Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
File: RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json)
Hash identifier: WPgeoChS+8ua7qGqw9l3Cojn/Y6hyX1Ghm/hTpMDnsU=
Subject key identifier: F2:D8:10:D7:BF:0B:66:5F:59:16:67:72:52:AD:95:31:01:A0:D9:0C
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial: 0194BB96FFB0C14F36CB0C05C892893B165F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
Manifest number: 0454
Signing time: Fri 31 Jan 2025 09:00:22 +0000
Manifest this update: Fri 31 Jan 2025 09:00:22 +0000
Manifest next update: Sat 01 Feb 2025 09:00:22 +0000
Files and hashes: 1: 5_5ZxyaYymDkazwik4_YUJ_u6nk.roa (hash: 0ihJyb/8cvHev60hCuqr7j7mSBpvAI6EqaNQNOqgNHg=)
2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: u/JtZAVMEH1X+jaV+j9qKVbgNyiHew8YfTjS7NdQoB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:ff:b0:c1:4f:36:cb:0c:05:c8:92:89:3b:16:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Validity
Not Before: Jan 31 09:00:22 2025 GMT
Not After : Feb 1 09:00:22 2025 GMT
Subject: CN=f2d810d7bf0b665f5916677252ad953101a0d90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:f1:35:6f:1c:26:99:40:2d:72:0e:2f:8e:
9c:40:d8:5c:98:a7:a1:d9:0f:05:fc:75:a1:c2:db:
f2:fc:c1:1c:e4:d9:ed:f9:c9:66:f4:1e:85:17:b5:
08:dd:18:75:d0:a6:13:bc:4f:d1:24:ec:55:70:f4:
92:73:6c:b9:2b:8d:c9:01:fc:d4:2e:3c:4b:5a:9b:
05:eb:c7:56:39:86:06:d4:35:97:24:f5:5d:cc:c1:
a4:35:22:13:86:e5:22:cf:aa:02:00:ab:34:8f:ad:
4e:f5:ae:65:30:26:6e:b2:e9:de:f3:2d:d5:63:e4:
37:26:ad:b4:b0:fc:79:36:ea:0e:33:2e:fb:e2:3e:
33:e0:41:71:34:6b:1c:b1:a3:31:f8:3a:14:df:ba:
be:30:81:f6:85:9f:4c:3d:4a:61:5e:26:78:e6:72:
13:f9:70:ff:4e:83:4b:97:74:43:28:05:66:9f:63:
5e:fc:f3:dd:ff:80:7b:93:e5:e1:a4:47:61:bd:f3:
7f:6c:c1:3f:c0:0f:d0:fb:58:86:08:ea:cc:27:6f:
e5:a3:1c:f8:b9:0a:45:0f:cf:49:f8:d3:7b:31:47:
80:72:97:95:90:72:55:f0:fc:c1:d2:a2:19:39:c4:
d5:65:6c:b3:14:70:e9:1f:0c:5f:94:47:10:e9:d0:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D8:10:D7:BF:0B:66:5F:59:16:67:72:52:AD:95:31:01:A0:D9:0C
X509v3 Authority Key Identifier:
keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0f:09:34:e0:f1:fa:2d:9d:c7:f3:1a:58:c7:20:5e:39:0d:
df:78:41:25:c1:6f:53:5b:1e:3f:e4:c7:50:ab:8d:bd:30:97:
75:4f:cd:a3:34:30:d6:99:b4:ff:e3:9f:50:f0:cc:33:35:d4:
d1:43:6c:a6:1d:c6:a2:e5:7c:ef:4a:c0:c2:f2:c3:e8:c3:e2:
13:73:00:e6:4d:10:44:09:85:be:4f:a2:65:eb:e3:eb:ad:72:
e9:63:a1:c1:dc:2c:c0:a5:74:47:cd:91:31:3d:97:c0:66:aa:
b3:ad:ef:53:e0:bf:15:91:c4:f3:29:dc:6c:74:32:dc:05:38:
56:ef:c9:f9:37:9d:3d:9c:17:34:18:8a:10:58:ee:79:d6:c4:
60:52:4a:1b:48:04:9f:8e:78:2c:ab:75:4a:61:12:ec:a9:a7:
28:bf:7c:fd:c8:bc:ab:5e:25:0e:e8:72:94:b9:6e:ee:3c:d2:
c6:f1:20:d1:d5:f2:5f:75:f7:94:d8:ad:bd:b2:84:f5:5a:fb:
f2:6f:e6:9d:d4:51:76:2f:58:20:84:e8:91:58:99:ad:4a:40:
72:bf:26:25:21:0f:0a:29:36:e7:0f:b5:f7:0a:51:e3:49:f7:
2f:31:ca:fe:3a:45:08:df:98:42:84:c4:e5:a8:29:39:7c:d2:
03:07:55:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lv+wwU82ywwFyJKJOxZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZDNjYzU5MWNlYmEzODYxMzBmM2M5Zjc0MjY0NThiODg4
N2MyZWIwHhcNMjUwMTMxMDkwMDIyWhcNMjUwMjAxMDkwMDIyWjAzMTEwLwYDVQQD
EyhmMmQ4MTBkN2JmMGI2NjVmNTkxNjY3NzI1MmFkOTUzMTAxYTBkOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZDxNW8cJplALXIOL46cQNhcmKeh
2Q8F/HWhwtvy/MEc5Nnt+clm9B6FF7UI3Rh10KYTvE/RJOxVcPSSc2y5K43JAfzU
LjxLWpsF68dWOYYG1DWXJPVdzMGkNSIThuUiz6oCAKs0j61O9a5lMCZusune8y3V
Y+Q3Jq20sPx5NuoOMy774j4z4EFxNGscsaMx+DoU37q+MIH2hZ9MPUphXiZ45nIT
+XD/ToNLl3RDKAVmn2Ne/PPd/4B7k+XhpEdhvfN/bME/wA/Q+1iGCOrMJ2/loxz4
uQpFD89J+NN7MUeAcpeVkHJV8PzB0qIZOcTVZWyzFHDpHwxflEcQ6dBlbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLYENe/C2ZfWRZnclKtlTEBoNkMMB8GA1UdIwQY
MBaAFETTzFkc66OGEw88n3QmRYuIh8LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My80MzYyOWEtNWE0ZC00YmRmLTk5Zjgt
MmJiNjU0MDhkZjc0LzEvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My80MzYyOWEtNWE0ZC00YmRmLTk5ZjgtMmJiNjU0MDhkZjc0
LzEvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhg8JNODx
+i2dx/MaWMcgXjkN33hBJcFvU1seP+THUKuNvTCXdU/NozQw1pm0/+OfUPDMMzXU
0UNsph3GouV870rAwvLD6MPiE3MA5k0QRAmFvk+iZevj661y6WOhwdwswKV0R82R
MT2XwGaqs63vU+C/FZHE8yncbHQy3AU4Vu/J+TedPZwXNBiKEFjuedbEYFJKG0gE
n454LKt1SmES7KmnKL98/ci8q14lDuhylLlu7jzSxvEg0dXyX3X3lNitvbKE9Vr7
8m/mndRRdi9YIITokViZrUpAcr8mJSEPCik25w+19wpR40n3LzHK/jpFCN+YQoTE
5agpOXzSAwdV8Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:33 2025 by rpki-client on console-fra.rpki-client.org