
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
File: Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft (raw, json)
Hash identifier: HqXBMOO0Zy22dlLc/woiNXT4dxtV1ObkSc6w5xniWPE=
Subject key identifier: 5C:02:3C:F8:17:E3:22:43:5F:AD:A1:03:12:D0:F0:AE:1A:6F:35:46
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Certificate issuer: /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial: 0194BA8439982B88E8C7DBF6544C73727100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 04:00:14 +0000
Manifest this update: Fri 31 Jan 2025 04:00:14 +0000
Manifest next update: Sat 01 Feb 2025 04:00:14 +0000
Files and hashes: 1: Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl (hash: 2lev1rwvUlhqJ8aKkmR7QtWwK2JGeXUUiegU3uimyco=)
2: ZL3E7Adz2UxGlx__ehEXq17MBJk.roa (hash: eyCT9Oq7LBXIn9/dNlFO4JQgfNKfcXzeYyZGwsbG9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:39:98:2b:88:e8:c7:db:f6:54:4c:73:72:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Validity
Not Before: Jan 31 04:00:14 2025 GMT
Not After : Feb 1 04:00:14 2025 GMT
Subject: CN=5c023cf817e322435fada10312d0f0ae1a6f3546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9f:6d:51:fa:9d:de:0b:61:a0:dc:91:6e:03:
fd:3b:17:ff:11:03:94:81:7e:f1:6e:a9:36:d8:d2:
fe:6f:02:b0:55:8b:dd:25:c6:47:ba:8d:62:3c:72:
be:e2:ff:6b:ac:85:be:c2:fe:5b:e6:25:81:be:0a:
1a:c6:c9:f5:a5:e9:1f:56:17:55:d1:97:5e:f6:07:
8a:59:99:26:05:25:19:26:3f:de:72:08:47:97:7e:
c2:73:93:7f:36:b1:6c:ff:77:32:32:6e:85:b2:65:
aa:34:bb:41:b3:14:4d:05:58:59:45:37:b9:c2:db:
1e:7e:bd:67:88:65:1f:8e:96:81:d3:42:05:51:a5:
6f:0c:9c:2a:88:7a:99:bd:3d:59:18:22:7d:16:6d:
6c:7f:40:d8:08:56:96:55:ad:ad:5d:50:b8:36:b7:
e3:d2:7c:25:4a:c2:ad:fd:46:1a:22:17:5e:f2:5b:
20:f9:e0:79:53:fd:64:5d:dd:03:28:46:73:35:94:
91:d0:e5:b3:c1:e5:83:07:3b:55:4c:c9:f2:57:3e:
58:dd:cd:ad:64:7e:d2:e8:93:46:ee:5a:71:98:ea:
e3:43:34:f5:b5:12:36:f9:74:d9:03:da:7f:8b:8c:
36:5b:c7:47:b4:b5:07:db:38:61:a3:31:70:32:54:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:3C:F8:17:E3:22:43:5F:AD:A1:03:12:D0:F0:AE:1A:6F:35:46
X509v3 Authority Key Identifier:
keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e8:d4:33:f4:5f:5c:a5:ab:14:42:d0:cf:b4:3e:51:c4:2d:
0c:26:fc:9b:8b:f3:c0:d1:5a:e5:ce:18:2a:dc:18:5f:0a:28:
7d:49:d4:3f:0e:d8:ee:a3:27:8a:e6:d5:3c:6a:f9:5a:c0:8c:
30:c3:f4:95:94:8f:67:41:a5:95:e1:d4:4a:ec:76:52:ed:48:
bd:c3:1e:c4:0d:fa:81:37:b5:18:34:ae:8f:69:80:a7:19:77:
29:b0:13:29:c1:fb:35:ca:56:5b:4f:07:fd:42:a3:31:02:36:
36:7a:58:0e:5e:4d:aa:6c:d0:ad:3f:96:a8:3c:2a:4f:77:9c:
e8:d2:63:67:15:8d:7e:61:90:3b:df:9a:69:98:4c:81:b9:68:
4a:0c:c6:4b:81:8f:5b:8a:c6:9c:8b:5a:bf:f1:d6:78:03:6c:
c7:8a:1f:02:de:63:f7:74:b6:89:9e:c1:ca:8e:98:f8:94:57:
ef:39:0d:f8:85:1d:a0:4d:1e:74:f6:bc:d1:8f:39:96:4e:9f:
53:1f:64:4c:1f:d5:a1:3d:bf:ed:77:f5:e5:95:e1:23:5a:2c:
9d:4e:48:1f:0f:ea:5e:0a:fd:61:93:95:86:41:8c:af:f0:e3:
b4:b1:38:59:f5:4e:12:3b:f8:3f:39:34:aa:20:ad:4e:48:ed:
50:f7:24:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hDmYK4jox9v2VExzcnEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZmZmMjU3OGEwZTYyMTVkYzYwZTJkYTk0NmYzMGQyNWM2
M2NkNmEwHhcNMjUwMTMxMDQwMDE0WhcNMjUwMjAxMDQwMDE0WjAzMTEwLwYDVQQD
Eyg1YzAyM2NmODE3ZTMyMjQzNWZhZGExMDMxMmQwZjBhZTFhNmYzNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA259tUfqd3gthoNyRbgP9Oxf/EQOU
gX7xbqk22NL+bwKwVYvdJcZHuo1iPHK+4v9rrIW+wv5b5iWBvgoaxsn1pekfVhdV
0Zde9geKWZkmBSUZJj/ecghHl37Cc5N/NrFs/3cyMm6FsmWqNLtBsxRNBVhZRTe5
wtsefr1niGUfjpaB00IFUaVvDJwqiHqZvT1ZGCJ9Fm1sf0DYCFaWVa2tXVC4Nrfj
0nwlSsKt/UYaIhde8lsg+eB5U/1kXd0DKEZzNZSR0OWzweWDBztVTMnyVz5Y3c2t
ZH7S6JNG7lpxmOrjQzT1tRI2+XTZA9p/i4w2W8dHtLUH2zhhozFwMlTIhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwCPPgX4yJDX62hAxLQ8K4abzVGMB8GA1UdIwQY
MBaAFF7/8leKDmIV3GDi2pRvMNJcY81qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83OWQxYTEtMDkxYy00MDM5LTg3Nzgt
YjY5NzkwN2ZmZGM4LzEvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83OWQxYTEtMDkxYy00MDM5LTg3NzgtYjY5NzkwN2ZmZGM4
LzEvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+jUM/Rf
XKWrFELQz7Q+UcQtDCb8m4vzwNFa5c4YKtwYXwoofUnUPw7Y7qMniubVPGr5WsCM
MMP0lZSPZ0GlleHUSux2Uu1IvcMexA36gTe1GDSuj2mApxl3KbATKcH7NcpWW08H
/UKjMQI2NnpYDl5NqmzQrT+WqDwqT3ec6NJjZxWNfmGQO9+aaZhMgbloSgzGS4GP
W4rGnItav/HWeANsx4ofAt5j93S2iZ7Byo6Y+JRX7zkN+IUdoE0edPa80Y85lk6f
Ux9kTB/VoT2/7Xf15ZXhI1osnU5IHw/qXgr9YZOVhkGMr/DjtLE4WfVOEjv4Pzk0
qiCtTkjtUPcksA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:55 2025 by rpki-client on console-fra.rpki-client.org