Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
File: UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json)
Hash identifier: HtH2Kam38Wz3Ny56i/n6DbAf1YZCsOHh9xOVOFGpUJc=
Subject key identifier: B1:67:F2:82:B2:12:E5:8D:AD:0A:6B:9C:66:91:D0:AF:24:53:21:F8
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 0194BABB639608968F76653D5F9DF2425849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 05:00:30 +0000
Manifest this update: Fri 31 Jan 2025 05:00:30 +0000
Manifest next update: Sat 01 Feb 2025 05:00:30 +0000
Files and hashes: 1: S6d6ZfQtYglTc5PqBY2Z1atkkFg.roa (hash: t4T7IISC3qIqOuSVfllwo9m13olig0aDm52s2i83g4s=)
2: TunP0FWmuXrf5YzoJj5ZZR9Zd2Q.roa (hash: 7wLHBrznfSkPVYQc5aPKo1rNMxi/Eci6q/qG+jPd+nE=)
3: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: zAO2zZA5UlD0uYIEMPaXnlOG85R7dxjT1Ao2y/8dBac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:63:96:08:96:8f:76:65:3d:5f:9d:f2:42:58:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Jan 31 05:00:30 2025 GMT
Not After : Feb 1 05:00:30 2025 GMT
Subject: CN=b167f282b212e58dad0a6b9c6691d0af245321f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:ab:d6:2f:fd:0f:dd:b1:83:74:90:57:a4:
d7:1a:3c:60:d9:00:f1:bf:d8:5e:59:7c:75:03:fd:
73:87:86:1e:2a:bb:a8:b7:c7:38:1a:27:bd:ae:58:
f0:54:7d:53:57:37:ab:d5:6b:09:05:74:3f:fd:9a:
53:07:a5:5b:59:af:8c:31:c3:91:64:26:5a:a2:5b:
13:97:f8:51:51:dc:f2:fb:56:88:23:5f:52:fc:0f:
31:6c:50:36:a9:96:95:d1:32:4c:5f:12:25:00:34:
4f:7c:ee:13:9d:56:4c:6c:46:a2:f3:56:2a:b8:11:
0d:95:de:c0:74:be:2e:a2:bb:f2:b7:46:3e:6c:b3:
53:09:09:40:70:aa:a2:41:12:f4:87:a1:8f:8b:54:
9d:05:85:24:b0:ae:9a:b5:04:f8:cd:03:33:cf:b3:
d6:61:28:e2:dd:05:fd:c2:da:e9:2a:d0:88:ef:66:
91:8f:1e:0b:01:59:da:35:06:0c:6b:80:c8:df:3c:
cd:77:3e:05:20:ba:32:c8:c1:1a:a8:31:04:87:39:
f4:99:62:17:25:04:37:c6:06:2b:4c:92:bd:e9:d1:
b6:9e:6a:b6:1e:c9:50:d2:26:ec:31:e6:6e:df:8d:
23:a8:09:3a:43:93:ad:f4:da:25:fc:be:36:4d:f4:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:67:F2:82:B2:12:E5:8D:AD:0A:6B:9C:66:91:D0:AF:24:53:21:F8
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:dc:2c:72:e4:0d:16:77:8b:41:17:33:a5:3b:57:ed:75:4f:
47:44:e7:eb:b1:57:80:a1:08:93:87:c7:cc:24:86:05:c2:3b:
c0:bf:3c:2b:5f:b8:3f:c3:59:48:ca:37:f4:8d:2f:19:bb:d9:
dd:b7:75:b6:eb:03:c8:b9:94:33:3a:01:fc:67:23:7b:ce:10:
e9:e2:82:59:89:35:6a:b0:77:f2:d9:55:91:92:de:1b:c2:20:
74:63:7b:9a:99:63:34:a7:de:45:2e:4b:23:2a:49:f0:20:f0:
3d:56:b7:a4:fd:fe:0f:cc:e1:92:41:eb:97:9e:69:20:50:f8:
1c:a5:7b:a3:b9:74:34:86:3c:68:4b:a7:2d:ac:82:8e:00:e4:
73:f7:43:ce:15:1c:93:24:2f:3a:03:f9:c2:31:29:f7:63:0e:
9c:25:ef:ea:a5:c9:41:4a:7d:65:96:38:b3:5b:08:73:4a:25:
65:1f:38:4f:63:ab:6f:25:eb:5c:0b:9e:18:87:49:fa:9c:98:
dc:4b:51:e0:4d:37:4e:5a:e9:0d:79:f3:09:f7:81:68:f9:73:
95:d1:5e:e0:29:86:ca:8f:a9:aa:31:c9:9a:d2:c0:e2:f5:ce:
59:2d:82:3b:d3:c8:8f:fd:cd:38:55:28:ec:50:2a:96:b6:e2:
c2:52:df:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u2OWCJaPdmU9X53yQlhJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZjg4ZTA1Yzg5ODc5NmM4MmZmMDE0NzU2ODgxNmU5MzM0
MjBlMTgwHhcNMjUwMTMxMDUwMDMwWhcNMjUwMjAxMDUwMDMwWjAzMTEwLwYDVQQD
EyhiMTY3ZjI4MmIyMTJlNThkYWQwYTZiOWM2NjkxZDBhZjI0NTMyMWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5Sr1i/9D92xg3SQV6TXGjxg2QDx
v9heWXx1A/1zh4YeKruot8c4Gie9rljwVH1TVzer1WsJBXQ//ZpTB6VbWa+MMcOR
ZCZaolsTl/hRUdzy+1aII19S/A8xbFA2qZaV0TJMXxIlADRPfO4TnVZMbEai81Yq
uBENld7AdL4uorvyt0Y+bLNTCQlAcKqiQRL0h6GPi1SdBYUksK6atQT4zQMzz7PW
YSji3QX9wtrpKtCI72aRjx4LAVnaNQYMa4DI3zzNdz4FILoyyMEaqDEEhzn0mWIX
JQQ3xgYrTJK96dG2nmq2HslQ0ibsMeZu340jqAk6Q5Ot9Nol/L42TfRiqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFn8oKyEuWNrQprnGaR0K8kUyH4MB8GA1UdIwQY
MBaAFFD4jgXImHlsgv8BR1aIFukzQg4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mN2MxMWYtNGU5ZS00MzZkLWEzZGYt
ZmVkYmQ0YzY2YTBlLzEvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mN2MxMWYtNGU5ZS00MzZkLWEzZGYtZmVkYmQ0YzY2YTBl
LzEvVVBpT0JjaVllV3lDX3dGSFZvZ1c2VE5DRGhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9wscuQN
FneLQRczpTtX7XVPR0Tn67FXgKEIk4fHzCSGBcI7wL88K1+4P8NZSMo39I0vGbvZ
3bd1tusDyLmUMzoB/Gcje84Q6eKCWYk1arB38tlVkZLeG8IgdGN7mpljNKfeRS5L
IypJ8CDwPVa3pP3+D8zhkkHrl55pIFD4HKV7o7l0NIY8aEunLayCjgDkc/dDzhUc
kyQvOgP5wjEp92MOnCXv6qXJQUp9ZZY4s1sIc0olZR84T2OrbyXrXAueGIdJ+pyY
3EtR4E03TlrpDXnzCfeBaPlzldFe4CmGyo+pqjHJmtLA4vXOWS2CO9PIj/3NOFUo
7FAqlrbiwlLfcA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:00 2025 by rpki-client on console-fra.rpki-client.org