Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
File: flL6ttMgbrYKMduWxy2U_CQsCgg.mft (raw, json)
Hash identifier: OEnb2rKB/d0zc9ye0T9fWbvM9bfkqp8/QwUe0U0dwmk=
Subject key identifier: A4:D7:1A:CA:79:7C:BD:CC:3E:37:E8:01:FC:3D:BC:BE:24:A7:2B:89
Authority key identifier: 7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
Certificate issuer: /CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Certificate serial: 0194BA849E083871F3E4E29A7A7C813E0EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 04:00:40 +0000
Manifest this update: Fri 31 Jan 2025 04:00:40 +0000
Manifest next update: Sat 01 Feb 2025 04:00:40 +0000
Files and hashes: 1: flL6ttMgbrYKMduWxy2U_CQsCgg.crl (hash: I0Jw0n2P63n1Yt/mP54zZmXAWEro0Kq+ZHlZl6xod/A=)
2: oR70fW7uVwWXm6EKAN8uqrlQkQ4.roa (hash: 0R/vI9KhNQCuJ8a8jzLTXA2DiQsUAT+t0yjMQ7W3gak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:9e:08:38:71:f3:e4:e2:9a:7a:7c:81:3e:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Validity
Not Before: Jan 31 04:00:40 2025 GMT
Not After : Feb 1 04:00:40 2025 GMT
Subject: CN=a4d71aca797cbdcc3e37e801fc3dbcbe24a72b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:31:d2:9c:ab:bd:39:e1:67:04:58:5b:c9:
aa:db:02:7d:b7:50:25:db:75:ba:ba:7b:ac:1c:40:
4b:e2:91:2e:e0:55:61:0c:74:22:00:ca:64:d8:f3:
52:ff:cf:5d:98:42:32:7d:ec:bf:d7:69:65:3b:b5:
12:26:cc:68:c5:a0:bd:7d:72:8c:56:58:08:2e:a7:
52:ef:93:1b:32:8d:18:53:12:9b:2b:01:66:2b:4b:
be:26:e4:c9:60:6e:ad:be:09:9d:9f:5d:10:0d:b5:
16:de:6f:0d:cf:6c:ad:a0:97:17:c0:aa:d9:79:8d:
1b:91:b0:22:bc:67:14:c8:b3:0c:8f:63:28:aa:a0:
5c:ff:7f:b4:83:8c:b0:dc:d2:97:43:df:dc:03:9f:
c5:1f:03:0e:01:5f:01:6d:80:66:7b:bf:57:03:33:
b0:12:39:44:78:9c:f3:5a:27:60:73:df:03:b4:3f:
d5:9f:3f:c3:d4:33:d4:a5:e3:3b:0f:f7:70:5e:b0:
65:50:35:02:e2:1b:94:24:9e:87:6c:0a:49:7e:67:
58:18:8d:95:19:9b:c4:f4:be:87:4d:98:66:3a:30:
2d:ba:63:f4:b5:d7:53:d0:96:9a:3d:79:48:95:49:
58:02:c1:90:17:76:fe:9e:a9:74:b4:7b:2a:4e:dc:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D7:1A:CA:79:7C:BD:CC:3E:37:E8:01:FC:3D:BC:BE:24:A7:2B:89
X509v3 Authority Key Identifier:
keyid:7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b4:4a:1f:00:9b:f2:6b:7c:68:eb:50:fd:dd:48:c2:4b:2b:
f0:c6:3f:4e:a9:4c:2d:76:4d:fd:f2:69:41:f7:e7:0a:fa:8a:
7d:c4:8b:1f:b4:1d:ec:d1:5a:ac:b3:ea:7e:e8:b9:bc:6d:6b:
