Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File: S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier: NVTRFxK9xlsNmVIRFfBZXEVEf+6IbuhpVZn7RnJzZ/c=
Subject key identifier: FD:A1:78:42:0E:FD:F8:8F:66:C8:CD:1A:4F:D7:80:B1:A8:ED:39:6F
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 0194BB605880CD7B8172569C5E1980A3FF40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number: 1309
Signing time: Fri 31 Jan 2025 08:00:40 +0000
Manifest this update: Fri 31 Jan 2025 08:00:40 +0000
Manifest next update: Sat 01 Feb 2025 08:00:40 +0000
Files and hashes: 1: 8OZ4Eudn-Zmm9BJklLqYUOhBro8.roa (hash: nQrHTPYYHsaKcsU7K7NBUNZKUwu8kquBvMwb0t9InZk=)
2: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: XW7x3dfYxWOup0jON/rHNolVZMBQJZ6wL74zd0J89XI=)
3: rP00SjYOc7kI37LHeR0akx0WLbw.roa (hash: HwxnGSpBCBewjdHMOMeKuWHUwmAgwVnpqM4EW67Q304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:58:80:cd:7b:81:72:56:9c:5e:19:80:a3:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Jan 31 08:00:40 2025 GMT
Not After : Feb 1 08:00:40 2025 GMT
Subject: CN=fda178420efdf88f66c8cd1a4fd780b1a8ed396f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:cc:f0:c0:23:bf:a9:fe:3a:35:3b:ea:69:
0a:08:a7:d3:6e:42:9a:0e:b1:11:aa:66:15:5d:e0:
59:5f:b1:1a:9d:5e:1f:7e:b9:9a:be:6c:ec:77:22:
00:a4:ea:71:df:8b:9d:3e:76:08:93:12:3c:6b:2f:
eb:10:07:1d:e3:fa:64:23:1a:9a:4d:33:96:2f:85:
8f:e6:fb:45:fa:a0:90:22:2b:4b:33:12:62:2d:51:
d4:de:7e:8c:b4:b2:18:2c:2b:69:4d:6b:44:bf:27:
a6:43:ed:c2:29:80:6b:23:39:15:73:54:23:b0:ac:
0a:3c:45:f9:ce:5a:73:e6:c3:a9:45:ef:41:89:b6:
b0:41:6e:98:82:a2:44:60:ff:14:15:d2:43:73:72:
79:ad:da:84:d7:a6:c3:8d:2a:3c:81:29:b5:6a:d3:
b3:79:38:69:82:20:00:7e:a9:3b:fa:e2:d2:b8:50:
03:54:98:17:34:7d:4d:06:5f:2b:e1:9d:c2:13:c4:
ee:7a:1e:bd:24:59:28:03:a0:f3:cc:22:49:b6:5b:
da:34:94:a4:48:f7:c6:8e:57:84:44:a4:77:bb:ad:
9c:ec:d4:aa:52:8a:ad:4c:03:d7:00:5e:a9:15:6c:
67:d2:5b:16:4a:55:c8:b7:90:15:18:a2:c7:b7:0f:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A1:78:42:0E:FD:F8:8F:66:C8:CD:1A:4F:D7:80:B1:A8:ED:39:6F
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bc:9e:c2:2f:a6:69:ad:5e:03:a2:08:2c:5e:64:64:4f:72:
2b:be:82:f1:cf:2d:84:0d:d0:88:17:48:c2:47:a6:8e:10:c5:
26:4f:6f:e4:75:74:11:01:f8:2d:2c:6b:59:5b:57:3a:30:33:
