Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
File: 5XXe8Yp160XEQHcaziRsUOip0xY.mft (raw, json)
Hash identifier: vykoX8OZ4/cjiIvpBpVcBgLXvLPDaQFpfrMLeokozmM=
Subject key identifier: 97:15:B0:30:30:A6:2F:87:33:BB:B5:A6:8A:1D:21:8D:BC:B7:64:A0
Authority key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
Certificate issuer: /CN=e575def18a75eb45c440771ace246c50e8a9d316
Certificate serial: 0194BAF2871772ABE49CC5C45125F614E1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
Manifest number: 0733
Signing time: Fri 31 Jan 2025 06:00:43 +0000
Manifest this update: Fri 31 Jan 2025 06:00:43 +0000
Manifest next update: Sat 01 Feb 2025 06:00:43 +0000
Files and hashes: 1: 5XXe8Yp160XEQHcaziRsUOip0xY.crl (hash: pFrq2/Gc58+QM6WNlVaEoBusWT9n9cuQ4oq1h4OG2uY=)
2: OSfCvRDn5rwH2xpcMtEUP0sV1D0.roa (hash: YJd7BM/YO/DejIANNT19DgGaGBCVl/athIJy3uYWmVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:87:17:72:ab:e4:9c:c5:c4:51:25:f6:14:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e575def18a75eb45c440771ace246c50e8a9d316
Validity
Not Before: Jan 31 06:00:43 2025 GMT
Not After : Feb 1 06:00:43 2025 GMT
Subject: CN=9715b03030a62f8733bbb5a68a1d218dbcb764a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:86:e0:ae:3c:78:e7:8d:9e:cf:12:87:f0:
96:7c:19:8c:b5:9c:c9:1e:2e:51:60:eb:b6:7c:6c:
52:46:c9:50:09:6c:f0:a1:08:1e:a5:b0:9a:e7:9f:
c7:aa:6d:9c:9e:8b:f4:0c:a5:fb:4b:d4:78:84:f5:
a4:ac:63:4f:c9:e7:c3:c3:68:4d:19:55:ea:e1:89:
a8:91:33:21:50:a0:c6:fa:06:64:0f:ae:ce:77:44:
d3:eb:72:3e:a0:f0:d4:97:1e:41:30:3a:1a:63:1e:
7d:64:ae:88:74:b3:52:0c:f8:9a:46:6b:aa:14:cd:
b9:ff:2f:9f:53:8a:27:87:69:0f:9c:cd:3f:84:ec:
6c:d1:f7:3a:bb:d4:bf:e0:57:dd:fa:3e:42:dc:a9:
01:d1:95:cc:e7:10:a8:b4:3b:a1:da:bc:8b:7f:44:
d0:66:5d:5c:28:eb:99:0f:59:ac:2a:96:2e:0f:bf:
6f:cb:94:6d:7d:8e:8d:7a:df:93:c4:d5:cd:cf:9b:
9e:f7:31:ef:06:7f:72:9e:87:a3:2f:d6:af:fd:e0:
d3:6a:4a:69:4c:8e:ce:af:bf:77:8a:0c:26:25:5a:
8c:0e:46:1c:5f:9e:ee:d4:66:5f:28:39:40:48:6a:
48:ff:b1:0c:2a:f4:a5:3d:ca:91:dd:2a:2e:61:34:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:15:B0:30:30:A6:2F:87:33:BB:B5:A6:8A:1D:21:8D:BC:B7:64:A0
X509v3 Authority Key Identifier:
keyid:E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:84:e5:98:cf:b2:7f:c9:21:46:0e:82:b2:ad:6d:18:e8:e3:
