Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier: gVKIYmgAKqocBgMLWX7fxcCrpI+dItnIQt1pjouZiXk=
Subject key identifier: 71:C3:78:E2:3F:BD:42:CB:BF:31:00:B2:1B:FD:BD:FD:28:D9:1B:B1
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 0194BB9736C86F3DA7040B647239B97A748C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 09:00:36 +0000
Manifest this update: Fri 31 Jan 2025 09:00:36 +0000
Manifest next update: Sat 01 Feb 2025 09:00:36 +0000
Files and hashes: 1: 0LHXRZXlT4Z5tzVCD5n3wMEK_5I.roa (hash: I8mxC60DkZg+/Z8S1/Ta7eOakDYR4IDLK8C2wNx5/L4=)
2: 6fX3AcGq-C5YFIqBi50as54EhPA.roa (hash: 1KbqHGJ44yLkRFe9MKFCx+SDk5i4hgNCAcTBDnuKRDc=)
3: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: UlkQ5POrdz1Yjaei6nrwGPJlC0o7ycfiYMDkrWueKxQ=)
4: EGu7n5ptipM5eNOhCckU54k5DkQ.roa (hash: T5q/E4P5U9BLCmb7DxjfaSe8vQrSmm6xkzEcVmgP2NA=)
5: PJ3rrJoRRyeXmoPdL7qN8QsvEpA.roa (hash: GLnfA8SK+T7VmaJvhK7gTu86DZRC9gqxwVMFgNBn2ek=)
6: RxZdH8tJj14wo9lUz6xXNXqBRwA.roa (hash: 5ZzEhibv41QuiqdnfKIE7PgA9XlisOrBTAH+e4R62Ys=)
7: V20vcYbyilDSQD-Jtx8d2qJDtnY.roa (hash: 2USt4pmFmNQvxtA5b7+ZLT1hKFltQnZghx27ehbthpQ=)
8: nHLGbM1FaGgG8wvdxg9Y5XPBlQw.roa (hash: EnIVps1oa/43pm3iNHQ84rjsTR4sIc4UNGGhICjrp8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:36:c8:6f:3d:a7:04:0b:64:72:39:b9:7a:74:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Jan 31 09:00:36 2025 GMT
Not After : Feb 1 09:00:36 2025 GMT
Subject: CN=71c378e23fbd42cbbf3100b21bfdbdfd28d91bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:bd:17:67:e0:74:12:2f:0b:b8:d0:c5:82:
94:de:0d:93:a8:1a:7d:b5:ca:02:07:3d:a0:68:93:
c1:bb:f0:ac:d7:b1:5e:b1:88:5a:ea:bf:5c:18:94:
a7:8e:da:27:a6:fe:7e:4c:a9:0b:5f:c4:11:90:0b:
a2:6e:99:95:a3:25:cd:15:e0:e9:7a:3f:16:5d:d4:
8a:9e:ed:89:a2:6a:1f:b3:9a:5f:2d:99:5b:5f:bf:
36:52:c6:44:2a:64:01:e0:4a:a6:bf:d3:77:33:58:
00:ae:25:d3:87:58:da:8e:f9:6c:ee:5e:e6:82:f7:
02:aa:df:dc:1d:72:c7:65:a0:bd:28:87:18:91:47:
b0:23:aa:9e:77:2e:1a:3c:19:23:d4:be:dd:c6:6f:
2e:10:39:b2:86:6b:f5:7b:7a:67:db:e7:35:8f:98:
e7:15:74:2a:c2:e2:a2:96:5b:3e:67:5b:90:94:ba:
50:10:16:0f:af:8d:a5:61:41:21:f0:22:6d:04:85:
c0:1a:41:bc:d6:bf:2e:ab:c4:f6:6d:db:ec:d7:14:
38:3f:bd:13:d4:8f:3a:a0:5f:80:54:c0:23:a7:6f:
0a:a9:aa:98:ef:1e:35:77:69:c2:65:6e:cd:f9:52:
2a:10:d9:fb:05:43:18:85:9c:c1:38:31:3c:02:60:
df:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C3:78:E2:3F:BD:42:CB:BF:31:00:B2:1B:FD:BD:FD:28:D9:1B:B1
