Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: 4VA/GiMvl53PWnaBbylfQKpH3kvAMC4nQ4pSQ7qQyoM=
Subject key identifier: 41:48:AB:8C:39:05:C1:07:36:4E:8F:8C:69:18:7E:B2:5B:47:FB:13
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 0194BB60135202C7B12BCF28490BDDFB2BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 066B
Signing time: Fri 31 Jan 2025 08:00:23 +0000
Manifest this update: Fri 31 Jan 2025 08:00:23 +0000
Manifest next update: Sat 01 Feb 2025 08:00:23 +0000
Files and hashes: 1: 9v4uAwYJrvb2Yfzwn7vUGRJFfrA.roa (hash: Q7fvWDsdQ9HQh+wgSlc858kuPmBuOrnOtrTzOH5aOA4=)
2: I7dpcVjAHE5hGJn0EYmp-wUevik.roa (hash: eOwI5yLF5oxr8SKT6hK3RCMgVUO2F6SCJ9PKWEwThMs=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: gCdUiIfApYmNi24TUnxP5QKX91FVwrhzpXOFeqFI7G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:13:52:02:c7:b1:2b:cf:28:49:0b:dd:fb:2b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Jan 31 08:00:23 2025 GMT
Not After : Feb 1 08:00:23 2025 GMT
Subject: CN=4148ab8c3905c107364e8f8c69187eb25b47fb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:26:65:03:77:ff:12:4a:a9:4e:9e:31:27:
bc:f3:09:a5:0d:58:3f:dd:88:00:4d:16:b0:31:0e:
35:2a:24:4f:25:31:ed:9d:f7:a9:b5:3a:9f:28:8c:
00:e2:64:06:a0:c2:a1:98:2f:20:4f:cf:64:e1:a5:
eb:31:bb:83:35:34:79:c3:05:8e:97:6f:bb:df:15:
f2:b3:f5:c3:f6:01:16:6b:1b:40:b9:62:f5:6b:fe:
c7:c3:ce:ec:57:ef:bf:c0:d2:69:e9:2d:43:e1:90:
2d:59:fa:3f:25:38:37:38:85:90:b5:36:16:a8:06:
39:d7:18:38:84:f9:99:cb:67:2c:3a:a9:bc:79:9d:
86:3a:b6:ba:5e:e8:c9:5e:07:79:e9:b1:be:21:cd:
01:f1:ef:79:d8:7f:8e:59:b4:e8:f5:f0:95:e4:72:
c2:4e:ee:14:83:11:8b:54:64:4f:c2:53:78:a0:75:
c0:ab:f6:27:21:e2:0a:5a:11:8e:49:f1:39:9c:3b:
34:06:88:52:c1:fc:fe:d6:12:6c:9a:11:3b:c4:ff:
4f:73:c8:88:df:7a:64:4b:0e:9c:68:b8:21:07:77:
ee:11:9f:57:cd:4d:ef:bc:33:bf:c1:3f:cb:fe:a0:
79:a7:98:df:8d:19:9d:02:ad:84:fa:c8:ab:f0:f8:
eb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:AB:8C:39:05:C1:07:36:4E:8F:8C:69:18:7E:B2:5B:47:FB:13
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:76:ea:2d:ea:05:ee:a1:0d:58:6b:a4:35:60:50:f0:3e:e4:
14:4b:0d:9d:b6:c5:26:c3:96:0e:e3:76:d3:58:e9:a6:1e:14:
94:16:e9:1b:aa:4f:43:7a:ed:99:52:5b:8d:4e:74:a0:5c:da:
cd:93:0a:9f:e0:42:63:33:77:5f:fd:22:85:21:3e:5f:7b:f2:
70:5a:f9:61:5b:cb:08:cf:e9:bf:12:60:7c:22:6a:be:6d:0a:
f1:83:65:ce:52:f6:b6:73:30:a7:ff:88:75:24:8f:1b:69:17:
ec:d1:9f:d2:8c:19:b4:60:35:b8:c0:3e:6f:ec:65:e4:e8:22:
4e:7c:46:82:fa:e5:6b:c6:a7:84:12:df:6d:a3:9c:ed:30:46:
d6:f3:f1:d2:4a:67:a0:ab:31:43:78:61:59:34:69:75:f7:93:
4f:df:14:83:c1:33:78:1e:a0:2f:2d:41:c4:38:42:eb:29:c2:
8b:b1:2b:a5:f3:15:09:c5:f7:2d:af:02:89:0b:51:02:06:89:
c0:11:ab:50:e3:fe:7b:d7:f4:2d:cd:e6:80:fb:f2:04:1c:ef:
39:34:a1:36:3f:d8:34:8d:1a:bc:02:f4:f8:3e:cf:4e:54:5b:
ab:10:05:1f:e3:20:75:54:29:73:65:5b:38:b6:a0:0d:05:da:
7c:9d:1e:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YBNSAsexK88oSQvd+yvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYWQ5Y2Q1MDM0ZjgxNTU4ZjgzZDIzOGVjYTQwNjMzMmJk
N2JhODUwHhcNMjUwMTMxMDgwMDIzWhcNMjUwMjAxMDgwMDIzWjAzMTEwLwYDVQQD
Eyg0MTQ4YWI4YzM5MDVjMTA3MzY0ZThmOGM2OTE4N2ViMjViNDdmYjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvswmZQN3/xJKqU6eMSe88wmlDVg/
3YgATRawMQ41KiRPJTHtnfeptTqfKIwA4mQGoMKhmC8gT89k4aXrMbuDNTR5wwWO
l2+73xXys/XD9gEWaxtAuWL1a/7Hw87sV++/wNJp6S1D4ZAtWfo/JTg3OIWQtTYW
qAY51xg4hPmZy2csOqm8eZ2GOra6XujJXgd56bG+Ic0B8e952H+OWbTo9fCV5HLC
Tu4UgxGLVGRPwlN4oHXAq/YnIeIKWhGOSfE5nDs0BohSwfz+1hJsmhE7xP9Pc8iI
33pkSw6caLghB3fuEZ9XzU3vvDO/wT/L/qB5p5jfjRmdAq2E+sir8PjryQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFIq4w5BcEHNk6PjGkYfrJbR/sTMB8GA1UdIwQY
MBaAFDutnNUDT4FVj4PSOOykBjMr17qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80MTZiYzctY2U4Ny00MmI2LThjNjgt
NGJhNWYyMDZmNjVhLzEvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80MTZiYzctY2U4Ny00MmI2LThjNjgtNGJhNWYyMDZmNjVh
LzEvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXbqLeoF
7qENWGukNWBQ8D7kFEsNnbbFJsOWDuN201jpph4UlBbpG6pPQ3rtmVJbjU50oFza
zZMKn+BCYzN3X/0ihSE+X3vycFr5YVvLCM/pvxJgfCJqvm0K8YNlzlL2tnMwp/+I
dSSPG2kX7NGf0owZtGA1uMA+b+xl5OgiTnxGgvrla8anhBLfbaOc7TBG1vPx0kpn
oKsxQ3hhWTRpdfeTT98Ug8EzeB6gLy1BxDhC6ynCi7ErpfMVCcX3La8CiQtRAgaJ
wBGrUOP+e9f0Lc3mgPvyBBzvOTShNj/YNI0avAL0+D7PTlRbqxAFH+MgdVQpc2Vb
OLagDQXafJ0e4w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:36 2025 by rpki-client on console-fra.rpki-client.org