Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
File: iKVZ3N1bxLZssklvLm-w6PlUqus.mft (raw, json)
Hash identifier: 4NvTfC55sHiHOi9KgQkczhRyQJeJbVKJSXk4HPrpmAs=
Subject key identifier: EC:77:DF:F7:3B:41:09:63:96:90:7C:C3:5A:17:4F:25:A8:25:AF:DC
Authority key identifier: 88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
Certificate issuer: /CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Certificate serial: 0194BC3BE6F9478319798821B320087781F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
Manifest number: 0D92
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: iKVZ3N1bxLZssklvLm-w6PlUqus.crl (hash: LjK+6Jdf3tVke5TjS/zqXVbbUmtUWUel0Rj/7+nghdE=)
2: oGUzs3HriURmMyvP-1mM3ixvd88.roa (hash: U9dJ3cn9/4GeEgNWQhNTsFuWjpySklwjtb60dseGPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e6:f9:47:83:19:79:88:21:b3:20:08:77:81:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=ec77dff73b41096396907cc35a174f25a825afdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:f7:46:56:6a:87:d5:2f:23:1e:b6:42:e9:
aa:ee:18:9e:cf:3e:65:34:48:2c:fb:b8:35:10:1e:
a7:b3:43:e7:aa:e4:b5:82:23:ab:4f:5c:92:de:c4:
1a:44:5c:cb:b8:5b:8f:06:92:06:d8:bb:82:44:fc:
b8:95:ef:28:fb:de:24:9b:06:83:94:bd:83:86:78:
84:76:44:42:08:92:53:03:f9:67:5d:61:b1:c8:a9:
55:0b:e6:a2:4e:e8:37:2f:73:10:6d:15:ed:8c:d2:
50:8e:54:a1:0a:b8:b1:38:6b:ec:9a:65:db:06:f5:
86:10:f6:45:d8:4f:2a:cc:d7:17:de:bc:71:db:a3:
df:3e:cf:15:17:c5:f8:b8:a0:c4:be:81:cc:4a:15:
22:9f:b4:1f:de:f7:6d:a0:d3:d1:17:8b:45:df:a8:
1b:09:de:99:6a:6b:22:ee:49:21:4b:c2:f1:8d:b6:
9b:6a:53:03:03:fe:bb:43:cd:97:db:de:f1:3d:e1:
cf:c1:8a:5a:23:a4:e1:01:c9:2b:fc:88:99:88:e7:
a2:bd:fc:dc:ea:2f:b0:5d:a7:1f:18:6e:c7:a5:0c:
e1:19:e9:ac:6a:d1:95:a1:18:50:17:fb:c5:06:59:
2a:b6:1f:d6:6a:72:97:5a:00:b4:fa:57:9a:4e:64:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:77:DF:F7:3B:41:09:63:96:90:7C:C3:5A:17:4F:25:A8:25:AF:DC
X509v3 Authority Key Identifier:
keyid:88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a5:a4:46:69:85:0a:76:04:e8:76:10:bb:e3:a9:a3:9a:ff:
07:a3:30:73:f6:5e:35:1d:e8:cd:59:f1:ae:89:8a:70:1c:e4:
be:68:14:23:f2:d3:df:9b:9f:31:dd:9c:e6:d0:2d:67:ae:8b:
47:89:d7:e2:da:47:05:cc:44:c9:ca:13:18:38:c6:71:41:63:
40:91:c4:b1:2f:59:49:c5:2e:82:61:1d:cc:b8:ff:07:64:a2:
d7:d8:b2:56:2f:b2:25:ba:bb:0d:c1:47:d9:ce:a4:47:95:d6:
54:c4:41:e6:45:4e:14:2d:90:5b:15:aa:56:af:d8:5e:d3:30:
95:72:a5:0f:8b:be:52:36:15:9b:c5:5e:ac:75:23:e8:94:d4:
5e:01:a6:21:45:c2:97:94:a0:c8:37:bb:9e:be:00:00:f8:f7:
d6:43:81:6b:3f:d0:a0:3d:b7:15:e2:9b:b8:d4:52:f5:a5:78:
64:01:55:61:c7:3a:ca:46:10:8b:bc:12:d8:82:5d:7a:7e:39:
eb:08:5b:ea:8e:50:3d:0e:7c:99:d0:6a:4d:15:c4:c9:e8:1c:
7c:08:0d:f5:5f:9d:fd:ff:40:92:35:77:72:aa:bd:5d:a2:e3:
94:49:53:82:a3:f3:4f:40:9e:5d:63:6b:75:83:f3:a6:ca:c2:
ce:f9:c1:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+b5R4MZeYghsyAId4H0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTU1OWRjZGQ1YmM0YjY2Y2IyNDk2ZjJlNmZiMGU4Zjk1
NGFhZWIwHhcNMjUwMTMxMTIwMDI5WhcNMjUwMjAxMTIwMDI5WjAzMTEwLwYDVQQD
EyhlYzc3ZGZmNzNiNDEwOTYzOTY5MDdjYzM1YTE3NGYyNWE4MjVhZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqD3RlZqh9UvIx62Qumq7hiezz5l
NEgs+7g1EB6ns0PnquS1giOrT1yS3sQaRFzLuFuPBpIG2LuCRPy4le8o+94kmwaD
lL2DhniEdkRCCJJTA/lnXWGxyKlVC+aiTug3L3MQbRXtjNJQjlShCrixOGvsmmXb
BvWGEPZF2E8qzNcX3rxx26PfPs8VF8X4uKDEvoHMShUin7Qf3vdtoNPRF4tF36gb
Cd6Zamsi7kkhS8LxjbabalMDA/67Q82X297xPeHPwYpaI6ThAckr/IiZiOeivfzc
6i+wXacfGG7HpQzhGemsatGVoRhQF/vFBlkqth/WanKXWgC0+leaTmT5fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOx33/c7QQljlpB8w1oXTyWoJa/cMB8GA1UdIwQY
MBaAFIilWdzdW8S2bLJJby5vsOj5VKrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTct
OTIwZDJhNjIwN2E0LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTctOTIwZDJhNjIwN2E0
LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6WkRmmF
CnYE6HYQu+Opo5r/B6Mwc/ZeNR3ozVnxromKcBzkvmgUI/LT35ufMd2c5tAtZ66L
R4nX4tpHBcxEycoTGDjGcUFjQJHEsS9ZScUugmEdzLj/B2Si19iyVi+yJbq7DcFH
2c6kR5XWVMRB5kVOFC2QWxWqVq/YXtMwlXKlD4u+UjYVm8VerHUj6JTUXgGmIUXC
l5SgyDe7nr4AAPj31kOBaz/QoD23FeKbuNRS9aV4ZAFVYcc6ykYQi7wS2IJden45
6whb6o5QPQ58mdBqTRXEyegcfAgN9V+d/f9AkjV3cqq9XaLjlElTgqPzT0CeXWNr
dYPzpsrCzvnBsg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:58 2025 by rpki-client on console-fra.rpki-client.org