Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
File: kPZLEhCNmzZnea-6z0gvefjA4xo.mft (raw, json)
Hash identifier: rPWnfEc38Bk32vYRLy7NUaoCLL89GF+GvPEPoH+coPc=
Subject key identifier: 3E:21:F9:5B:0F:36:A0:51:5E:38:40:C8:0F:9C:3F:D4:BC:0B:E4:7C
Authority key identifier: 90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
Certificate issuer: /CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Certificate serial: 0194BABB8FD8B826ADC172D8FB5A1EBBB03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
Manifest number: 37
Signing time: Fri 31 Jan 2025 05:00:41 +0000
Manifest this update: Fri 31 Jan 2025 05:00:41 +0000
Manifest next update: Sat 01 Feb 2025 05:00:41 +0000
Files and hashes: 1: hnM5W0U-Qj_uQRhaO3TbcAuM76o.roa (hash: 4rFXrF5OPsxPLyOZLu+yOTZUft5NKdXEPlgvLrZwpqk=)
2: kPZLEhCNmzZnea-6z0gvefjA4xo.crl (hash: 1Fcyz3jl0dlD0oPAOC06VecTUHDiNHEE3OGxVrRGzlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:8f:d8:b8:26:ad:c1:72:d8:fb:5a:1e:bb:b0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Validity
Not Before: Jan 31 05:00:41 2025 GMT
Not After : Feb 1 05:00:41 2025 GMT
Subject: CN=3e21f95b0f36a0515e3840c80f9c3fd4bc0be47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:63:8a:54:0d:a2:27:2b:77:24:76:b6:96:
25:a5:5f:94:52:55:66:17:c1:85:85:d4:01:82:4b:
c8:be:ca:fc:4b:45:41:f4:5a:d5:ca:cb:c1:4f:79:
20:eb:d8:a2:cd:69:57:6d:2e:a3:50:d1:d4:fc:b5:
1e:8b:f4:13:b7:20:01:27:9b:3d:5c:63:46:68:cf:
54:8e:f6:2e:76:63:42:1c:dd:db:da:a0:3f:c4:f7:
9c:7b:9d:a1:d3:51:63:41:23:28:b9:86:ed:6d:78:
6a:24:d2:44:c6:99:b7:88:09:de:32:ae:a1:22:3d:
ae:af:48:9a:5d:a5:16:74:ea:c7:e1:0b:85:95:7f:
31:c2:8e:a9:90:24:64:87:52:14:64:44:f7:2c:34:
ef:91:70:ac:53:e5:7c:50:34:5a:ce:62:af:93:f5:
b1:ab:2a:df:ba:98:11:be:d3:fb:6f:23:19:16:af:
9d:11:1b:61:83:c8:10:0c:fe:c3:41:e8:61:c7:d1:
ce:63:cb:a9:57:af:df:65:f8:21:32:1f:7e:75:07:
a9:48:88:36:10:5c:b4:8d:8f:71:5b:70:6c:3d:cd:
85:f5:fb:b5:97:cf:ce:90:f9:59:fb:d4:c7:02:26:
b4:fb:a1:6b:b4:3b:b8:b6:90:85:2b:41:8a:2b:c3:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:21:F9:5B:0F:36:A0:51:5E:38:40:C8:0F:9C:3F:D4:BC:0B:E4:7C
X509v3 Authority Key Identifier:
keyid:90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e8:0c:a2:e5:8c:de:d7:66:ab:8b:53:04:65:80:be:ae:e0:
f7:d4:78:17:2d:ee:c3:ed:eb:e9:4f:f8:63:36:b2:31:4d:e2:
