000
Files and hashes: 1: 30-4U9nQ-D0aJwZBJ1-bMuclPkc.roa (hash: B7rpxNi8g0T+2AMmv+mqO6f85+SxNjEeES2xtaw9X3k=)
2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: 2xLDXn0uNWrJZGy9hEHVe8xTJuANfWeO3pYHppN05N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:3b:69:13:d4:a8:22:b2:ed:17:8f:81:97:43:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Validity
Not Before: Jan 31 07:00:29 2025 GMT
Not After : Feb 1 07:00:29 2025 GMT
Subject: CN=e2506cd29b4576a189641d6562e12b99225994f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:d5:cd:2b:4f:26:64:27:44:c0:c0:ca:31:
91:1e:e5:97:15:65:9c:5b:17:ce:f6:b9:90:a9:8b:
2d:b0:32:74:e9:cd:8f:b8:9f:bf:de:29:f5:e1:56:
01:8e:92:06:4f:4e:26:56:c8:be:07:5c:c5:16:90:
b7:c5:e3:7d:84:de:c0:a6:44:a2:43:d8:e9:71:85:
a3:ab:e4:35:f6:7a:2b:ae:b1:24:12:a5:07:de:a1:
79:2a:5e:f2:34:65:35:aa:44:d3:dc:20:32:c9:d2:
fb:ad:2c:45:a8:e1:26:0d:56:38:ef:30:10:7a:97:
6c:9f:4e:b3:a0:98:9a:5c:ee:3a:bc:a1:17:19:5b:
db:2f:15:19:58:a4:5c:50:a2:89:52:71:18:ca:cf:
a4:c9:ff:e4:7e:92:1e:4a:80:91:f8:25:71:9a:12:
9f:c3:a5:25:17:ba:e6:49:2d:4f:f5:10:7a:8e:9d:
3c:82:51:6a:5c:bc:a5:bb:82:50:e3:5f:b3:2b:a8:
41:73:98:6a:05:0d:a5:f0:b0:c5:da:d8:dc:8b:69:
9a:38:71:f2:c6:0c:5f:ac:f5:71:bb:05:e0:1a:5b:
da:91:73:46:5c:53:cb:21:ed:3a:f3:d7:2a:f9:44:
a6:ba:c1:66:bc:f6:04:9a:a7:e8:e0:43:64:76:49:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:50:6C:D2:9B:45:76:A1:89:64:1D:65:62:E1:2B:99:22:59:94:F3
X509v3 Authority Key Identifier:
keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2d:2a:d0:fa:84:ba:f8:f5:4f:9a:61:91:2d:e8:27:b6:42:
79:4b:71:8c:2e:00:88:31:1c:8d:9f:2a:d6:0e:2e:13:b7:2c:
d2:ce:fd:6d:34:a7:93:4f:36:95:7b:6f:26:4f:63:cd:f3:80:
e7:8f:50:94:4a:f2:e3:35:05:7c:9e:75:d3:e6:2e:f8:c9:10:
dc:b1:05:a0:f3:0f:68:35:20:38:66:85:d0:6e:fa:b1:42:ec:
f4:9b:c5:c0:ed:99:ef:d4:11:63:56:6b:01:e7:18:87:ac:ae:
8f:f1:a4:9e:0d:ff:d0:17:58:33:9b:05:a2:f7:ec:40:17:d7:
2b:ff:a8:26:57:3a:60:52:1a:4c:bc:7f:f0:b6:e6:3e:f6:6b:
26:39:95:b1:90:b4:e5:16:21:18:5e:59:ab:72:f9:ab:9e:52:
72:d1:87:bc:6d:90:0e:58:e8:25:9e:e7:0b:30:49:ca:9a:a7:
44:dc:a6:e5:43:9b:8e:b5:97:3f:dc:0e:79:58:8b:29:c8:ce:
39:be:4a:c5:bc:56:42:e4:48:17:c1:a3:25:24:96:6e:bd:ca:
e8:1d:4c:1e:87:2b:a9:cd:02:82:0e:e4:ce:bf:30:b2:b0:79:
47:c6:66:a6:ac:96:3b:1b:24:7d:71:82:be:43:e9:f4:72:16:
9c:62:b3:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KTtpE9SoIrLtF4+Bl0MnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzdhMDJhYTU0NmRkMWEwYTZhODJkMDVkOTBiMDkxN2Ux
NTQ1ZWQwHhcNMjUwMTMxMDcwMDI5WhcNMjUwMjAxMDcwMDI5WjAzMTEwLwYDVQQD
EyhlMjUwNmNkMjliNDU3NmExODk2NDFkNjU2MmUxMmI5OTIyNTk5NGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsjVzStPJmQnRMDAyjGRHuWXFWWc
WxfO9rmQqYstsDJ06c2PuJ+/3in14VYBjpIGT04mVsi+B1zFFpC3xeN9hN7ApkSi
Q9jpcYWjq+Q19norrrEkEqUH3qF5Kl7yNGU1qkTT3CAyydL7rSxFqOEmDVY47zAQ
epdsn06zoJiaXO46vKEXGVvbLxUZWKRcUKKJUnEYys+kyf/kfpIeSoCR+CVxmhKf
w6UlF7rmSS1P9RB6jp08glFqXLylu4JQ41+zK6hBc5hqBQ2l8LDF2tjci2maOHHy
xgxfrPVxuwXgGlvakXNGXFPLIe0689cq+USmusFmvPYEmqfo4ENkdkl74QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJQbNKbRXahiWQdZWLhK5kiWZTzMB8GA1UdIwQY
MBaAFHJ3oCqlRt0aCmqC0F2QsJF+FUXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2Yt
ZjQ4OTMwZTQyNjQxLzEvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2YtZjQ4OTMwZTQyNjQx
LzEvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPC0q0PqE
uvj1T5phkS3oJ7ZCeUtxjC4AiDEcjZ8q1g4uE7cs0s79bTSnk082lXtvJk9jzfOA
549QlEry4zUFfJ510+Yu+MkQ3LEFoPMPaDUgOGaF0G76sULs9JvFwO2Z79QRY1Zr
AecYh6yuj/Gkng3/0BdYM5sFovfsQBfXK/+oJlc6YFIaTLx/8LbmPvZrJjmVsZC0
5RYhGF5Zq3L5q55SctGHvG2QDljoJZ7nCzBJypqnRNym5UObjrWXP9wOeViLKcjO
Ob5KxbxWQuRIF8GjJSSWbr3K6B1MHocrqc0Cgg7kzr8wsrB5R8ZmpqyWOxskfXGC
vkPp9HIWnGKz8w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:30 2025 by rpki-client on console-fra.rpki-client.org