Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: 130xUhkZHjb92NBLyQZS7hbx9sfV/k0HQAqRq+eVy98=
Subject key identifier: E7:26:77:65:D8:A4:51:22:19:E9:0B:3C:4B:07:CE:C7:4B:10:25:62
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 0194BA845B5102E121DDA6B974261357FC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0912
Signing time: Fri 31 Jan 2025 04:00:23 +0000
Manifest this update: Fri 31 Jan 2025 04:00:23 +0000
Manifest next update: Sat 01 Feb 2025 04:00:23 +0000
Files and hashes: 1: 06tgDhMET5PEFJxe6WB-BV1M_gE.roa (hash: mCqrz6qmS27RhPQU4uNyx6aFC+5GW4aIzmbKH5kTy4E=)
2: AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa (hash: QWci9V2NjIY+SYFiDofrhj2aiBG+2NbxvfuonR2gWB0=)
3: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: KPc2xoC7UExr32/MZz9dPibb/K2GaKpauoOpDWZLD1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:5b:51:02:e1:21:dd:a6:b9:74:26:13:57:fc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Jan 31 04:00:23 2025 GMT
Not After : Feb 1 04:00:23 2025 GMT
Subject: CN=e7267765d8a4512219e90b3c4b07cec74b102562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:28:08:c6:d8:15:28:82:d3:02:4f:5f:05:
a8:fc:93:60:e8:4a:cb:a7:86:c6:1a:25:c5:b9:80:
ac:a2:1f:75:7d:af:74:44:45:f3:7a:7b:a7:3d:5a:
d0:ce:92:9d:5e:a8:79:01:0e:ca:b3:0a:ff:33:9d:
79:e7:2f:8f:83:2c:92:66:6d:96:db:54:5b:64:ea:
99:d5:45:76:43:d9:15:89:7a:36:83:c7:53:9f:20:
e0:af:59:55:83:ca:51:bd:88:7b:50:a1:97:62:d2:
f8:d2:33:79:de:96:43:c5:b1:07:75:10:36:f6:a1:
76:67:e2:ca:aa:a9:3a:fa:ba:2f:fd:8f:b7:d3:24:
6a:ca:44:9b:ae:d7:8b:d4:c4:ab:ad:66:ca:d2:6a:
1f:c9:8b:c0:9b:b9:6f:08:ab:d6:0b:81:6f:84:73:
0f:8c:ee:38:de:39:09:4d:17:53:78:15:2f:d3:02:
1b:84:dd:4b:2d:32:66:38:d6:b2:7d:73:e2:5d:e2:
bd:54:18:d8:23:e6:f8:04:09:6c:3c:57:eb:3f:04:
29:9c:05:5e:6b:b6:2a:8e:23:a0:cd:f6:13:5c:12:
66:03:db:2f:17:7c:fc:11:79:3a:c8:58:cd:14:27:
5e:16:cf:9b:0e:28:70:df:39:02:25:92:df:12:06:
b8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:26:77:65:D8:A4:51:22:19:E9:0B:3C:4B:07:CE:C7:4B:10:25:62
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:91:be:47:65:90:e7:43:1b:42:ab:f4:bf:cc:62:b6:94:e3:
92:3a:7d:a3:d6:d4:88:82:1f:74:03:9e:58:da:5e:b9:55:4b:
92:a8:c6:0f:8f:18:b0:72:fb:64:96:10:fd:2b:67:a3:21:88:
0b:26:6e:64:28:66:06:24:07:9d:e8:4a:83:b9:b5:58:04:d5:
45:e9:29:ff:a7:0f:2b:74:27:e6:91:21:59:f1:57:46:85:ed:
84:19:69:a8:1d:fa:84:b2:8d:c5:01:b7:b4:2c:bb:bf:b3:d4:
15:0c:f8:b0:94:5b:2f:ad:1f:7f:a2:2a:25:c7:46:3f:3c:9e:
4f:45:9f:56:53:81:91:92:86:d2:04:ec:f1:71:d0:fc:27:7e:
a2:2c:7b:db:54:43:ec:ca:0d:69:89:ac:b8:3d:f4:23:d1:53:
0a:34:97:2c:f9:53:14:e6:fc:db:9b:24:93:4a:7b:66:e7:aa:
6b:f4:8f:58:dd:f3:0d:c0:bf:d8:e2:c0:12:21:b2:2a:81:c9:
68:c8:4f:3e:fe:a4:05:35:b7:52:50:c8:a2:61:ed:e7:4c:a5:
7b:6f:14:63:ea:7f:38:d8:52:bb:7a:d9:be:1b:b3:24:b9:8e:
31:1a:24:10:c0:23:0b:b3:6b:92:3c:ce:a9:82:dc:a1:a4:7b:
ef:73:b4:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hFtRAuEh3aa5dCYTV/wvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNjE0MGYxNzMxMjc4NGVmNjJhZTNiZTAzMGMwYzJjYzY2
MWE3MDIwHhcNMjUwMTMxMDQwMDIzWhcNMjUwMjAxMDQwMDIzWjAzMTEwLwYDVQQD
EyhlNzI2Nzc2NWQ4YTQ1MTIyMTllOTBiM2M0YjA3Y2VjNzRiMTAyNTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfsoCMbYFSiC0wJPXwWo/JNg6ErL
p4bGGiXFuYCsoh91fa90REXzenunPVrQzpKdXqh5AQ7Kswr/M5155y+PgyySZm2W
21RbZOqZ1UV2Q9kViXo2g8dTnyDgr1lVg8pRvYh7UKGXYtL40jN53pZDxbEHdRA2
9qF2Z+LKqqk6+rov/Y+30yRqykSbrteL1MSrrWbK0mofyYvAm7lvCKvWC4FvhHMP
jO443jkJTRdTeBUv0wIbhN1LLTJmONayfXPiXeK9VBjYI+b4BAlsPFfrPwQpnAVe
a7YqjiOgzfYTXBJmA9svF3z8EXk6yFjNFCdeFs+bDihw3zkCJZLfEga4HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcmd2XYpFEiGekLPEsHzsdLECViMB8GA1UdIwQY
MBaAFF5hQPFzEnhO9irjvgMMDCzGYacCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgt
MGRiY2JhMjc1NDE3LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgtMGRiY2JhMjc1NDE3
LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZG+R2WQ
50MbQqv0v8xitpTjkjp9o9bUiIIfdAOeWNpeuVVLkqjGD48YsHL7ZJYQ/StnoyGI
CyZuZChmBiQHnehKg7m1WATVRekp/6cPK3Qn5pEhWfFXRoXthBlpqB36hLKNxQG3
tCy7v7PUFQz4sJRbL60ff6IqJcdGPzyeT0WfVlOBkZKG0gTs8XHQ/Cd+oix721RD
7MoNaYmsuD30I9FTCjSXLPlTFOb825skk0p7Zueqa/SPWN3zDcC/2OLAEiGyKoHJ
aMhPPv6kBTW3UlDIomHt50yle28UY+p/ONhSu3rZvhuzJLmOMRokEMAjC7NrkjzO
qYLcoaR773O0Xg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:25 2025 by rpki-client on console-fra.rpki-client.org