63:a5:f9:e7:73:ab:d1:05:4e:7f:c1:fe:9f:d8:f5:89:fd:48:
f7:2e:b6:eb:5f:a9:1c:9a:3c:2f:be:34:08:42:93:65:03:32:
07:33:79:1b:f8:9a:28:cf:64:25:45:ad:bd:fc:47:d4:e5:78:
d4:3d:86:c1:4f:d7:5c:57:e1:ad:5f:2f:b3:23:e9:4c:3d:95:
f3:46:d9:36:77:f5:f5:dd:03:fa:82:32:c0:fb:01:a5:35:cf:
90:92:18:dd:27:fb:52:55:74:97:05:8e:73:71:64:33:09:b1:
dc:30:09:e6:de:d2:de:ef:e1:de:15:c0:83:9f:0b:75:68:c3:
c4:2d:9f:00:e9:ca:dc:38:11:57:4f:48:b5:5c:72:20:0f:68:
33:d4:de:8c:50:ed:2b:83:45:cf:f1:dc:6e:e7:18:3a:11:2c:
50:72:37:ff:50:fd:93:69:25:c8:3d:63:77:05:da:14:c6:85:
96:5c:18:99:47:2c:63:35:4f:d5:5e:63:ca:27:ad:b5:d3:7e:
81:8a:26:e1:19:c6:39:45:a3:4d:57:9c:be:5c:7d:83:00:21:
7c:95:48:40:53:ed:1f:39:85:63:59:c2:11:a9:a0:c2:4b:96:
1c:98:fd:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68ocXcqvknMXEUSX2FOG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzVkZWYxOGE3NWViNDVjNDQwNzcxYWNlMjQ2YzUwZThh
OWQzMTYwHhcNMjUwMTMxMDYwMDQzWhcNMjUwMjAxMDYwMDQzWjAzMTEwLwYDVQQD
Eyg5NzE1YjAzMDMwYTYyZjg3MzNiYmI1YTY4YTFkMjE4ZGJjYjc2NGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPSG4K48eOeNns8Sh/CWfBmMtZzJ
Hi5RYOu2fGxSRslQCWzwoQgepbCa55/Hqm2cnov0DKX7S9R4hPWkrGNPyefDw2hN
GVXq4YmokTMhUKDG+gZkD67Od0TT63I+oPDUlx5BMDoaYx59ZK6IdLNSDPiaRmuq
FM25/y+fU4onh2kPnM0/hOxs0fc6u9S/4Ffd+j5C3KkB0ZXM5xCotDuh2ryLf0TQ
Zl1cKOuZD1msKpYuD79vy5RtfY6Net+TxNXNz5ue9zHvBn9ynoejL9av/eDTakpp
TI7Or793igwmJVqMDkYcX57u1GZfKDlASGpI/7EMKvSlPcqR3SouYTQYUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcVsDAwpi+HM7u1poodIY28t2SgMB8GA1UdIwQY
MBaAFOV13vGKdetFxEB3Gs4kbFDoqdMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYTA4OTgtMjk3OS00M2FlLThiODkt
ZmI5NzQxMzU5NzI3LzEvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jYTA4OTgtMjk3OS00M2FlLThiODktZmI5NzQxMzU5NzI3
LzEvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJITlmM+y
f8khRg6Csq1tGOjjY6X553Or0QVOf8H+n9j1if1I9y6261+pHJo8L740CEKTZQMy
BzN5G/iaKM9kJUWtvfxH1OV41D2GwU/XXFfhrV8vsyPpTD2V80bZNnf19d0D+oIy
wPsBpTXPkJIY3Sf7UlV0lwWOc3FkMwmx3DAJ5t7S3u/h3hXAg58LdWjDxC2fAOnK
3DgRV09ItVxyIA9oM9TejFDtK4NFz/HcbucYOhEsUHI3/1D9k2klyD1jdwXaFMaF
llwYmUcsYzVP1V5jyiettdN+gYom4RnGOUWjTVecvlx9gwAhfJVIQFPtHzmFY1nC
EamgwkuWHJj9Dw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:52 2025 by rpki-client on console-fra.rpki-client.org