Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
File: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json)
Hash identifier: ESBiKTp7LjrPb1FKNL0XANqPTP4CMZKARjROGliSkqA=
Subject key identifier: C2:D9:BE:65:B1:21:B3:BE:68:FD:D9:FB:DC:47:9F:91:2D:08:59:F9
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial: 0194BB5FEAE161EFCD4CBCCB8364450F2D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
Manifest number: 0A25
Signing time: Fri 31 Jan 2025 08:00:12 +0000
Manifest this update: Fri 31 Jan 2025 08:00:12 +0000
Manifest next update: Sat 01 Feb 2025 08:00:12 +0000
Files and hashes: 1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: hw2JPxVUPUw9IrpgAGmvyJ+lc75xKUnjz81mO+G0kzA=)
2: 1-DlikylqXiNLfsxUp7xWNcqG9Zo.roa (hash: VbRr/OReqs5w+OHxhY9YXuluPoozwY2bo9ixoFMaSnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:ea:e1:61:ef:cd:4c:bc:cb:83:64:45:0f:2d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
Validity
Not Before: Jan 31 08:00:12 2025 GMT
Not After : Feb 1 08:00:12 2025 GMT
Subject: CN=c2d9be65b121b3be68fdd9fbdc479f912d0859f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:30:87:a6:ba:c3:08:8b:80:78:74:84:3d:
fe:4e:5a:46:f8:47:79:94:b7:60:7b:5a:7c:d5:f6:
1d:82:1c:71:37:16:f5:4c:42:49:05:8e:ce:40:e5:
31:f3:42:b8:d3:54:c4:dc:e7:36:3f:70:3c:a3:3a:
24:c6:56:47:5d:b7:31:04:0c:aa:4b:14:32:27:b6:
24:d4:9e:10:6d:ae:77:fe:6e:13:5e:19:f6:da:fe:
89:04:8d:34:15:53:ad:8a:e5:75:4f:17:3b:85:3e:
02:c7:9f:f1:40:dd:e4:80:55:0e:a0:7c:35:2b:4a:
dc:bd:20:47:0b:37:56:bb:de:1e:99:57:e8:21:b6:
05:3d:ec:0d:1d:6b:12:3d:4b:a4:ff:57:1f:df:33:
70:16:14:c0:b9:e1:97:01:61:c7:1f:78:bb:74:96:
15:20:4a:9d:5d:85:75:81:56:21:46:5f:26:b9:40:
e3:e1:c5:a5:56:19:3a:6e:c5:ce:fb:a4:9e:f0:72:
cf:29:87:c2:20:d8:37:3d:59:3f:a5:5a:b7:c7:57:
35:90:f8:94:94:3d:62:a8:25:86:3f:7d:46:55:21:
2c:7e:c5:a3:50:f8:58:14:ec:6c:bb:58:e1:96:00:
b2:c7:47:68:44:ee:d4:ea:73:59:34:b7:4d:f8:40:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D9:BE:65:B1:21:B3:BE:68:FD:D9:FB:DC:47:9F:91:2D:08:59:F9
X509v3 Authority Key Identifier:
keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:96:a0:7c:7c:53:6d:29:78:f6:a8:eb:f0:0c:82:57:33:bc:
cc:72:9d:21:63:30:ad:34:93:91:1d:c5:79:e7:7f:bd:a7:89:
3a:60:88:33:fb:f3:c4:17:1a:7a:68:0a:e8:22:e7:e0:48:bb:
70:66:e4:2c:fb:e0:42:46:26:b8:27:4b:a7:f3:eb:1e:1e:d1:
92:27:3a:fe:bd:c9:02:3a:9c:1f:d0:77:b5:b0:ec:95:2c:57:
b5:9e:01:9e:09:fd:b4:f2:a3:a6:df:d9:68:6c:b5:15:fa:36:
c2:c2:46:66:4f:f3:28:9c:02:ef:0d:90:97:5c:c0:1b:1d:a4:
0b:74:82:21:b2:ef:f7:40:4f:c5:ef:d2:3c:34:21:04:c0:68:
70:9b:18:7e:a3:c5:38:4c:89:ac:49:f2:bb:73:40:a3:d4:8e:
73:d0:e8:a8:67:0d:c4:f3:e7:bb:38:1c:02:1c:f9:f2:88:bd:
46:4b:1c:bc:cc:44:b7:38:c7:29:6f:0b:a9:f2:ef:cc:c9:26:
8d:31:6a:5c:a8:98:8c:89:ab:8b:23:0e:0f:ad:fc:67:0c:32:
ee:f8:86:be:72:63:7f:d6:e5:9d:29:20:27:51:df:4e:73:95:
08:5e:79:92:1b:99:5c:41:a1:8c:3b:7a:70:cc:e0:98:7f:b7:
37:1c:1c:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X+rhYe/NTLzLg2RFDy0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTExNTEwYTA5OTc5ZTU0ZTdhMTQ5MThjMGI4MjhiODIz
N2Y4NzYwHhcNMjUwMTMxMDgwMDEyWhcNMjUwMjAxMDgwMDEyWjAzMTEwLwYDVQQD
EyhjMmQ5YmU2NWIxMjFiM2JlNjhmZGQ5ZmJkYzQ3OWY5MTJkMDg1OWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF8wh6a6wwiLgHh0hD3+TlpG+Ed5
lLdge1p81fYdghxxNxb1TEJJBY7OQOUx80K401TE3Oc2P3A8ozokxlZHXbcxBAyq
SxQyJ7Yk1J4Qba53/m4TXhn22v6JBI00FVOtiuV1Txc7hT4Cx5/xQN3kgFUOoHw1
K0rcvSBHCzdWu94emVfoIbYFPewNHWsSPUuk/1cf3zNwFhTAueGXAWHHH3i7dJYV
IEqdXYV1gVYhRl8muUDj4cWlVhk6bsXO+6Se8HLPKYfCINg3PVk/pVq3x1c1kPiU
lD1iqCWGP31GVSEsfsWjUPhYFOxsu1jhlgCyx0doRO7U6nNZNLdN+EBbVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLZvmWxIbO+aP3Z+9xHn5EtCFn5MB8GA1UdIwQY
MBaAFNGRFRCgmXnlTnoUkYwLgouCN/h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjIt
OGY3NmJmNzZjZjQ2LzEvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjItOGY3NmJmNzZjZjQ2
LzEvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJagfHxT
bSl49qjr8AyCVzO8zHKdIWMwrTSTkR3Feed/vaeJOmCIM/vzxBcaemgK6CLn4Ei7
cGbkLPvgQkYmuCdLp/PrHh7Rkic6/r3JAjqcH9B3tbDslSxXtZ4Bngn9tPKjpt/Z
aGy1Ffo2wsJGZk/zKJwC7w2Ql1zAGx2kC3SCIbLv90BPxe/SPDQhBMBocJsYfqPF
OEyJrEnyu3NAo9SOc9DoqGcNxPPnuzgcAhz58oi9RkscvMxEtzjHKW8LqfLvzMkm
jTFqXKiYjImriyMOD638Zwwy7viGvnJjf9blnSkgJ1HfTnOVCF55khuZXEGhjDt6
cMzgmH+3NxwchA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:08 2025 by rpki-client on console-fra.rpki-client.org