Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
File: ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json)
Hash identifier: H/wWgW6884o3cNlwHgTnu8Gaczy0x+M+YYKpikxAIak=
Subject key identifier: A5:50:36:8D:F3:C9:70:24:40:7B:1B:32:50:89:D0:73:09:FC:78:DA
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 0194BAF2316FDE621CC808323D5EAB64F9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 06:00:21 +0000
Manifest this update: Fri 31 Jan 2025 06:00:21 +0000
Manifest next update: Sat 01 Feb 2025 06:00:21 +0000
Files and hashes: 1: 1MBxY-L-G-PezNdSAum2Qznjvvk.roa (hash: WzqdlX3BQAdtrBN0mtz0qnp4BVXNCLlknuqqWLF2nEY=)
2: 64_MTb5KgxHA8ajybrrfkFaqSHo.roa (hash: 3HoEZ5o8a764cMBp72+Je8xSTOL3XWu1W9vfmUxztJY=)
3: NcFH54U_2J6k3O8FG01A4l3YkX4.roa (hash: /kjUMIh5yITP6UOhs7cpgkxUJuo6AlmV12M3gHqX+6U=)
4: QnTqLhMHC9T4AoMjaLap4QpmLDU.roa (hash: 7wNURJNL1VG5jzuYA7SYiM1RdZjO0wnh2b7/W3YMGs8=)
5: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: QWQySSrhbiwLkEUOTQ6k7lCDuRi15vR3+NkXFkBagEE=)
6: ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa (hash: YVehp3VlkVUX9qY7Jk5F+8RNoRR+lbS+MAT+mCdr+Tw=)
7: ymZdEzMVegQJBBFPgdqPQzW1-gk.roa (hash: RX7+2wwGNp6bGJxI7GKZlbgjxbbHN4LNuKVuwi5foZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:31:6f:de:62:1c:c8:08:32:3d:5e:ab:64:f9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Jan 31 06:00:21 2025 GMT
Not After : Feb 1 06:00:21 2025 GMT
Subject: CN=a550368df3c97024407b1b325089d07309fc78da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:33:ce:c6:a9:46:66:a4:82:0c:9c:ea:f2:ec:
8a:06:4f:a6:e9:95:59:82:a4:04:76:c3:c1:c9:a8:
0b:4e:30:2e:4f:aa:8b:b9:8c:e1:67:a9:ad:05:3e:
26:10:c4:bd:47:b8:6c:12:82:62:35:70:0c:ce:ec:
24:c7:b1:61:e8:c1:c1:92:64:72:b9:fc:62:e5:a4:
66:53:4f:c5:62:03:c0:ac:a2:b5:af:fa:91:b8:43:
69:cb:db:7b:ab:66:0b:86:a6:9a:26:ef:4e:12:9e:
b7:2e:c9:f3:e3:c3:70:4f:16:4c:7b:ed:80:8a:89:
8d:f0:83:54:ff:39:54:b7:8d:8f:e6:3c:53:84:1c:
9f:2e:ff:24:74:f0:0e:e6:3c:a4:e2:80:1f:c8:47:
57:93:a4:21:91:c9:a3:4e:e8:f1:fc:6d:29:c9:e7:
07:34:09:1e:53:4b:1c:36:4b:9f:1e:ed:6b:ec:a6:
b8:c0:9e:b4:36:a0:60:7d:39:45:69:d6:c5:68:ff:
6f:b0:96:c4:3b:b4:f1:e5:19:b0:72:3e:c8:1c:f1:
dd:bb:23:0d:65:f3:2d:1e:96:e2:90:45:30:3d:de:
66:18:04:a8:ca:a0:5e:c1:2e:7d:3e:81:3c:c2:e3:
1d:ce:e0:56:e8:ef:c7:10:dd:d9:79:8b:90:47:3d:
19:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:50:36:8D:F3:C9:70:24:40:7B:1B:32:50:89:D0:73:09:FC:78:DA