c0:13:12:38:3e:b2:c8:b8:bb:ea:cb:14:66:76:4b:16:b6:00:
d3:7d:1e:68:5d:84:05:d4:dd:d6:a8:c5:13:f7:c3:4e:59:ef:
29:8b:3c:39:53:fb:0b:3d:bb:89:5f:8e:aa:92:aa:4a:93:53:
c1:71:dc:0e:3b:8d:0d:14:dd:8c:4d:b5:9b:d0:2b:69:1f:0d:
f9:7c:ec:c3:4e:2e:74:d4:e0:47:9e:0a:1c:f5:57:81:43:67:
bb:c2:9c:2a:bd:e3:5d:bb:02:9a:7d:1c:84:f9:97:68:cc:d7:
bc:49:fc:3b:8e:8d:d7:33:37:ff:9b:03:76:e7:b1:e0:17:da:
c0:2a:6a:44:ef:96:42:cf:c6:d0:a6:0d:e1:c3:71:fe:bf:e8:
bf:ac:a1:bd:34:b6:90:74:7a:97:a2:4c:c1:55:8a:af:7e:86:
b8:53:64:17:29:dc:f3:82:67:8d:4a:34:89:57:81:45:4a:c8:
b0:66:28:8c:9f:90:92:e7:4c:b3:4a:3e:76:73:25:d6:e5:72:
f6:fc:c5:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YFiAzXuBclacXhmAo/9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiODcwMzNmYzZhODdkM2I4ZDBjYjNjZTFhYjJiYWJiZTUy
YmEzMTEwHhcNMjUwMTMxMDgwMDQwWhcNMjUwMjAxMDgwMDQwWjAzMTEwLwYDVQQD
EyhmZGExNzg0MjBlZmRmODhmNjZjOGNkMWE0ZmQ3ODBiMWE4ZWQzOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPPM8MAjv6n+OjU76mkKCKfTbkKa
DrERqmYVXeBZX7EanV4ffrmavmzsdyIApOpx34udPnYIkxI8ay/rEAcd4/pkIxqa
TTOWL4WP5vtF+qCQIitLMxJiLVHU3n6MtLIYLCtpTWtEvyemQ+3CKYBrIzkVc1Qj
sKwKPEX5zlpz5sOpRe9BibawQW6YgqJEYP8UFdJDc3J5rdqE16bDjSo8gSm1atOz
eThpgiAAfqk7+uLSuFADVJgXNH1NBl8r4Z3CE8Tueh69JFkoA6DzzCJJtlvaNJSk
SPfGjleERKR3u62c7NSqUoqtTAPXAF6pFWxn0lsWSlXIt5AVGKLHtw/wawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2heEIO/fiPZsjNGk/XgLGo7TlvMB8GA1UdIwQY
MBaAFEuHAz/GqH07jQyzzhqyurvlK6MRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzRjRFA4YW9mVHVORExQT0dySzZ1LVVyb3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZGZiY2YtMzEzYi00N2I5LWJmOGUt
YTc3OGEwYzE0ODU5LzEvUzRjRFA4YW9mVHVORExQT0dySzZ1LVVyb3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82ZGZiY2YtMzEzYi00N2I5LWJmOGUtYTc3OGEwYzE0ODU5
LzEvUzRjRFA4YW9mVHVORExQT0dySzZ1LVVyb3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbyewi+m
aa1eA6IILF5kZE9yK76C8c8thA3QiBdIwkemjhDFJk9v5HV0EQH4LSxrWVtXOjAz
wBMSOD6yyLi76ssUZnZLFrYA030eaF2EBdTd1qjFE/fDTlnvKYs8OVP7Cz27iV+O
qpKqSpNTwXHcDjuNDRTdjE21m9AraR8N+Xzsw04udNTgR54KHPVXgUNnu8KcKr3j
XbsCmn0chPmXaMzXvEn8O46N1zM3/5sDduex4BfawCpqRO+WQs/G0KYN4cNx/r/o
v6yhvTS2kHR6l6JMwVWKr36GuFNkFync84JnjUo0iVeBRUrIsGYojJ+QkudMs0o+
dnMl1uVy9vzFXw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:47 2025 by rpki-client on console-fra.rpki-client.org