Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: 4zHVYwZLP/uZVh92hNXdbsNhGpVSzlXve6OMdiAuJIk=
Subject key identifier: 7A:B5:76:FE:55:6D:55:C2:F3:FC:8F:99:39:5E:BA:36:68:7C:A0:CA
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 0194BA847BDA7AC88B712E4EEE6712C12C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 0BEA
Signing time: Fri 31 Jan 2025 04:00:32 +0000
Manifest this update: Fri 31 Jan 2025 04:00:32 +0000
Manifest next update: Sat 01 Feb 2025 04:00:32 +0000
Files and hashes: 1: AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa (hash: 2w9YT9FL9nWS9KMiSVT8Wf4Dme3XTUtS7KQ1r9kXdzY=)
2: IrihvyoC5WVtLyMsMa-SiimzVD4.roa (hash: jGXp7eSTl1p8h9SmYiq1Qn2/jPZ9ZUDFjn3K5+ZYCZI=)
3: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: UHR1rWpYjkxwoPXwKEFh1Y/RcoXvAILOOmdubtyQwV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:7b:da:7a:c8:8b:71:2e:4e:ee:67:12:c1:2c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Jan 31 04:00:32 2025 GMT
Not After : Feb 1 04:00:32 2025 GMT
Subject: CN=7ab576fe556d55c2f3fc8f99395eba36687ca0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4f:09:c4:a3:08:f3:1b:40:e6:72:92:de:39:
72:35:26:7e:a4:4c:fd:11:94:1c:b7:f3:83:c5:e9:
5f:ae:47:00:14:b0:b0:19:a7:36:ae:f5:a3:46:3a:
b4:2e:c2:f1:f3:81:33:f1:77:4d:f0:3d:30:f3:a9:
57:9a:3f:80:b5:19:c0:a3:5c:7f:06:56:b8:e6:c7:
4a:8e:65:8f:70:f3:ca:3c:68:15:6c:9d:58:c7:59:
de:1e:74:4b:83:80:04:9b:2b:83:50:cf:6d:42:ec:
e8:c4:0c:f7:e6:2a:76:08:4d:4e:e2:69:76:f7:25:
21:53:12:2c:c0:dd:46:61:5e:bd:c1:14:de:72:84:
dd:8d:e6:ce:f9:6c:3e:86:78:dc:bc:b3:ee:ed:c9:
a7:15:f9:fa:af:a0:25:ae:91:e2:b3:83:a0:c0:eb:
74:1b:72:f4:71:05:85:4a:ad:5e:53:1a:47:f5:d5:
73:a1:d9:0b:e5:7c:a5:71:93:59:15:5e:84:12:5c:
66:8e:13:3e:19:f4:06:6d:bd:58:95:c8:e4:29:49:
3d:aa:23:99:10:61:84:05:a6:91:7a:e1:32:af:21:
83:2d:1b:33:34:bc:46:83:65:25:41:7b:0c:de:78:
3b:82:f2:33:68:cc:f0:88:52:6e:bf:af:e6:a5:f2:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B5:76:FE:55:6D:55:C2:F3:FC:8F:99:39:5E:BA:36:68:7C:A0:CA
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b5:b1:d6:b2:ce:12:b0:01:aa:42:d7:ec:1d:fc:5a:73:84:
b1:a7:49:06:4e:63:e0:9c:f5:92:2d:8d:ee:45:56:02:f5:24:
ce:97:4b:29:04:6e:73:5d:b7:ae:c8:69:80:a5:88:db:5b:bf:
e4:05:9e:1f:d5:e1:29:0b:58:48:a4:cb:a0:0e:b4:ce:5b:98:
26:d7:18:0b:61:aa:23:cc:66:b2:63:2d:64:e1:c4:04:c8:39:
27:4a:3f:b4:38:ff:1c:4d:fc:b3:c5:18:ec:da:84:d7:31:bc:
ae:12:f9:e4:3a:3a:0c:38:f5:21:96:3d:a4:a3:e9:bd:a7:f8:
dc:de:56:57:55:aa:57:c4:e8:39:2a:16:16:41:84:e3:50:55:
ab:57:83:73:b2:71:b1:e1:db:3e:0e:de:47:37:a8:ae:1e:cd:
d1:14:5f:13:a0:4c:c9:11:73:7b:09:fd:3c:3a:f3:e8:c8:65:
5a:27:d3:6a:f2:2c:01:73:53:7a:21:ea:09:9a:af:67:d0:83:
1d:3a:87:53:65:e3:86:1a:1a:67:52:f1:c4:7a:5e:ab:cc:a6:
48:ce:3a:d1:b0:e1:4b:04:91:92:52:69:bb:b4:b8:e9:ec:1d:
50:97:1d:84:54:a7:d3:ab:18:2e:80:6c:52:59:ef:8d:19:b1:
80:05:d9:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hHvaesiLcS5O7mcSwSwjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzQwMWYzMmNkMjgxNjk5ZmJlNGRjZjNiYjUwMmE2M2Ey
YTYwZGUwHhcNMjUwMTMxMDQwMDMyWhcNMjUwMjAxMDQwMDMyWjAzMTEwLwYDVQQD
Eyg3YWI1NzZmZTU1NmQ1NWMyZjNmYzhmOTkzOTVlYmEzNjY4N2NhMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE8JxKMI8xtA5nKS3jlyNSZ+pEz9
EZQct/ODxelfrkcAFLCwGac2rvWjRjq0LsLx84Ez8XdN8D0w86lXmj+AtRnAo1x/
Bla45sdKjmWPcPPKPGgVbJ1Yx1neHnRLg4AEmyuDUM9tQuzoxAz35ip2CE1O4ml2
9yUhUxIswN1GYV69wRTecoTdjebO+Ww+hnjcvLPu7cmnFfn6r6AlrpHis4OgwOt0
G3L0cQWFSq1eUxpH9dVzodkL5XylcZNZFV6EElxmjhM+GfQGbb1YlcjkKUk9qiOZ
EGGEBaaReuEyryGDLRszNLxGg2UlQXsM3ng7gvIzaMzwiFJuv6/mpfI8/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq1dv5VbVXC8/yPmTleujZofKDKMB8GA1UdIwQY
MBaAFF50AfMs0oFpn75Nzzu1AqY6KmDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgt
ZjYwNzBhNGFkODNhLzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgtZjYwNzBhNGFkODNh
LzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprWx1rLO
ErABqkLX7B38WnOEsadJBk5j4Jz1ki2N7kVWAvUkzpdLKQRuc123rshpgKWI21u/
5AWeH9XhKQtYSKTLoA60zluYJtcYC2GqI8xmsmMtZOHEBMg5J0o/tDj/HE38s8UY
7NqE1zG8rhL55Do6DDj1IZY9pKPpvaf43N5WV1WqV8ToOSoWFkGE41BVq1eDc7Jx
seHbPg7eRzeorh7N0RRfE6BMyRFzewn9PDrz6MhlWifTavIsAXNTeiHqCZqvZ9CD
HTqHU2XjhhoaZ1LxxHpeq8ymSM460bDhSwSRklJpu7S46ewdUJcdhFSn06sYLoBs
UlnvjRmxgAXZmg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:58 2025 by rpki-client on console-fra.rpki-client.org