
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
File: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft (raw, json)
Hash identifier: W2aXQYjojhZ0+JunDt01Crfq11sGqRhit+MG8rSI154=
Subject key identifier: 73:FA:2C:26:67:2C:1E:68:48:50:FF:F9:58:D8:E9:C4:B4:2E:A0:8D
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Certificate issuer: /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial: 0194BB96D1CEFE527FB59DEE31C4724AA52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
Manifest number: 06FD
Signing time: Fri 31 Jan 2025 09:00:10 +0000
Manifest this update: Fri 31 Jan 2025 09:00:10 +0000
Manifest next update: Sat 01 Feb 2025 09:00:10 +0000
Files and hashes: 1: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl (hash: F8oEMDLL4w4kwn/znLDzhqZC/RlJIkAD3/EnswNtDKE=)
2: _xRBA0-FJYAq2bhvbQe3j68XREg.roa (hash: Gym+lS7Pb7qSAGCB20Y3Am819Ocp8b/loNBlr9diFjw=)
3: q1r-kgfbVidNcGbxwm5Lfbx8idQ.roa (hash: XO5fotFJ+du20eg1ObsZCqOM3JLAQslX928MaBxUf9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:d1:ce:fe:52:7f:b5:9d:ee:31:c4:72:4a:a5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Validity
Not Before: Jan 31 09:00:10 2025 GMT
Not After : Feb 1 09:00:10 2025 GMT
Subject: CN=73fa2c26672c1e684850fff958d8e9c4b42ea08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:57:74:40:95:41:ad:0c:6e:69:41:84:ae:
c9:cb:68:fd:c8:56:4b:04:0b:e7:9e:2c:79:17:0f:
cf:b2:c7:43:ff:85:b5:d9:81:fe:e2:cd:de:7b:50:
73:7a:a0:08:ff:bc:56:84:0a:4f:0b:a6:cb:e3:1e:
d1:86:c0:b5:4a:25:e0:23:97:e6:67:7e:e2:b1:67:
68:f5:a3:41:82:1b:85:9c:ab:09:dc:72:00:d8:cb:
b5:8b:6c:81:54:9b:fc:e6:95:08:15:2a:d2:91:aa:
cf:47:5c:63:eb:32:7b:58:42:90:95:69:9a:e7:96:
3b:5f:05:84:7e:cd:8e:a3:6d:02:7d:9a:98:c5:6d:
17:c3:a7:4a:f6:b8:92:0c:af:e6:74:1c:50:28:f0:
4c:33:d9:d2:28:29:86:4c:31:12:30:e1:f7:2c:f0:
fa:42:e4:dc:e9:ad:a0:32:b3:b0:8b:bd:43:85:20:
f6:da:b9:cd:58:ae:29:09:2c:f7:97:47:62:c3:b9:
6d:db:4b:96:7f:5f:ae:41:55:96:0a:73:4b:fb:05:
75:79:e4:59:cd:51:a9:39:dd:34:01:bc:99:c8:f2:
8d:3d:a7:45:0b:51:86:67:dd:9b:ab:39:0e:68:61:
1a:d9:34:5d:b1:ff:f5:05:34:a6:bf:44:7a:0e:3b:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:2C:26:67:2C:1E:68:48:50:FF:F9:58:D8:E9:C4:B4:2E:A0:8D
X509v3 Authority Key Identifier:
keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:66:2a:5e:d4:12:bf:03:32:73:0c:10:41:2a:6c:f0:49:25:
36:9a:84:4f:1b:cb:f5:2c:dc:94:f1:e8:dd:a8:47:33:8a:ba:
