Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: 7NqHspZpHJl0lhHSN/kVval/+hXkqRKhD57L1yJwH1A=
Subject key identifier: 15:B4:EF:A2:E3:29:19:9E:B8:EB:04:BD:2D:A1:53:18:6C:36:ED:4B
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 0194BB96EDD9C1F418684B0038AE7779250C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 09:00:18 +0000
Manifest this update: Fri 31 Jan 2025 09:00:18 +0000
Manifest next update: Sat 01 Feb 2025 09:00:18 +0000
Files and hashes: 1: _OBCt42Qgl4wI2H058mG4uDYUOw.roa (hash: jWbxYRFs270K2f9wkh6LdpAj2cDPsQg7s0mhGOvBxRQ=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: oxpe1fejD63Zee6EUQSeAn3jjXLTvUADk3i0qK4ueFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:ed:d9:c1:f4:18:68:4b:00:38:ae:77:79:25:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Jan 31 09:00:18 2025 GMT
Not After : Feb 1 09:00:18 2025 GMT
Subject: CN=15b4efa2e329199eb8eb04bd2da153186c36ed4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:9d:66:0b:a3:e7:12:4c:16:e9:81:d0:e2:
13:d6:bc:6e:65:10:0c:82:5a:cf:f2:83:a5:14:47:
d4:9c:d8:ba:54:3e:6e:b8:df:93:40:24:3b:e9:7c:
3e:38:55:08:13:61:cd:fc:8d:4a:89:1a:99:b0:37:
a1:c1:5f:34:04:6f:58:a8:ec:0a:30:3f:94:e4:c4:
35:61:f4:36:54:68:ac:8a:3e:9d:57:41:dd:b0:9c:
d7:38:bf:8a:e8:97:7b:e0:5e:ff:f5:92:ad:a3:4c:
51:77:be:cc:1c:4e:85:77:2f:60:25:98:fd:94:6c:
d6:5d:09:40:91:9d:c3:30:d8:7a:54:b4:db:6d:94:
3b:02:b7:54:74:2a:c5:a2:50:24:6b:76:60:d6:c8:
be:93:83:d3:14:f4:1d:47:0f:67:2e:80:e8:16:cc:
0b:78:98:39:18:c2:2e:67:15:74:6f:8e:2d:c8:56:
0a:65:a0:9f:a4:4d:d9:57:a9:f6:11:84:8e:d0:1a:
67:9b:6a:bb:6b:4e:1a:ab:3c:de:0d:38:aa:35:79:
8d:74:f8:45:f0:b6:5d:86:0a:7c:38:af:62:cb:a1:
ff:0d:6b:6c:07:84:71:11:3a:ac:07:c3:13:4b:ce:
b7:80:e3:dc:98:49:1f:c4:3f:79:35:50:5c:7d:45:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B4:EF:A2:E3:29:19:9E:B8:EB:04:BD:2D:A1:53:18:6C:36:ED:4B
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e5:9e:11:7c:4f:90:0a:c1:b8:6b:ae:a8:e5:1c:b6:fa:0a:
c8:19:46:96:3f:9f:28:a8:dd:ca:fb:ae:f7:8c:82:6c:97:f4:
0b:93:2b:a1:3c:c8:f0:81:56:09:53:31:17:7f:b0:69:c0:e4:
58:fd:ba:88:1b:d4:e1:47:be:0b:a4:56:7d:79:00:ba:92:4b:
64:b7:b6:56:b3:d1:e7:2d:dc:3e:d7:b9:c6:4c:60:c7:98:58:
c2:5a:f2:f0:be:51:65:cb:7a:3c:e7:07:65:42:f2:54:56:06:
f4:75:72:8d:7c:3f:9d:80:c1:22:50:ab:cf:6d:f4:cb:6d:4e:
65:a3:be:cf:8c:3b:b2:3f:e9:1d:2f:df:35:50:74:75:4c:25:
17:e2:f4:96:49:d6:78:83:52:d9:b6:99:d5:9a:30:a1:cf:c3:
4c:97:ee:32:6f:44:71:11:1b:6f:0a:25:45:a1:bf:31:06:b9:
f6:68:5b:d7:3f:41:12:3c:d4:21:fe:1c:fc:3d:b9:a4:1e:82:
ed:6d:fe:d1:a5:c2:a6:8e:93:e0:77:e9:dd:21:52:98:9d:72:
b2:40:ef:df:4b:81:23:a3:b0:02:4c:7f:17:56:fe:76:69:3f:
7c:e8:2b:78:d9:ea:3f:f8:5e:30:84:83:74:73:8c:25:78:80:
90:84:db:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lu3ZwfQYaEsAOK53eSUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmM2Q4OWE4MWZjMjk5ZjM5YzA5MmU0ZjZkMDE3M2E5YTlj
ZmJjNjUwHhcNMjUwMTMxMDkwMDE4WhcNMjUwMjAxMDkwMDE4WjAzMTEwLwYDVQQD
EygxNWI0ZWZhMmUzMjkxOTllYjhlYjA0YmQyZGExNTMxODZjMzZlZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQKdZguj5xJMFumB0OIT1rxuZRAM
glrP8oOlFEfUnNi6VD5uuN+TQCQ76Xw+OFUIE2HN/I1KiRqZsDehwV80BG9YqOwK
MD+U5MQ1YfQ2VGisij6dV0HdsJzXOL+K6Jd74F7/9ZKto0xRd77MHE6Fdy9gJZj9
lGzWXQlAkZ3DMNh6VLTbbZQ7ArdUdCrFolAka3Zg1si+k4PTFPQdRw9nLoDoFswL
eJg5GMIuZxV0b44tyFYKZaCfpE3ZV6n2EYSO0Bpnm2q7a04aqzzeDTiqNXmNdPhF
8LZdhgp8OK9iy6H/DWtsB4RxETqsB8MTS863gOPcmEkfxD95NVBcfUVjjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBW076LjKRmeuOsEvS2hUxhsNu1LMB8GA1UdIwQY
MBaAFG89iagfwpnznAkuT20Bc6mpz7xlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wNWUwZWUtYWUwMy00MTI0LWI2NzAt
MzA5YjdiOTYwZDE0LzEvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wNWUwZWUtYWUwMy00MTI0LWI2NzAtMzA5YjdiOTYwZDE0
LzEvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+WeEXxP
kArBuGuuqOUctvoKyBlGlj+fKKjdyvuu94yCbJf0C5MroTzI8IFWCVMxF3+wacDk
WP26iBvU4Ue+C6RWfXkAupJLZLe2VrPR5y3cPte5xkxgx5hYwlry8L5RZct6POcH
ZULyVFYG9HVyjXw/nYDBIlCrz230y21OZaO+z4w7sj/pHS/fNVB0dUwlF+L0lknW
eINS2baZ1Zowoc/DTJfuMm9EcREbbwolRaG/MQa59mhb1z9BEjzUIf4c/D25pB6C
7W3+0aXCpo6T4Hfp3SFSmJ1yskDv30uBI6OwAkx/F1b+dmk/fOgreNnqP/heMISD
dHOMJXiAkITbTg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:20 2025 by rpki-client on console-fra.rpki-client.org