Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json)
Hash identifier: ql/YSaMoY9Rb4cZdaLI2A6DZ19C2G7deZkQqJWTa+4s=
Subject key identifier: 9A:55:C1:A3:A5:40:51:29:7F:23:92:25:2B:87:EB:79:A1:80:A5:FA
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 0194BABBB6A906B2D99710B04FB9F12724B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
Manifest number: 12FF
Signing time: Fri 31 Jan 2025 05:00:51 +0000
Manifest this update: Fri 31 Jan 2025 05:00:51 +0000
Manifest next update: Sat 01 Feb 2025 05:00:51 +0000
Files and hashes: 1: 3csahPS_wbV_Cdmexl1nUcqXKCs.roa (hash: bIzOWikibOXI8uzov3zH1ZZ4OwuzNl9gaDQiq7HSE2A=)
2: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: 5xSuXwIYs6JmeMSsmqig4/HslLVAqlxRm8n4ZmKQz6U=)
3: piNzw1TtbP-p8HWhuy6SBF8spgg.roa (hash: wNEUGiASiQTLAx7gOGoQvQVkZK49FM62Tev24iu4h1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:b6:a9:06:b2:d9:97:10:b0:4f:b9:f1:27:24:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Jan 31 05:00:51 2025 GMT
Not After : Feb 1 05:00:51 2025 GMT
Subject: CN=9a55c1a3a54051297f2392252b87eb79a180a5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:33:73:30:e9:40:f2:ea:c0:52:cc:89:08:
24:4c:98:fb:16:e1:c8:26:a0:9d:70:55:dc:e6:16:
34:ad:f5:05:d5:54:34:0f:a4:d2:64:48:ce:dd:cd:
f2:21:4c:9c:e4:6d:fe:77:31:e5:9d:49:59:51:07:
41:62:ae:f0:df:68:c1:03:83:69:05:c1:2d:73:c1:
ee:b5:80:b6:2d:b4:2d:cd:09:88:de:17:3f:09:fb:
f9:b7:8d:d7:c2:b7:21:a2:8f:e6:c0:e7:4b:cc:b3:
a5:82:28:6f:37:b2:ff:4a:d0:ed:17:a9:91:71:c8:
ba:99:90:b3:1a:34:8b:5f:5d:a2:d6:45:cf:34:75:
40:a5:21:ee:5e:b8:c7:6a:15:d3:1f:c7:12:62:14:
88:3f:0b:fd:48:02:94:fd:17:06:aa:04:a9:b5:0c:
fd:a9:0d:32:41:06:0d:db:7a:db:71:93:b9:ca:2d:
82:ba:2d:d8:4e:1c:67:8b:13:8c:50:f4:b2:66:67:
b9:2f:0f:4b:a0:a8:88:38:40:a0:60:91:0d:6d:3d:
6b:37:96:6f:38:fb:05:50:78:ae:55:b4:a7:1b:c3:
35:8f:f5:e5:8d:a0:b9:22:d2:31:11:a8:a7:2d:8c:
63:50:f8:24:b5:b7:9a:37:3a:a4:49:11:ab:55:2d:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:55:C1:A3:A5:40:51:29:7F:23:92:25:2B:87:EB:79:A1:80:A5:FA
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:da:95:a0:6d:60:c5:5c:1e:0e:8c:59:6e:cc:c1:42:de:f4:
39:3b:9a:18:87:5e:2e:a0:00:27:2b:58:b2:1a:5f:21:94:87:
ea:63:06:64:ff:6d:8e:d0:84:5e:fb:9d:f6:17:53:26:b3:f1:
05:59:2e:66:7b:4b:c7:2a:5f:dc:20:0a:f4:47:fe:3a:8f:39:
dc:f7:f9:49:86:35:54:46:8c:bd:3c:76:90:44:56:5b:f3:e2:
b8:a1:46:03:a6:36:09:51:fa:8c:09:a4:30:3b:26:77:53:2f:
1f:b7:b2:e5:47:e6:b2:12:ec:94:c5:ab:29:41:62:48:9e:3d:
81:db:de:0a:e1:a8:b3:eb:b4:c4:1f:a7:01:c5:92:b3:61:5b:
ac:52:f2:29:57:b4:55:2b:b6:2e:a1:72:92:e0:0e:42:de:76:
42:dc:5d:81:43:ac:0a:26:37:08:8c:a2:9a:8c:4f:94:94:94:
7b:93:5b:95:ff:bf:19:ca:96:15:58:c7:a1:4e:f3:42:e9:5f:
14:11:4d:1c:7a:20:6b:82:71:b2:44:62:02:20:e7:12:37:1b:
e8:f6:6b:20:da:7d:21:41:61:95:f2:6c:5a:5c:d7:6c:e4:74:
90:31:c7:f3:1e:0a:44:e7:dc:21:8a:36:1f:49:45:32:29:56:
be:11:bb:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u7apBrLZlxCwT7nxJyS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiM2Q1ZGI5MDBlMDgxYjIxM2VhMWYwNzFlYzVjMDAzNDdh
NmZkOTUwHhcNMjUwMTMxMDUwMDUxWhcNMjUwMjAxMDUwMDUxWjAzMTEwLwYDVQQD
Eyg5YTU1YzFhM2E1NDA1MTI5N2YyMzkyMjUyYjg3ZWI3OWExODBhNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIYzczDpQPLqwFLMiQgkTJj7FuHI
JqCdcFXc5hY0rfUF1VQ0D6TSZEjO3c3yIUyc5G3+dzHlnUlZUQdBYq7w32jBA4Np
BcEtc8HutYC2LbQtzQmI3hc/Cfv5t43Xwrchoo/mwOdLzLOlgihvN7L/StDtF6mR
cci6mZCzGjSLX12i1kXPNHVApSHuXrjHahXTH8cSYhSIPwv9SAKU/RcGqgSptQz9
qQ0yQQYN23rbcZO5yi2Cui3YThxnixOMUPSyZme5Lw9LoKiIOECgYJENbT1rN5Zv
OPsFUHiuVbSnG8M1j/XljaC5ItIxEainLYxjUPgktbeaNzqkSRGrVS3OGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpVwaOlQFEpfyOSJSuH63mhgKX6MB8GA1UdIwQY
MBaAFCs9XbkA4IGyE+ofBx7FwANHpv2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEt
NDdkZDBjMDRiNTUwLzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEtNDdkZDBjMDRiNTUw
LzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntqVoG1g
xVweDoxZbszBQt70OTuaGIdeLqAAJytYshpfIZSH6mMGZP9tjtCEXvud9hdTJrPx
BVkuZntLxypf3CAK9Ef+Oo853Pf5SYY1VEaMvTx2kERWW/PiuKFGA6Y2CVH6jAmk
MDsmd1MvH7ey5UfmshLslMWrKUFiSJ49gdveCuGos+u0xB+nAcWSs2FbrFLyKVe0
VSu2LqFykuAOQt52QtxdgUOsCiY3CIyimoxPlJSUe5Nblf+/GcqWFVjHoU7zQulf
FBFNHHoga4JxskRiAiDnEjcb6PZrINp9IUFhlfJsWlzXbOR0kDHH8x4KROfcIYo2
H0lFMilWvhG7Qw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:01 2025 by rpki-client on console-fra.rpki-client.org