a7:a9:f9:8d:4d:c9:86:30:7c:a3:0e:e0:19:9e:91:b1:3f:5c:
3d:58:b6:0a:82:fa:d1:ee:12:5c:c7:79:d7:8f:3e:c7:c9:5b:
c8:e5:93:8f:a3:c0:01:9a:b4:fb:70:1b:3c:c6:14:9e:7a:c9:
82:8a:98:29:ff:8d:a0:a5:ab:12:fb:ad:09:22:17:13:6a:b9:
62:46:29:86:00:cb:dc:56:1a:f3:e4:57:01:22:6d:60:1c:24:
86:0f:ed:39:93:2c:71:df:bb:06:f1:3c:16:d0:55:f2:26:32:
80:59:3a:ee:a7:2d:f3:ac:2a:59:dd:f0:b5:df:cf:0f:a0:d9:
07:65:f8:94:10:0c:81:4b:21:0c:ef:43:7d:df:ad:e4:bd:0e:
49:c3:70:36:c9:0c:aa:73:95:96:9a:04:a4:1e:32:70:13:88:
d1:c4:6f:69:45:4a:5e:a1:45:1e:62:c7:f1:77:fe:c1:ea:bc:
43:ae:a9:bd:fd:33:07:9e:bf:85:d2:35:1a:33:50:4b:fe:ae:
bf:df:09:c4:f2:e4:c2:4b:01:a6:77:17:cd:8d:9f:f7:86:7d:
7c:5b:9e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ltHO/lJ/tZ3uMcRySqUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZmFkZmUyOTFkZWZjNTZmOTQ3OWUyZTdkMjFiNTM5N2Nm
YTJiNjQwHhcNMjUwMTMxMDkwMDEwWhcNMjUwMjAxMDkwMDEwWjAzMTEwLwYDVQQD
Eyg3M2ZhMmMyNjY3MmMxZTY4NDg1MGZmZjk1OGQ4ZTljNGI0MmVhMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGFXdECVQa0MbmlBhK7Jy2j9yFZL
BAvnnix5Fw/PssdD/4W12YH+4s3ee1BzeqAI/7xWhApPC6bL4x7RhsC1SiXgI5fm
Z37isWdo9aNBghuFnKsJ3HIA2Mu1i2yBVJv85pUIFSrSkarPR1xj6zJ7WEKQlWma
55Y7XwWEfs2Oo20CfZqYxW0Xw6dK9riSDK/mdBxQKPBMM9nSKCmGTDESMOH3LPD6
QuTc6a2gMrOwi71DhSD22rnNWK4pCSz3l0diw7lt20uWf1+uQVWWCnNL+wV1eeRZ
zVGpOd00AbyZyPKNPadFC1GGZ92bqzkOaGEa2TRdsf/1BTSmv0R6DjsBYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHP6LCZnLB5oSFD/+VjY6cS0LqCNMB8GA1UdIwQY
MBaAFBL63+KR3vxW+UeeLn0htTl8+itkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXZyZjRwSGVfRmI1UjU0dWZTRzFPWHo2SzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84MWRlMDctODQ4MS00ZDgzLTgyZTkt
YTM0NzE3NzQxNTdiLzEvRXZyZjRwSGVfRmI1UjU0dWZTRzFPWHo2SzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84MWRlMDctODQ4MS00ZDgzLTgyZTktYTM0NzE3NzQxNTdi
LzEvRXZyZjRwSGVfRmI1UjU0dWZTRzFPWHo2SzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2YqXtQS
vwMycwwQQSps8EklNpqETxvL9SzclPHo3ahHM4q6p6n5jU3JhjB8ow7gGZ6RsT9c
PVi2CoL60e4SXMd5148+x8lbyOWTj6PAAZq0+3AbPMYUnnrJgoqYKf+NoKWrEvut
CSIXE2q5YkYphgDL3FYa8+RXASJtYBwkhg/tOZMscd+7BvE8FtBV8iYygFk67qct
86wqWd3wtd/PD6DZB2X4lBAMgUshDO9Dfd+t5L0OScNwNskMqnOVlpoEpB4ycBOI
0cRvaUVKXqFFHmLH8Xf+weq8Q66pvf0zB56/hdI1GjNQS/6uv98JxPLkwksBpncX
zY2f94Z9fFue3Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:41 2025 by rpki-client on console-fra.rpki-client.org