Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
File: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft (raw, json)
Hash identifier: XQ6gUePUrdo/JMOEcVWxK5UYhPwKsygQFz5snFzstO8=
Subject key identifier: FB:4E:56:10:9B:B7:D3:37:39:41:FF:D5:A0:FC:40:F8:42:8F:22:5A
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Certificate issuer: /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial: 0194BABB2F2448E4609D6ABB9EC059C56A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
Manifest number: 076D
Signing time: Fri 31 Jan 2025 05:00:17 +0000
Manifest this update: Fri 31 Jan 2025 05:00:17 +0000
Manifest next update: Sat 01 Feb 2025 05:00:17 +0000
Files and hashes: 1: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl (hash: WAzhuWIYGGevnw0v+gocW4fbJbgnkJDiQVM4ixK6tF4=)
2: oLxnPDOjx34zqrjQ27ju_ZuWYV4.roa (hash: aFW6lgXJpeg0bmQI7iZHPliZcmK0ToNkD5OYtI2CIQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:2f:24:48:e4:60:9d:6a:bb:9e:c0:59:c5:6a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a323546484220cb402063380f4016369262acf
Validity
Not Before: Jan 31 05:00:17 2025 GMT
Not After : Feb 1 05:00:17 2025 GMT
Subject: CN=fb4e56109bb7d3373941ffd5a0fc40f8428f225a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7d:f3:de:b5:60:b1:ed:4f:ee:75:9e:63:e4:
7d:ea:e4:d5:8f:a6:d0:b9:c2:90:2a:fe:16:7b:14:
f8:33:dc:6b:a7:88:e5:4e:c8:40:8d:55:34:c8:69:
1f:62:6f:16:df:2e:cf:95:64:a6:a4:ca:7a:26:f6:
cd:97:64:bd:dc:c3:ea:c3:94:25:b9:48:42:34:7f:
71:99:40:63:a4:a6:7d:fd:69:3a:43:2f:5c:cb:41:
fd:95:7c:05:6d:aa:1b:b0:d0:df:bc:75:7d:d9:bf:
a3:11:24:23:56:9a:24:fa:3b:4c:9e:53:67:ee:21:
de:fc:3d:33:3e:fa:a0:77:12:10:bc:0f:64:3e:b2:
82:5c:cc:2e:10:ad:54:e1:d8:43:cf:f7:b1:90:d1:
ac:66:1c:51:94:a1:d1:8d:b3:cc:a6:f6:69:3d:d0:
7f:5d:13:1e:f4:e8:2d:6b:fa:8d:73:44:75:13:55:
b7:e7:48:96:d8:f7:f5:ae:60:fb:68:ed:74:37:69:
41:77:a3:a1:dd:e3:45:81:8e:fc:af:b8:c3:c3:d2:
4b:6c:5c:70:97:e9:1d:66:1e:c0:2c:5e:74:d2:cd:
ca:b7:e7:e6:f7:ec:eb:0f:fa:5d:26:9e:ef:5e:ca:
b0:99:b8:41:03:fb:77:33:9c:79:7d:f4:d5:84:60:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4E:56:10:9B:B7:D3:37:39:41:FF:D5:A0:FC:40:F8:42:8F:22:5A
X509v3 Authority Key Identifier:
keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a6:28:4c:bb:50:f4:66:03:54:43:04:d5:32:69:4b:ba:34:
67:70:fb:f5:a9:4b:94:44:bd:33:6d:7e:16:fc:31:65:2b:2b:
e4:e0:6a:85:6d:d9:7a:7f:1f:cf:15:6c:a8:bf:a5:b1:c4:c8:
df:37:e2:1c:93:db:81:69:be:98:f3:10:db:16:6a:eb:3a:b7:
3d:1f:03:cd:cc:34:02:f5:3e:bc:56:51:d9:1a:53:cb:86:f4:
0d:1d:15:74:80:65:15:10:c8:94:e9:bc:74:de:e9:d2:ed:73:
9a:09:f1:28:f4:5c:6f:bf:08:55:9f:06:ed:10:6e:7b:7c:34:
41:fb:dc:0b:19:f6:ea:4c:d6:db:11:ea:11:0f:69:77:f6:e0:
a0:03:77:3e:41:eb:69:f6:2d:00:53:b4:93:b7:b5:76:11:6a:
d5:1b:56:fe:8c:30:9e:cc:b2:ad:d7:ff:99:47:39:1a:86:b0:
97:ba:85:c6:02:e4:c0:54:53:af:a0:c3:58:3b:9e:dc:7e:b0:
a9:19:9f:1c:bc:8a:35:29:05:34:a2:31:b6:6b:84:f6:f4:b2:
94:4a:aa:44:65:01:5b:dc:37:93:42:e8:86:44:4b:88:6c:15:
d4:5b:87:25:fe:f0:42:8f:99:1d:4d:c0:c2:fe:87:d1:10:b7:
ef:31:5d:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uy8kSORgnWq7nsBZxWo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYTMyMzU0NjQ4NDIyMGNiNDAyMDYzMzgwZjQwMTYzNjky
NjJhY2YwHhcNMjUwMTMxMDUwMDE3WhcNMjUwMjAxMDUwMDE3WjAzMTEwLwYDVQQD
EyhmYjRlNTYxMDliYjdkMzM3Mzk0MWZmZDVhMGZjNDBmODQyOGYyMjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n3z3rVgse1P7nWeY+R96uTVj6bQ
ucKQKv4WexT4M9xrp4jlTshAjVU0yGkfYm8W3y7PlWSmpMp6JvbNl2S93MPqw5Ql
uUhCNH9xmUBjpKZ9/Wk6Qy9cy0H9lXwFbaobsNDfvHV92b+jESQjVpok+jtMnlNn
7iHe/D0zPvqgdxIQvA9kPrKCXMwuEK1U4dhDz/exkNGsZhxRlKHRjbPMpvZpPdB/
XRMe9Ogta/qNc0R1E1W350iW2Pf1rmD7aO10N2lBd6Oh3eNFgY78r7jDw9JLbFxw
l+kdZh7ALF500s3Kt+fm9+zrD/pdJp7vXsqwmbhBA/t3M5x5ffTVhGBTYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtOVhCbt9M3OUH/1aD8QPhCjyJaMB8GA1UdIwQY
MBaAFOGjI1RkhCIMtAIGM4D0AWNpJirPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEt
OGVjMDYwNGU2OTI5LzEvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEtOGVjMDYwNGU2OTI5
LzEvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaYoTLtQ
9GYDVEME1TJpS7o0Z3D79alLlES9M21+FvwxZSsr5OBqhW3Zen8fzxVsqL+lscTI
3zfiHJPbgWm+mPMQ2xZq6zq3PR8Dzcw0AvU+vFZR2RpTy4b0DR0VdIBlFRDIlOm8
dN7p0u1zmgnxKPRcb78IVZ8G7RBue3w0QfvcCxn26kzW2xHqEQ9pd/bgoAN3PkHr
afYtAFO0k7e1dhFq1RtW/owwnsyyrdf/mUc5Goawl7qFxgLkwFRTr6DDWDue3H6w
qRmfHLyKNSkFNKIxtmuE9vSylEqqRGUBW9w3k0LohkRLiGwV1FuHJf7wQo+ZHU3A
wv6H0RC37zFdEA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:45 2025 by rpki-client on console-fra.rpki-client.org