Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
File: l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json)
Hash identifier: XM8dwBlTAbACVenHedR5V+bbhz/hDyS3eudhUE9/4sg=
Subject key identifier: 44:57:D6:81:01:07:60:0C:03:A5:B8:B4:8B:62:B0:71:78:81:96:C8
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial: 0194BB5FE9AF1A1EA47106096FA36E1632A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
Manifest number: 0CF1
Signing time: Fri 31 Jan 2025 08:00:12 +0000
Manifest this update: Fri 31 Jan 2025 08:00:12 +0000
Manifest next update: Sat 01 Feb 2025 08:00:12 +0000
Files and hashes: 1: N0s8xKfa_bF09tlRJvpRIiwnl5w.roa (hash: 90x2GkpRoKN6DUPIyJuUzKhNvSMsOvRGP9u2xtqB9lE=)
2: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: TXbsKxF8LFthtPBu7ogiS9LsR3IUtCqFZU2g7tZHGsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e9:af:1a:1e:a4:71:06:09:6f:a3:6e:16:32:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Validity
Not Before: Jan 31 08:00:12 2025 GMT
Not After : Feb 1 08:00:12 2025 GMT
Subject: CN=4457d6810107600c03a5b8b48b62b071788196c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:4a:36:15:e2:b4:87:ee:2b:be:75:c7:55:
c7:39:26:83:88:90:eb:e7:6d:b5:e6:41:f1:61:1b:
af:ad:24:d8:b0:75:ff:78:7c:5d:db:e8:3f:61:aa:
12:c9:31:e3:62:ad:7a:2c:8f:ec:a1:51:35:28:77:
2c:32:9c:93:89:9c:7c:75:1d:e0:8c:ee:b3:41:bb:
e6:76:b9:5f:7e:b9:1d:5b:89:76:3b:72:8c:d4:30:
98:ed:0c:8a:71:f1:9c:9e:9c:f9:72:90:4c:f6:d0:
84:76:c1:a9:7e:6b:ba:ff:f8:32:40:64:ee:9c:02:
bf:78:1f:e5:86:d9:ad:bd:03:9a:48:58:f2:a1:3e:
c8:5c:bf:1f:e9:05:d2:03:0a:4f:00:87:0b:84:42:
c0:54:a4:78:e7:34:68:25:d2:1b:d7:af:0d:0e:37:
60:4e:c4:fc:e0:ff:82:d2:c9:b6:fb:fb:c1:a9:fb:
48:f6:60:47:17:cc:7a:f4:ae:97:54:3b:13:e1:c8:
dd:74:5d:77:77:eb:e7:00:23:b7:0d:bc:71:1a:bd:
92:5e:63:04:c9:80:d6:0c:4b:99:0e:02:48:be:a3:
d8:86:3b:f1:92:fd:0f:f6:b8:aa:ae:ee:9c:4c:cb:
75:79:bf:61:50:42:e6:1a:ed:51:36:d4:69:71:90:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:57:D6:81:01:07:60:0C:03:A5:B8:B4:8B:62:B0:71:78:81:96:C8
X509v3 Authority Key Identifier:
keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:25:c2:27:56:4d:d2:5b:fc:d6:b1:eb:a3:1d:40:45:ed:6b:
a8:92:0b:35:bc:1b:4e:aa:09:16:8c:d9:8d:26:e6:d0:ea:e2:
b2:34:34:ad:83:ab:43:d6:e7:b9:a4:b2:89:f9:24:e0:3b:29:
87:8b:cf:a6:2c:6e:33:f0:e0:1b:06:f8:f8:4b:0d:81:be:0f:
5d:7f:36:22:3b:de:03:5f:6a:7c:b5:ca:b3:0c:22:59:57:4c:
e4:03:0c:85:05:08:44:aa:a0:d4:39:e3:9f:44:91:f5:03:c5:
a4:b6:68:20:96:20:67:f3:d9:0a:aa:0f:87:a7:70:f2:4d:e9:
ae:cc:16:35:6a:80:9f:78:db:6b:4a:7f:dc:08:28:21:dc:bc:
8a:d7:ac:fb:ab:b8:d1:fe:ad:17:af:c8:09:57:92:2d:7d:15:
43:0f:9c:25:c4:22:2c:f7:94:64:02:27:80:cb:06:6d:cc:ef:
fa:66:91:b8:81:96:20:d4:09:0c:a8:e0:c7:b4:cf:69:eb:0b:
a7:66:76:04:67:19:90:69:70:fc:bb:3a:cc:2c:95:64:16:4f:
78:04:15:74:b2:cf:72:23:f4:1e:e1:0b:98:41:05:93:43:31:
7b:48:ab:94:22:2b:1b:c4:a6:7c:dc:1b:a9:66:84:46:5f:10:
40:24:7e:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X+mvGh6kcQYJb6NuFjKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZDllZjdiZDMwMzI0ZGVkZjcwYmFjZTRiYmRhNTc2MGMz
MjZiMWEwHhcNMjUwMTMxMDgwMDEyWhcNMjUwMjAxMDgwMDEyWjAzMTEwLwYDVQQD
Eyg0NDU3ZDY4MTAxMDc2MDBjMDNhNWI4YjQ4YjYyYjA3MTc4ODE5NmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JZKNhXitIfuK751x1XHOSaDiJDr
52215kHxYRuvrSTYsHX/eHxd2+g/YaoSyTHjYq16LI/soVE1KHcsMpyTiZx8dR3g
jO6zQbvmdrlffrkdW4l2O3KM1DCY7QyKcfGcnpz5cpBM9tCEdsGpfmu6//gyQGTu
nAK/eB/lhtmtvQOaSFjyoT7IXL8f6QXSAwpPAIcLhELAVKR45zRoJdIb168NDjdg
TsT84P+C0sm2+/vBqftI9mBHF8x69K6XVDsT4cjddF13d+vnACO3DbxxGr2SXmME
yYDWDEuZDgJIvqPYhjvxkv0P9riqru6cTMt1eb9hUELmGu1RNtRpcZAEtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERX1oEBB2AMA6W4tItisHF4gZbIMB8GA1UdIwQY
MBaAFJfZ73vTAyTe33C6zku9pXYMMmsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDludmU5TURKTjdmY0xyT1M3MmxkZ3d5YXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS80M2Q1MDgtZDE5ZS00ZjY2LWFlODUt
ZjgwNWFiM2EzMjdlLzEvbDludmU5TURKTjdmY0xyT1M3MmxkZ3d5YXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS80M2Q1MDgtZDE5ZS00ZjY2LWFlODUtZjgwNWFiM2EzMjdl
LzEvbDludmU5TURKTjdmY0xyT1M3MmxkZ3d5YXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyXCJ1ZN
0lv81rHrox1ARe1rqJILNbwbTqoJFozZjSbm0OrisjQ0rYOrQ9bnuaSyifkk4Dsp
h4vPpixuM/DgGwb4+EsNgb4PXX82IjveA19qfLXKswwiWVdM5AMMhQUIRKqg1Dnj
n0SR9QPFpLZoIJYgZ/PZCqoPh6dw8k3prswWNWqAn3jba0p/3AgoIdy8ites+6u4
0f6tF6/ICVeSLX0VQw+cJcQiLPeUZAIngMsGbczv+maRuIGWINQJDKjgx7TPaesL
p2Z2BGcZkGlw/Ls6zCyVZBZPeAQVdLLPciP0HuELmEEFk0Mxe0irlCIrG8SmfNwb
qWaERl8QQCR+eg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:14 2025 by rpki-client on console-fra.rpki-client.org