eb:71:4c:e7:75:23:bb:24:48:ff:5e:ee:21:58:3e:4d:87:ed:
80:26:e6:20:c7:ad:9b:ac:58:67:e9:ee:01:0b:41:bd:f8:30:
45:4e:87:74:41:df:a3:41:51:c7:e6:50:07:2c:26:4f:a8:4c:
49:fe:55:f8:04:df:3b:a2:5a:8f:d5:37:f0:60:18:77:2f:97:
05:6d:8c:48:20:06:00:90:0f:c3:ca:c1:03:63:fe:e7:dd:3d:
f1:80:74:4a:4d:5f:71:23:61:a0:06:a6:8e:a3:17:06:88:f3:
7f:59:60:d7:12:a7:4a:ec:a3:9d:f7:09:6d:4a:a2:41:7a:ba:
ce:0f:f6:2a:1f:4d:87:da:d7:db:bc:b1:12:82:ff:f9:aa:b8:
12:91:25:8a:31:54:6a:06:db:c5:82:a1:a8:ef:4d:9d:7e:8f:
60:73:02:0d:c6:3c:63:ba:ef:dc:3b:41:1c:35:f3:a7:8b:e2:
01:e6:95:be:dd:a6:1a:70:c1:01:7f:a3:76:77:b1:02:18:78:
77:d9:50:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hJ4IOHHz5OKaenyBPg7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNTJmYWI2ZDMyMDZlYjYwYTMxZGI5NmM3MmQ5NGZjMjQy
YzBhMDgwHhcNMjUwMTMxMDQwMDQwWhcNMjUwMjAxMDQwMDQwWjAzMTEwLwYDVQQD
EyhhNGQ3MWFjYTc5N2NiZGNjM2UzN2U4MDFmYzNkYmNiZTI0YTcyYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfEx0pyrvTnhZwRYW8mq2wJ9t1Al
23W6unusHEBL4pEu4FVhDHQiAMpk2PNS/89dmEIyfey/12llO7USJsxoxaC9fXKM
VlgILqdS75MbMo0YUxKbKwFmK0u+JuTJYG6tvgmdn10QDbUW3m8Nz2ytoJcXwKrZ
eY0bkbAivGcUyLMMj2MoqqBc/3+0g4yw3NKXQ9/cA5/FHwMOAV8BbYBme79XAzOw
EjlEeJzzWidgc98DtD/Vnz/D1DPUpeM7D/dwXrBlUDUC4huUJJ6HbApJfmdYGI2V
GZvE9L6HTZhmOjAtumP0tddT0JaaPXlIlUlYAsGQF3b+nql0tHsqTtzymQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTXGsp5fL3MPjfoAfw9vL4kpyuJMB8GA1UdIwQY
MBaAFH5S+rbTIG62CjHblsctlPwkLAoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmxMNnR0TWdicllLTWR1V3h5MlVfQ1FzQ2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jYzQ3ZTUtNGEyMS00ZjRmLWJlMjIt
YTVjOTNhN2I5ZmE1LzEvZmxMNnR0TWdicllLTWR1V3h5MlVfQ1FzQ2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9jYzQ3ZTUtNGEyMS00ZjRmLWJlMjItYTVjOTNhN2I5ZmE1
LzEvZmxMNnR0TWdicllLTWR1V3h5MlVfQ1FzQ2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLRKHwCb
8mt8aOtQ/d1Iwksr8MY/TqlMLXZN/fJpQffnCvqKfcSLH7Qd7NFarLPqfui5vG1r
63FM53UjuyRI/17uIVg+TYftgCbmIMetm6xYZ+nuAQtBvfgwRU6HdEHfo0FRx+ZQ
BywmT6hMSf5V+ATfO6Jaj9U38GAYdy+XBW2MSCAGAJAPw8rBA2P+59098YB0Sk1f
cSNhoAamjqMXBojzf1lg1xKnSuyjnfcJbUqiQXq6zg/2Kh9Nh9rX27yxEoL/+aq4
EpElijFUagbbxYKhqO9NnX6PYHMCDcY8Y7rv3DtBHDXzp4viAeaVvt2mGnDBAX+j
dnexAhh4d9lQHA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:07 2025 by rpki-client on console-fra.rpki-client.org