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ca:a2:96:b7:db:5d:9a:8e:d3:fc:23:71:6c:dd:ed:15:4c:
7b:65:93:94:b5:36:ef:f0:ba:f2:aa:87:f3:39:81:21:5d:75:
9f:82:49:d4:b1:32:49:c9:bd:f7:9b:83:d1:17:0e:ec:70:c5:
71:30:cc:c0:4a:1d:83:27:ca:ac:25:e4:0c:6d:fa:18:3d:c9:
ea:92:9b:ad:ed:f7:c1:dd:c3:ea:dc:ed:fa:6d:d3:99:e8:89:
fb:4c:26:ed:f6:56:25:6f:a7:04:2a:1c:41:67:59:63:b2:d0:
ba:b2:16:00:59:67:1b:5d:47:1b:44:84:4f:2b:b0:a1:ce:12:
a5:ab:99:a3:68:4b:aa:06:e2:49:62:fc:d3:98:55:ef:25:dc:
ed:f0:72:e0:27:bf:fd:70:66:4d:87:9d:19:70:9d:1c:c4:03:
87:bb:45:5f:fd:e5:98:82:1b:29:a2:79:aa:c8:84:91:42:98:
81:e5:e7:3d:47:61:24:08:d7:91:2b:d2:68:47:3f:16:8d:6c:
90:21:d1:44:11:4e:4a:90:36:2e:ec:d5:80:14:81:ef:61:86:
8e:5a:e8:e7:f9:8c:60:cf:53:45:29:39:ef:64:a4:3e:36:75:
bb:55:92:62:57:4d:58:52:32:d4:0f:18:6e:4b:ae:66:38:77:
16:b0:e8:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lzbIbz2nBAtkcjm5enSMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNjVkMzE0NDBiZjc1ZDI1YzYwNmY3OTE1YzIzNmNhNjE0
NDY0YTIwHhcNMjUwMTMxMDkwMDM2WhcNMjUwMjAxMDkwMDM2WjAzMTEwLwYDVQQD
Eyg3MWMzNzhlMjNmYmQ0MmNiYmYzMTAwYjIxYmZkYmRmZDI4ZDkxYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5G9F2fgdBIvC7jQxYKU3g2TqBp9
tcoCBz2gaJPBu/Cs17FesYha6r9cGJSnjtonpv5+TKkLX8QRkAuibpmVoyXNFeDp
ej8WXdSKnu2Jomofs5pfLZlbX782UsZEKmQB4Eqmv9N3M1gAriXTh1jajvls7l7m
gvcCqt/cHXLHZaC9KIcYkUewI6qedy4aPBkj1L7dxm8uEDmyhmv1e3pn2+c1j5jn
FXQqwuKills+Z1uQlLpQEBYPr42lYUEh8CJtBIXAGkG81r8uq8T2bdvs1xQ4P70T
1I86oF+AVMAjp28KqaqY7x41d2nCZW7N+VIqENn7BUMYhZzBODE8AmDfIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHDeOI/vULLvzEAshv9vf0o2RuxMB8GA1UdIwQY
MBaAFOxl0xRAv3XSXGBveRXCNsphRGSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzkt
ZTI5NTg5ZTg5NjRhLzEvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yYTZkZjUtODIzNi00MTJkLWFkNzktZTI5NTg5ZTg5NjRh
LzEvN0dYVEZFQ19kZEpjWUc5NUZjSTJ5bUZFWktJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMqilrfb
XZqO0/wjcWzd7RVMe2WTlLU27/C68qqH8zmBIV11n4JJ1LEyScm995uD0RcO7HDF
cTDMwEodgyfKrCXkDG36GD3J6pKbre33wd3D6tzt+m3TmeiJ+0wm7fZWJW+nBCoc
QWdZY7LQurIWAFlnG11HG0SETyuwoc4SpauZo2hLqgbiSWL805hV7yXc7fBy4Ce/
/XBmTYedGXCdHMQDh7tFX/3lmIIbKaJ5qsiEkUKYgeXnPUdhJAjXkSvSaEc/Fo1s
kCHRRBFOSpA2LuzVgBSB72GGjlro5/mMYM9TRSk572SkPjZ1u1WSYldNWFIy1A8Y
bkuuZjh3FrDoTA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:32 2025 by rpki-client on console-fra.rpki-client.org