36:e4:9d:43:00:07:9c:79:d7:07:05:c3:50:b9:9c:53:b4:3e:
20:14:81:09:dc:9c:bf:f2:77:96:97:6a:d6:d3:f8:ca:55:64:
fc:42:ec:54:38:45:86:87:d2:14:b7:a2:a5:a7:fd:c7:d3:0c:
ef:d4:7b:da:28:de:e4:16:da:eb:c9:74:c6:44:d0:20:90:7f:
85:08:15:5d:37:d7:7c:9b:05:99:56:7f:59:d7:e8:3d:99:9c:
85:71:f1:8e:26:6f:59:49:f9:77:3b:e5:24:16:51:f0:e5:dd:
ca:0e:42:35:b7:1a:39:ce:b1:29:74:b0:ec:44:f4:f9:3e:82:
dd:ef:f3:a6:30:31:9c:86:f0:18:a9:5b:a9:33:06:de:73:ff:
9b:59:0c:14:6b:c1:a2:ab:cf:2e:23:30:c3:94:ea:85:e9:34:
04:47:03:59:bb:55:87:a2:22:ec:02:ca:41:d3:61:42:a9:4d:
4d:f9:54:c4:20:90:09:3c:2a:f5:9a:55:42:58:bd:ff:4c:70:
cf:fc:5b:7d:24:a4:23:e5:3d:c0:c8:41:0f:a6:a6:8f:a6:8b:
b9:d3:f7:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u4/YuCatwXLY+1oeu7A7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjY0YjEyMTA4ZDliMzY2Nzc5YWZiYWNmNDgyZjc5Zjhj
MGUzMWEwHhcNMjUwMTMxMDUwMDQxWhcNMjUwMjAxMDUwMDQxWjAzMTEwLwYDVQQD
EygzZTIxZjk1YjBmMzZhMDUxNWUzODQwYzgwZjljM2ZkNGJjMGJlNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVxjilQNoicrdyR2tpYlpV+UUlVm
F8GFhdQBgkvIvsr8S0VB9FrVysvBT3kg69iizWlXbS6jUNHU/LUei/QTtyABJ5s9
XGNGaM9UjvYudmNCHN3b2qA/xPece52h01FjQSMouYbtbXhqJNJExpm3iAneMq6h
Ij2ur0iaXaUWdOrH4QuFlX8xwo6pkCRkh1IUZET3LDTvkXCsU+V8UDRazmKvk/Wx
qyrfupgRvtP7byMZFq+dERthg8gQDP7DQehhx9HOY8upV6/fZfghMh9+dQepSIg2
EFy0jY9xW3BsPc2F9fu1l8/OkPlZ+9THAia0+6FrtDu4tpCFK0GKK8P2GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4h+VsPNqBRXjhAyA+cP9S8C+R8MB8GA1UdIwQY
MBaAFJD2SxIQjZs2Z3mvus9IL3n4wOMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BaTEVoQ05telpuZWEtNnowZ3ZlZmpBNHhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mMTlmNjItY2FkZS00MmM5LWE3NTct
MWRjYjBiYzdhOTZhLzEva1BaTEVoQ05telpuZWEtNnowZ3ZlZmpBNHhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mMTlmNjItY2FkZS00MmM5LWE3NTctMWRjYjBiYzdhOTZh
LzEva1BaTEVoQ05telpuZWEtNnowZ3ZlZmpBNHhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcegMouWM
3tdmq4tTBGWAvq7g99R4Fy3uw+3r6U/4YzayMU3iNuSdQwAHnHnXBwXDULmcU7Q+
IBSBCdycv/J3lpdq1tP4ylVk/ELsVDhFhofSFLeipaf9x9MM79R72ije5Bba68l0
xkTQIJB/hQgVXTfXfJsFmVZ/WdfoPZmchXHxjiZvWUn5dzvlJBZR8OXdyg5CNbca
Oc6xKXSw7ET0+T6C3e/zpjAxnIbwGKlbqTMG3nP/m1kMFGvBoqvPLiMww5Tqhek0
BEcDWbtVh6Ii7ALKQdNhQqlNTflUxCCQCTwq9ZpVQli9/0xwz/xbfSSkI+U9wMhB
D6amj6aLudP3gQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:58 2025 by rpki-client on console-fra.rpki-client.org