Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: AGXCLM920rEdZ2a+QbEMwuXCqPradKbxwTcjiQUoBXM=
Subject key identifier: 51:83:27:5B:A9:88:53:21:05:56:F0:7E:99:A9:5E:3F:8D:7A:00:46
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 0194BAF230F24ECCFD044026728891F0E03D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 06:00:21 +0000
Manifest this update: Fri 31 Jan 2025 06:00:21 +0000
Manifest next update: Sat 01 Feb 2025 06:00:21 +0000
Files and hashes: 1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=)
2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: XZ4dde1cYSytSfojgBzwK9Ivc9gInOiheS3hTB/i5vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:30:f2:4e:cc:fd:04:40:26:72:88:91:f0:e0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Jan 31 06:00:21 2025 GMT
Not After : Feb 1 06:00:21 2025 GMT
Subject: CN=5183275ba98853210556f07e99a95e3f8d7a0046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:9e:a3:8d:16:1b:e1:e9:4c:c1:64:1f:ac:
dd:db:15:aa:93:53:b9:db:5e:45:ba:85:c8:f0:00:
ee:33:95:31:8c:1c:44:88:ea:30:af:d5:8d:fc:04:
59:6a:b6:db:2c:9c:6c:68:96:e2:ce:4d:b2:a2:d8:
5b:d6:12:42:f2:e0:4c:0f:92:c3:22:4d:4a:81:eb:
1b:dd:2e:1e:18:b9:3b:00:e6:81:c4:31:e6:da:e0:
eb:a2:33:d1:61:e6:b7:bc:e7:ab:05:5a:a5:a6:9f:
83:9b:77:ff:e7:47:e3:b2:64:92:62:38:29:99:f6:
24:8b:3c:75:27:35:3d:ef:56:e9:24:33:e6:9e:30:
0d:a0:34:37:17:fd:b0:fd:6f:bf:0f:bf:7d:23:0e:
35:74:b2:77:a3:bf:3d:e3:cb:82:e0:2c:b6:4f:80:
d1:76:98:a3:50:48:1c:04:75:cb:08:a9:16:56:5d:
78:28:93:95:db:74:74:49:95:44:3c:3f:9e:52:64:
89:40:51:6a:24:b8:e6:a6:65:ee:a0:62:4d:2f:4f:
6f:1a:96:05:e9:6c:70:8b:94:77:6f:7e:0d:4b:d2:
0b:1c:ba:46:a9:41:8e:fb:90:1f:9a:71:ed:5f:6a:
e3:38:bd:ae:c4:4e:a7:80:ec:89:ea:e7:15:85:c7:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:83:27:5B:A9:88:53:21:05:56:F0:7E:99:A9:5E:3F:8D:7A:00:46
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:74:9b:64:13:f6:ed:0c:cf:49:7a:3c:cf:8b:af:29:78:6d:
c2:40:3b:87:9e:90:76:7c:03:16:48:5d:39:1a:ed:a4:01:78:
f0:f2:97:22:0c:11:9f:c7:da:fd:ee:91:08:b9:26:d6:4a:74:
a6:e5:fe:e0:a5:f3:ba:04:02:46:6b:58:4e:c0:a4:24:3f:88:
b8:d6:97:c1:a0:77:48:3e:d5:48:dc:d4:5f:79:e9:d9:24:97:
1b:dd:02:eb:32:1e:30:22:cc:84:33:7e:e9:0a:09:3e:93:92:
7a:3d:8a:04:bc:25:d9:58:5d:be:3a:a6:4a:c6:fa:1f:97:c4:
c1:8b:c8:65:a6:52:2a:ae:21:0e:76:bc:2c:dd:aa:b5:2f:a7:
da:32:04:57:66:ae:43:29:37:f2:28:5d:d7:98:fd:eb:ea:42:
2e:71:2c:66:1c:e8:da:a1:06:80:b6:ff:33:f0:c5:0a:a8:f0:
cc:c9:c8:ac:6f:19:59:b5:cd:d3:2e:b7:6c:cd:81:bc:81:26:
bc:34:59:a5:5c:43:e4:77:f8:af:49:19:d5:56:d9:3c:3a:dd:
fe:8f:f3:a7:93:31:51:36:a2:7a:ba:fb:4f:6d:a5:8f:3a:24:
2f:8e:58:dd:24:03:b0:65:53:ba:89:28:7a:71:87:64:7c:14:
b9:19:e9:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68jDyTsz9BEAmcoiR8OA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZDY4ZjFiMjQxNDIzZGE5NzY0N2I5OTIyNDUzMDM4NmQy
NTY5OGMwHhcNMjUwMTMxMDYwMDIxWhcNMjUwMjAxMDYwMDIxWjAzMTEwLwYDVQQD
Eyg1MTgzMjc1YmE5ODg1MzIxMDU1NmYwN2U5OWE5NWUzZjhkN2EwMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSueo40WG+HpTMFkH6zd2xWqk1O5
215FuoXI8ADuM5UxjBxEiOowr9WN/ARZarbbLJxsaJbizk2yothb1hJC8uBMD5LD
Ik1Kgesb3S4eGLk7AOaBxDHm2uDrojPRYea3vOerBVqlpp+Dm3f/50fjsmSSYjgp
mfYkizx1JzU971bpJDPmnjANoDQ3F/2w/W+/D799Iw41dLJ3o78948uC4Cy2T4DR
dpijUEgcBHXLCKkWVl14KJOV23R0SZVEPD+eUmSJQFFqJLjmpmXuoGJNL09vGpYF
6Wxwi5R3b34NS9ILHLpGqUGO+5AfmnHtX2rjOL2uxE6ngOyJ6ucVhcd/MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGDJ1upiFMhBVbwfpmpXj+NegBGMB8GA1UdIwQY
MBaAFJ/WjxskFCPal2R7mSJFMDhtJWmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmIt
MDgxMGQxNmJjYzg3LzEvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmItMDgxMGQxNmJjYzg3
LzEvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnSbZBP2
7QzPSXo8z4uvKXhtwkA7h56QdnwDFkhdORrtpAF48PKXIgwRn8fa/e6RCLkm1kp0
puX+4KXzugQCRmtYTsCkJD+IuNaXwaB3SD7VSNzUX3np2SSXG90C6zIeMCLMhDN+
6QoJPpOSej2KBLwl2VhdvjqmSsb6H5fEwYvIZaZSKq4hDna8LN2qtS+n2jIEV2au
Qyk38ihd15j96+pCLnEsZhzo2qEGgLb/M/DFCqjwzMnIrG8ZWbXN0y63bM2BvIEm
vDRZpVxD5Hf4r0kZ1VbZPDrd/o/zp5MxUTaierr7T22ljzokL45Y3SQDsGVTuoko
enGHZHwUuRnptQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:24 2025 by rpki-client on console-fra.rpki-client.org