Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
File: 9-5cHIBMM_3jPZsIuRn3PTHQttk.mft (raw, json)
Hash identifier: Gq9MYI21SIHLlbHH/bcZyYz5gAp9P6LFj0RjwUICVB8=
Subject key identifier: 08:DF:33:7C:8D:79:B5:6E:DB:2D:AA:2D:EA:C2:25:72:F4:0B:33:93
Authority key identifier: F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
Certificate issuer: /CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Certificate serial: 0194BABB143D6BAF927DE9E3D6FD33428049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
Manifest number: 08A0
Signing time: Fri 31 Jan 2025 05:00:09 +0000
Manifest this update: Fri 31 Jan 2025 05:00:09 +0000
Manifest next update: Sat 01 Feb 2025 05:00:09 +0000
Files and hashes: 1: 9-5cHIBMM_3jPZsIuRn3PTHQttk.crl (hash: ggAGJSh3NTt3kCpS0U/NFFOVNxlu+6uVIBHLHBKb6D4=)
2: VIIA5VZpizTIGxWzHyr_ZNDV3cA.roa (hash: cehPDwufBxU4/kiVLRiGeuXvq0MlYpc57MWfPb+PZlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:14:3d:6b:af:92:7d:e9:e3:d6:fd:33:42:80:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Validity
Not Before: Jan 31 05:00:09 2025 GMT
Not After : Feb 1 05:00:09 2025 GMT
Subject: CN=08df337c8d79b56edb2daa2deac22572f40b3393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:d1:f0:da:8a:04:84:38:08:ca:e6:ee:5a:
fc:89:8a:97:ba:f1:ae:14:ff:f9:16:8e:0e:e2:a5:
80:c2:8e:9b:f6:ff:9d:e8:38:ca:ee:35:6b:23:9d:
d7:12:79:a2:68:07:a0:d4:32:0b:3b:57:62:6e:b9:
11:bf:01:18:5d:a7:01:6f:06:bd:fd:80:96:07:9d:
86:e6:7f:59:5f:72:a3:35:b9:3a:0e:9f:03:20:c1:
39:5c:53:bc:d3:fa:c5:03:03:86:a7:27:2e:99:a7:
94:a2:ee:2f:07:f1:8d:ed:4e:d5:64:b9:f2:c2:1c:
ca:22:39:fa:3d:19:f2:c7:2c:65:b1:ce:a1:83:45:
52:8b:9e:da:58:28:8e:09:17:71:e2:29:db:22:bf:
2d:2b:0a:82:dc:c0:c6:a3:45:c5:85:b8:27:eb:1c:
de:2c:32:43:30:0a:1d:fc:c2:2c:ee:a8:e8:c9:56:
af:22:b7:72:2e:76:6f:96:69:05:fd:80:a5:77:5a:
b2:1f:7a:dc:20:52:17:a9:91:41:1a:ed:62:9f:7c:
63:31:8a:98:f2:1d:ee:8b:76:b6:9c:d7:7c:55:92:
3f:47:c7:22:3d:1d:8a:90:9e:ab:99:59:99:e6:b9:
72:7f:82:23:b1:e0:ce:49:e7:70:1f:34:3f:77:b6:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DF:33:7C:8D:79:B5:6E:DB:2D:AA:2D:EA:C2:25:72:F4:0B:33:93
X509v3 Authority Key Identifier:
keyid:F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:db:45:c5:ac:fc:d5:22:f2:be:9d:2b:6d:61:01:0f:82:b9:
2d:8c:e0:58:3f:63:68:75:f9:97:5f:18:09:5f:cd:3b:64:ba:
