Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File: fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier: igOdeAZIP4P/bWJart7EN4KXbrQ7GH1QKC6f9XFQKv4=
Subject key identifier: 2D:A6:38:26:46:2D:AF:47:B5:1A:B6:D0:3D:0C:3A:FE:35:68:E5:94
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer: /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial: 0194BA8470396D9C0FEC745D21DD121ED9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number: 038D
Signing time: Fri 31 Jan 2025 04:00:29 +0000
Manifest this update: Fri 31 Jan 2025 04:00:29 +0000
Manifest next update: Sat 01 Feb 2025 04:00:29 +0000
Files and hashes: 1: 2DvVU95orox5IeGSdibufOYyF_M.roa (hash: zYc2kejhvwZAMUP9rtgZ0VImRS6xXrZBfW+6RhgOP2c=)
2: _vBlwHfpCbgKUBFoqSs3ggu60nI.roa (hash: AsAILNa2VMgTcOZ13cTcAxG+d9Mwo5a4AZ6ZUVGbk/c=)
3: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: 30PPh527tQdbdkc9aaAWO82BDuHyXDoqLhbcmmsTrLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:70:39:6d:9c:0f:ec:74:5d:21:dd:12:1e:d9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
Validity
Not Before: Jan 31 04:00:29 2025 GMT
Not After : Feb 1 04:00:29 2025 GMT
Subject: CN=2da63826462daf47b51ab6d03d0c3afe3568e594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:aa:c0:6e:85:39:85:fa:82:1e:59:bf:64:
90:20:e4:6b:0a:ca:4a:dc:ee:61:a0:94:b4:43:1d:
4d:79:10:49:28:6c:2c:9c:02:02:6f:43:0d:b2:03:
46:77:d7:bd:72:d3:2d:37:70:ed:30:7e:e6:ca:86:
46:97:11:3e:53:b2:19:50:fe:fc:47:78:f7:bf:a3:
83:8c:de:e7:d1:13:91:7c:eb:6b:ef:47:8a:ca:08:
c6:89:63:8c:7b:8a:b9:56:06:70:75:2a:a1:e4:ba:
6f:24:ac:3c:9e:f5:22:02:7b:51:a3:c7:b3:f5:f2:
56:97:fe:86:80:70:81:19:55:7e:06:12:25:ae:0d:
d1:b2:78:59:34:7c:b4:ec:1f:c6:2b:bf:da:0d:d0:
f7:8e:2b:e7:8b:2b:93:5e:34:89:af:43:de:bb:09:
e8:d5:cb:1b:38:bb:02:e1:ee:42:95:7b:c9:de:44:
c7:94:b3:2c:90:7f:43:17:fc:e8:93:42:21:d5:74:
73:e9:9d:b2:5e:bc:16:1d:e2:5c:fc:35:73:67:b5:
e1:8f:cf:45:59:6e:9a:72:18:10:dc:63:88:b1:cc:
88:95:ac:82:2c:a6:37:5a:db:da:13:0f:76:64:f6:
54:57:df:2b:74:8a:fa:ab:e1:e7:e3:5f:69:08:96:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A6:38:26:46:2D:AF:47:B5:1A:B6:D0:3D:0C:3A:FE:35:68:E5:94
X509v3 Authority Key Identifier:
keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:20:e8:88:1e:21:6b:21:9d:4e:d7:a3:cb:65:2d:02:e7:18:
99:9a:30:30:6a:98:94:57:5e:46:20:ce:6a:02:c3:1f:62:2d:
