Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File: _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier: /QyYsP7yVKlJA+0RmHIetrVgKyUvk13wuqJkTj6iMMI=
Subject key identifier: 28:54:8A:88:E1:C6:0B:7B:92:17:6D:6D:1B:FD:CF:13:7C:32:34:AC
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 0194BA84B080CC614D30F997B9A8DEF42F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number: 0215
Signing time: Fri 31 Jan 2025 04:00:45 +0000
Manifest this update: Fri 31 Jan 2025 04:00:45 +0000
Manifest next update: Sat 01 Feb 2025 04:00:45 +0000
Files and hashes: 1: AdBJgRJ4jssHPV7nsAqdNww1Sh8.roa (hash: pMU0onRwaIxtMKvp5F6AdYME/vJo84IaTZ0vashYGIQ=)
2: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: Ei0kjnhEKLOGBDRSfUTQDCbbTf2/OYMjc6wBCkhQZ88=)
3: eq5Eim9KBsmi3XU8htjV8anK_NE.roa (hash: EyydfpDXeHT6D2quI197b3wlG8U+XsJ23kRkj7BvaNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:b0:80:cc:61:4d:30:f9:97:b9:a8:de:f4:2f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Jan 31 04:00:45 2025 GMT
Not After : Feb 1 04:00:45 2025 GMT
Subject: CN=28548a88e1c60b7b92176d6d1bfdcf137c3234ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:1b:ef:1f:a3:17:9e:a1:a5:1e:2f:92:9c:
98:d1:40:c9:52:32:07:18:29:c0:fc:26:84:68:bc:
9c:e3:6b:49:05:91:3e:a0:bd:a2:36:6c:00:3e:a9:
b0:0e:6d:d9:5d:77:a9:49:54:c9:9b:4d:6c:bc:3b:
56:2d:fe:e1:64:a2:c8:0c:ec:d7:67:41:b8:84:ee:
1f:31:af:87:ae:ab:8a:35:9e:df:f2:73:98:f6:70:
fc:94:22:0b:22:21:23:a6:cb:81:6f:e7:dc:06:67:
51:1f:dc:e1:5f:07:7d:a4:b0:df:3b:f5:97:4e:aa:
83:b4:4c:f1:6d:38:b4:25:3b:d1:d1:db:5a:6f:de:
7e:48:ae:bc:96:85:97:e7:3e:8a:d8:54:4b:2e:8d:
82:53:2f:c9:74:f3:bd:2c:78:0b:c9:5c:65:64:ff:
d3:2d:29:43:b1:95:e2:07:88:86:fc:6e:4f:96:7c:
eb:65:3e:7c:4d:a0:5f:5b:65:2e:6c:28:5f:63:58:
ca:9a:07:39:56:e0:3e:8c:1e:65:6f:af:58:ae:f0:
4f:28:90:8f:8a:c9:83:84:cc:3e:b7:cc:f5:67:2a:
d7:5c:5a:d5:e1:1b:60:75:b7:2d:23:5a:ff:22:3d:
7b:93:8d:45:8d:d2:9a:e4:97:3c:b9:78:95:ae:42:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:54:8A:88:E1:C6:0B:7B:92:17:6D:6D:1B:FD:CF:13:7C:32:34:AC
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:27:b1:8f:82:1d:2c:d0:23:14:22:5f:df:66:38:4e:97:ed:
01:96:1e:5b:94:29:65:62:96:f8:75:1b:d4:ec:90:a4:e7:c6:
29:17:a8:b3:43:c5:99:5e:13:94:1f:0a:bb:67:92:04:e8:3a:
17:28:7d:62:24:5c:00:c4:dc:14:30:d2:83:16:77:13:72:22:
6d:0d:48:b3:62:7b:1a:c8:aa:4e:21:9a:20:20:b8:b1:97:a5:
64:d4:8d:18:d2:c7:38:82:28:1c:ec:09:63:b7:a8:67:c8:63:
76:f6:b3:55:20:2a:f9:52:66:9c:87:18:8a:f0:34:1b:79:9c:
b9:d1:a8:c6:e0:26:43:89:df:20:ce:4a:cd:8c:4b:5b:23:3c:
de:aa:6b:7e:37:94:a6:05:e8:d0:02:63:44:dd:2d:25:ad:ed:
19:28:37:e4:ed:05:68:ff:b9:98:d7:3b:df:32:2a:01:78:21:
09:f0:00:39:cd:89:d1:43:43:f7:74:a2:f3:5e:66:73:4d:06:
8b:d2:27:7a:0c:87:1c:15:12:00:5e:f5:ab:10:c5:f7:95:ed:
b2:1d:40:52:4e:8e:09:b8:65:ba:2c:38:09:dc:bc:f9:21:a0:
32:da:bf:ef:9e:33:fa:bb:47:37:f0:5b:c6:4e:fd:c1:91:92:
e7:57:3a:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hLCAzGFNMPmXuaje9C8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzJkNjQ2MzYyMWIxM2Y3OGU1MzBkMTQ0ZmVhYzAyM2Ux
ZTQ1ODIwHhcNMjUwMTMxMDQwMDQ1WhcNMjUwMjAxMDQwMDQ1WjAzMTEwLwYDVQQD
EygyODU0OGE4OGUxYzYwYjdiOTIxNzZkNmQxYmZkY2YxMzdjMzIzNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS4b7x+jF56hpR4vkpyY0UDJUjIH
GCnA/CaEaLyc42tJBZE+oL2iNmwAPqmwDm3ZXXepSVTJm01svDtWLf7hZKLIDOzX
Z0G4hO4fMa+HrquKNZ7f8nOY9nD8lCILIiEjpsuBb+fcBmdRH9zhXwd9pLDfO/WX
TqqDtEzxbTi0JTvR0dtab95+SK68loWX5z6K2FRLLo2CUy/JdPO9LHgLyVxlZP/T
LSlDsZXiB4iG/G5PlnzrZT58TaBfW2UubChfY1jKmgc5VuA+jB5lb69YrvBPKJCP
ismDhMw+t8z1ZyrXXFrV4RtgdbctI1r/Ij17k41FjdKa5Jc8uXiVrkIgYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChUiojhxgt7khdtbRv9zxN8MjSsMB8GA1UdIwQY
MBaAFP8y1kY2IbE/eOUw0UT+rAI+HkWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgt
MmIwMGVhMzI5MzdiLzEvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgtMmIwMGVhMzI5Mzdi
LzEvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCexj4Id
LNAjFCJf32Y4TpftAZYeW5QpZWKW+HUb1OyQpOfGKReos0PFmV4TlB8Ku2eSBOg6
Fyh9YiRcAMTcFDDSgxZ3E3IibQ1Is2J7GsiqTiGaICC4sZelZNSNGNLHOIIoHOwJ
Y7eoZ8hjdvazVSAq+VJmnIcYivA0G3mcudGoxuAmQ4nfIM5KzYxLWyM83qprfjeU
pgXo0AJjRN0tJa3tGSg35O0FaP+5mNc73zIqAXghCfAAOc2J0UND93Si815mc00G
i9InegyHHBUSAF71qxDF95Xtsh1AUk6OCbhluiw4Cdy8+SGgMtq/754z+rtHN/Bb
xk79wZGS51c6PA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:53 2025 by rpki-client on console-fra.rpki-client.org