33:54:56:e2:43:ab:22:43:b2:a8:ac:e2:16:28:5a:73:4b:48:
62:35:18:9c:70:83:0b:22:48:84:12:2f:f0:cd:4f:8b:81:65:
34:cd:97:12:9e:da:dc:d0:6f:2d:8d:2c:c2:83:e9:ad:9e:7a:
3b:78:5c:d3:11:a5:69:2d:89:a8:7b:60:ae:f9:1e:07:fd:e9:
77:59:00:4c:28:7e:69:1e:b9:a4:f7:77:d0:6e:00:6a:9c:53:
cf:7d:8c:81:67:58:e4:df:45:9a:f6:f5:04:92:67:a5:9c:24:
a8:89:01:c0:97:49:33:eb:96:65:10:36:9b:6a:d7:c2:67:8d:
75:2a:de:64:b6:0d:89:51:c3:46:70:5b:1f:77:8d:56:a3:39:
7b:92:c0:05:6d:9a:99:c9:25:65:4b:ce:8b:90:b4:6d:23:8b:
b7:72:20:32:66:2e:61:9f:04:09:f1:98:8d:20:ff:22:3b:a3:
77:2f:5e:4d:fb:8f:1a:3f:6f:40:ff:da:e4:81:75:70:04:39:
8e:cc:d4:b7:98:f1:e1:af:5d:12:ed:44:cd:e6:62:4a:ac:ad:
44:aa:b9:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uxQ9a6+Sfenj1v0zQoBJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZWU1YzFjODA0YzMzZmRlMzNkOWIwOGI5MTlmNzNkMzFk
MGI2ZDkwHhcNMjUwMTMxMDUwMDA5WhcNMjUwMjAxMDUwMDA5WjAzMTEwLwYDVQQD
EygwOGRmMzM3YzhkNzliNTZlZGIyZGFhMmRlYWMyMjU3MmY0MGIzMzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk3R8NqKBIQ4CMrm7lr8iYqXuvGu
FP/5Fo4O4qWAwo6b9v+d6DjK7jVrI53XEnmiaAeg1DILO1dibrkRvwEYXacBbwa9
/YCWB52G5n9ZX3KjNbk6Dp8DIME5XFO80/rFAwOGpycumaeUou4vB/GN7U7VZLny
whzKIjn6PRnyxyxlsc6hg0VSi57aWCiOCRdx4inbIr8tKwqC3MDGo0XFhbgn6xze
LDJDMAod/MIs7qjoyVavIrdyLnZvlmkF/YCld1qyH3rcIFIXqZFBGu1in3xjMYqY
8h3ui3a2nNd8VZI/R8ciPR2KkJ6rmVmZ5rlyf4IjseDOSedwHzQ/d7aJ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjfM3yNebVu2y2qLerCJXL0CzOTMB8GA1UdIwQY
MBaAFPfuXByATDP94z2bCLkZ9z0x0LbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS01Y0hJQk1NXzNqUFpzSXVSbjNQVEhRdHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81YjI4ZTEtZjcwYy00MmQ0LTgzOGMt
ZTA4ZDUzZjA5NjEyLzEvOS01Y0hJQk1NXzNqUFpzSXVSbjNQVEhRdHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81YjI4ZTEtZjcwYy00MmQ0LTgzOGMtZTA4ZDUzZjA5NjEy
LzEvOS01Y0hJQk1NXzNqUFpzSXVSbjNQVEhRdHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNtFxaz8
1SLyvp0rbWEBD4K5LYzgWD9jaHX5l18YCV/NO2S6M1RW4kOrIkOyqKziFihac0tI
YjUYnHCDCyJIhBIv8M1Pi4FlNM2XEp7a3NBvLY0swoPprZ56O3hc0xGlaS2JqHtg
rvkeB/3pd1kATCh+aR65pPd30G4AapxTz32MgWdY5N9Fmvb1BJJnpZwkqIkBwJdJ
M+uWZRA2m2rXwmeNdSreZLYNiVHDRnBbH3eNVqM5e5LABW2amcklZUvOi5C0bSOL
t3IgMmYuYZ8ECfGYjSD/Ijujdy9eTfuPGj9vQP/a5IF1cAQ5jszUt5jx4a9dEu1E
zeZiSqytRKq5Gg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:45 2025 by rpki-client on console-fra.rpki-client.org