Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: 0uWHR37efAr3dg7IB2fH3EjhsuX+kpGlf1yKo1nq+d4=
Subject key identifier: 70:BA:01:E2:3A:8F:34:BC:A9:4E:A4:13:CB:53:82:C9:54:5F:E6:91
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 0194BB973C89E92EACB9233E549E3B4162D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 09:00:38 +0000
Manifest this update: Fri 31 Jan 2025 09:00:38 +0000
Manifest next update: Sat 01 Feb 2025 09:00:38 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: dPBzQUKrIeJpTGZ1PxQH5q16KLfVBU4dg4e/+f50GhA=)
2: 5p4iEJjCWHg2NCuzUgou4J5Rpxg.roa (hash: NfyhhVjM+im96vYLz64L3GHHSJz/s1weqZvBCCm8Yaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:3c:89:e9:2e:ac:b9:23:3e:54:9e:3b:41:62:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Jan 31 09:00:38 2025 GMT
Not After : Feb 1 09:00:38 2025 GMT
Subject: CN=70ba01e23a8f34bca94ea413cb5382c9545fe691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:0b:73:04:14:21:28:d6:9c:5a:44:d7:72:
85:ae:f7:04:80:b8:d9:e3:9f:b8:ae:cf:54:68:62:
36:07:c7:91:68:0f:17:5b:f3:72:05:27:1b:23:63:
63:03:25:c7:5f:0a:f8:e0:00:f0:d6:8a:41:28:3f:
53:f1:95:a7:e4:fa:4f:e7:a9:5d:72:8a:ba:ba:c8:
aa:1e:7e:6e:08:e1:07:c1:ea:fe:da:7a:96:fb:09:
a1:61:58:11:41:2b:bf:da:82:4e:df:76:aa:45:9c:
bf:b1:62:be:e5:36:16:c2:14:86:e6:91:e8:d9:e3:
19:47:04:03:8d:a7:8c:02:71:90:91:f2:d7:c9:fe:
a1:ed:1e:66:4c:a9:60:56:b3:23:e1:cb:05:e9:3f:
a9:95:b4:72:26:15:9c:72:46:9f:cc:70:55:3e:01:
dc:6e:58:bd:e6:09:73:3e:14:38:49:05:98:d3:6c:
5d:eb:6b:53:45:6a:94:c8:6a:ef:9f:55:f7:6f:ee:
6b:7c:e6:42:e1:8e:97:54:c5:e3:9b:11:92:db:2d:
23:6e:63:eb:68:8f:4f:10:36:f3:dd:d9:ba:86:40:
02:c9:c8:16:bb:99:f7:f7:ac:44:7b:be:e8:c8:00:
b5:59:85:bc:a2:31:b4:46:ae:63:85:48:11:8a:21:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BA:01:E2:3A:8F:34:BC:A9:4E:A4:13:CB:53:82:C9:54:5F:E6:91
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:16:b1:37:83:af:97:4b:74:30:51:fa:17:1b:17:69:0d:f0:
3a:9e:84:97:07:e0:93:56:3a:47:08:a4:52:bd:3d:55:70:b8:
3c:99:90:ac:c6:e7:ff:95:02:03:b7:79:7d:b6:84:8b:16:4e:
f8:fb:02:ef:1b:7f:3a:b7:9a:44:59:e5:f9:8a:c4:63:3a:ad:
fc:e7:df:15:fa:36:d1:50:83:b2:88:43:a4:6c:04:9c:60:e3:
f8:6d:c1:0c:a3:10:32:94:eb:35:12:ae:6d:38:f4:e7:c9:ef:
2a:b1:9e:be:eb:16:4a:04:fd:ee:2b:e0:76:ef:a3:e6:68:02:
6c:b0:58:10:e8:3e:9c:4b:1e:69:5a:98:ba:35:5e:d8:40:3f:
f1:75:88:53:70:71:f9:37:31:78:c4:9a:1b:52:ab:02:f4:07:
35:99:c2:ff:c0:e7:ff:94:1c:4f:af:0f:f6:d4:e3:ff:17:7b:
80:7c:ce:8c:fd:00:f5:b3:83:0f:f2:8c:16:4c:25:ac:18:4c:
0c:12:48:84:f5:69:96:dd:1c:d0:9d:20:67:54:3e:e8:02:6e:
ae:d8:77:72:db:84:9a:9e:00:10:a1:a9:8a:89:e1:f2:de:d6:
71:46:b4:16:bc:ec:77:d9:2d:c6:fc:ec:fb:22:b6:38:07:33:
3a:d3:f2:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lzyJ6S6suSM+VJ47QWLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzE0OGQ3NWJkYzM5Y2U5ZGQyZTNiZGFhNzU4NDdiMTdi
MzRlY2IwHhcNMjUwMTMxMDkwMDM4WhcNMjUwMjAxMDkwMDM4WjAzMTEwLwYDVQQD
Eyg3MGJhMDFlMjNhOGYzNGJjYTk0ZWE0MTNjYjUzODJjOTU0NWZlNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P8LcwQUISjWnFpE13KFrvcEgLjZ
45+4rs9UaGI2B8eRaA8XW/NyBScbI2NjAyXHXwr44ADw1opBKD9T8ZWn5PpP56ld
coq6usiqHn5uCOEHwer+2nqW+wmhYVgRQSu/2oJO33aqRZy/sWK+5TYWwhSG5pHo
2eMZRwQDjaeMAnGQkfLXyf6h7R5mTKlgVrMj4csF6T+plbRyJhWcckafzHBVPgHc
bli95glzPhQ4SQWY02xd62tTRWqUyGrvn1X3b+5rfOZC4Y6XVMXjmxGS2y0jbmPr
aI9PEDbz3dm6hkACycgWu5n396xEe77oyAC1WYW8ojG0Rq5jhUgRiiGq8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHC6AeI6jzS8qU6kE8tTgslUX+aRMB8GA1UdIwQY
MBaAFNpxSNdb3DnOndLjvap1hHsXs07LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUt
ZGVmMGNjMzRlMDA4LzEvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wNzdhNTMtMzE0Yi00MDA0LThmMWUtZGVmMGNjMzRlMDA4
LzEvMm5GSTExdmNPYzZkMHVPOXFuV0VleGV6VHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRaxN4Ov
l0t0MFH6FxsXaQ3wOp6Elwfgk1Y6RwikUr09VXC4PJmQrMbn/5UCA7d5fbaEixZO
+PsC7xt/OreaRFnl+YrEYzqt/OffFfo20VCDsohDpGwEnGDj+G3BDKMQMpTrNRKu
bTj058nvKrGevusWSgT97ivgdu+j5mgCbLBYEOg+nEseaVqYujVe2EA/8XWIU3Bx
+TcxeMSaG1KrAvQHNZnC/8Dn/5QcT68P9tTj/xd7gHzOjP0A9bODD/KMFkwlrBhM
DBJIhPVplt0c0J0gZ1Q+6AJurth3ctuEmp4AEKGpionh8t7WcUa0Frzsd9ktxvzs
+yK2OAczOtPy8Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:33 2025 by rpki-client on console-fra.rpki-client.org