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5d:62:0f:7d:a9:07:a2:43:2f:e2:d1:a7:cc:cc:f5:46:da:
cc:58:8b:bc:71:25:8f:91:fe:e9:48:36:18:cb:69:2b:76:d6:
ee:47:6a:bf:78:12:7b:c0:30:81:ef:68:e8:aa:d9:d2:99:91:
84:fb:32:27:e7:51:83:0a:6e:d0:00:ab:80:fa:83:bf:13:ca:
4c:18:e5:ec:7b:52:fa:1d:84:15:5e:0d:e7:05:0f:1b:39:dd:
7a:ff:c1:dc:d5:b1:2e:00:41:09:de:88:60:d6:1a:2c:8b:ef:
56:e1:1f:19:33:9c:b2:d5:6c:22:26:87:4a:85:20:83:1c:c4:
b1:fd:f7:89:bd:dc:5c:7f:90:a4:58:92:20:07:cb:03:ff:cb:
95:c7:2d:36:79:c2:c1:31:6a:27:89:62:dd:74:ad:63:6a:d9:
ed:39:11:ba:d5:d0:15:2d:8f:1a:37:c3:e3:73:bc:64:6b:21:
90:09:d9:cb:d7:58:54:43:13:5b:86:a7:81:7d:3d:d0:da:3f:
15:c8:fe:1a:93:ed:8d:66:27:77:79:b8:24:c1:32:3f:11:a0:
e8:97:74:be:a7:5b:4f:ac:3d:2c:f9:ab:f1:92:30:90:c4:7e:
32:0f:39:3f:ca:a4:54:83:09:db:ad:50:82:c7:c4:fc:62:3a:
67:5b:07:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68jFv3mIcyAgyPV6rZPmnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0M2UxYmE5MWM1NjlhOGIyMWE2ZDJkNjdmNWRiYmQ2YzA0
ZTQzZWEwHhcNMjUwMTMxMDYwMDIxWhcNMjUwMjAxMDYwMDIxWjAzMTEwLwYDVQQD
EyhhNTUwMzY4ZGYzYzk3MDI0NDA3YjFiMzI1MDg5ZDA3MzA5ZmM3OGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jPOxqlGZqSCDJzq8uyKBk+m6ZVZ
gqQEdsPByagLTjAuT6qLuYzhZ6mtBT4mEMS9R7hsEoJiNXAMzuwkx7Fh6MHBkmRy
ufxi5aRmU0/FYgPArKK1r/qRuENpy9t7q2YLhqaaJu9OEp63Lsnz48NwTxZMe+2A
iomN8INU/zlUt42P5jxThByfLv8kdPAO5jyk4oAfyEdXk6QhkcmjTujx/G0pyecH
NAkeU0scNkufHu1r7Ka4wJ60NqBgfTlFadbFaP9vsJbEO7Tx5Rmwcj7IHPHduyMN
ZfMtHpbikEUwPd5mGASoyqBewS59PoE8wuMdzuBW6O/HEN3ZeYuQRz0ZjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVQNo3zyXAkQHsbMlCJ0HMJ/HjaMB8GA1UdIwQY
MBaAFGQ+G6kcVpqLIabS1n9du9bATkPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAt
ZmVhMGFmZjM1OWY1LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAtZmVhMGFmZjM1OWY1
LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVl1iD32p
B6JDL+LRp8zM9UbazFiLvHElj5H+6Ug2GMtpK3bW7kdqv3gSe8Awge9o6KrZ0pmR
hPsyJ+dRgwpu0ACrgPqDvxPKTBjl7HtS+h2EFV4N5wUPGzndev/B3NWxLgBBCd6I
YNYaLIvvVuEfGTOcstVsIiaHSoUggxzEsf33ib3cXH+QpFiSIAfLA//LlcctNnnC
wTFqJ4li3XStY2rZ7TkRutXQFS2PGjfD43O8ZGshkAnZy9dYVEMTW4angX090No/
Fcj+GpPtjWYnd3m4JMEyPxGg6Jd0vqdbT6w9LPmr8ZIwkMR+Mg85P8qkVIMJ261Q
gsfE/GI6Z1sHfg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:40 2025 by rpki-client on console-fra.rpki-client.org