5a:0e:9f:96:d9:46:6f:2d:7a:85:26:da:e7:cd:c8:5e:8e:3b:
cc:29:24:78:d6:dc:f5:0a:a7:79:9f:08:d8:62:b6:66:81:19:
f8:01:24:67:5c:71:72:68:0a:8b:63:59:f2:81:e7:b5:69:b8:
32:f2:eb:34:70:49:3f:16:a2:56:d0:b6:f8:37:b3:8d:50:d3:
22:a9:ef:4c:a0:08:ed:75:29:c7:b4:b8:0e:4b:8a:d1:dc:b2:
b4:87:c1:fc:00:c1:ce:c1:62:06:ce:e5:67:38:a7:18:a3:53:
b0:94:bf:6e:1e:9f:b0:ee:02:9b:48:dc:24:9d:03:75:38:d6:
fd:ad:21:1a:54:ec:40:01:f9:ca:51:d6:7a:a2:6e:69:71:92:
65:21:ad:9b:4b:6a:f5:b3:e9:b2:6b:d9:35:08:16:ff:45:9e:
15:d3:71:4b:8d:ee:cf:e1:8a:a7:4a:6b:be:d6:20:7e:e0:34:
d3:0e:29:86:7f:3e:3a:ca:fa:a4:54:f2:f2:19:d3:43:a1:57:
07:32:e1:b7:c6:89:83:94:05:8b:10:7d:9b:59:4b:35:20:2a:
66:b9:54:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hHA5bZwP7HRdId0SHtm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZTk3ODIzMjVkMzA1NGNiNjk1NmFkMjI3MDQ1MzBkZTky
YTBmMDUwHhcNMjUwMTMxMDQwMDI5WhcNMjUwMjAxMDQwMDI5WjAzMTEwLwYDVQQD
EygyZGE2MzgyNjQ2MmRhZjQ3YjUxYWI2ZDAzZDBjM2FmZTM1NjhlNTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn52qwG6FOYX6gh5Zv2SQIORrCspK
3O5hoJS0Qx1NeRBJKGwsnAICb0MNsgNGd9e9ctMtN3DtMH7myoZGlxE+U7IZUP78
R3j3v6ODjN7n0RORfOtr70eKygjGiWOMe4q5VgZwdSqh5LpvJKw8nvUiAntRo8ez
9fJWl/6GgHCBGVV+BhIlrg3RsnhZNHy07B/GK7/aDdD3jivniyuTXjSJr0Peuwno
1csbOLsC4e5ClXvJ3kTHlLMskH9DF/zok0Ih1XRz6Z2yXrwWHeJc/DVzZ7Xhj89F
WW6achgQ3GOIscyIlayCLKY3WtvaEw92ZPZUV98rdIr6q+Hn419pCJYA5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2mOCZGLa9HtRq20D0MOv41aOWUMB8GA1UdIwQY
MBaAFHzpeCMl0wVMtpVq0icEUw3pKg8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk9sNEl5WFRCVXkybFdyU0p3UlREZWtxRHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xMTk0MDItYjliYi00Mzc0LWJmZWEt
OTg4ZTc3MGIwMTViLzEvZk9sNEl5WFRCVXkybFdyU0p3UlREZWtxRHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8xMTk0MDItYjliYi00Mzc0LWJmZWEtOTg4ZTc3MGIwMTVi
LzEvZk9sNEl5WFRCVXkybFdyU0p3UlREZWtxRHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSDoiB4h
ayGdTtejy2UtAucYmZowMGqYlFdeRiDOagLDH2ItWg6fltlGby16hSba583IXo47
zCkkeNbc9QqneZ8I2GK2ZoEZ+AEkZ1xxcmgKi2NZ8oHntWm4MvLrNHBJPxaiVtC2
+DezjVDTIqnvTKAI7XUpx7S4DkuK0dyytIfB/ADBzsFiBs7lZzinGKNTsJS/bh6f
sO4Cm0jcJJ0DdTjW/a0hGlTsQAH5ylHWeqJuaXGSZSGtm0tq9bPpsmvZNQgW/0We
FdNxS43uz+GKp0prvtYgfuA00w4phn8+Osr6pFTy8hnTQ6FXBzLht8aJg5QFixB9
m1lLNSAqZrlUkg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:47 2025 by rpki-client on console-fra.rpki-client.org