Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
File: _VOKrk7E0KLzwKZfifSHRrUV5Xs.mft (raw, json)
Hash identifier: b4uy2veu3WbX90qSBe6Uw0q4AUpcoFjvbIm1r6uJkE4=
Subject key identifier: 2B:66:C4:51:99:6C:60:72:0E:DD:CF:4E:3E:2D:AF:8C:AA:7E:DE:81
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 0194BA847F0EAE3A683D3409C2EFD3429D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
Manifest number: 0AC2
Signing time: Fri 31 Jan 2025 04:00:32 +0000
Manifest this update: Fri 31 Jan 2025 04:00:32 +0000
Manifest next update: Sat 01 Feb 2025 04:00:32 +0000
Files and hashes: 1: YD_zTsYXZHwOdGihQ9GGGJD2yQ4.roa (hash: MiVKISLoY4yTYfozn6ttBVBGLS9pCG7wKWYNtkMouG8=)
2: _VOKrk7E0KLzwKZfifSHRrUV5Xs.crl (hash: 0FCcv6ZIAt51WaO3xLxgVCyCAYvcdRl9vdGcfzf0Brg=)
3: wcV-PUcCwSD1_bZOyNtF92C9c9E.roa (hash: YHNUenZzn6rHgL2dA2+pXb/I7NXwkpjXztGNWnA0xb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:7f:0e:ae:3a:68:3d:34:09:c2:ef:d3:42:9d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Jan 31 04:00:32 2025 GMT
Not After : Feb 1 04:00:32 2025 GMT
Subject: CN=2b66c451996c60720eddcf4e3e2daf8caa7ede81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:f3:44:d5:60:ef:0e:a5:72:90:82:ce:99:
82:2e:c4:1c:0d:77:80:0c:5a:57:52:1d:39:d6:c5:
6c:d7:61:3f:4c:a7:d7:2c:c5:f9:2f:e9:86:ca:9c:
ee:63:77:94:02:35:ef:3f:a6:cb:62:1b:1a:f3:bc:
45:90:cf:ed:2b:30:44:b6:b1:24:c3:c4:c3:cb:0c:
1f:07:82:0f:de:20:05:08:cb:a7:21:e4:9f:d7:09:
3f:cd:fb:cf:4c:d9:e7:17:8a:62:39:aa:c0:42:f2:
87:b8:4d:6c:63:f9:f4:c3:65:b2:72:45:f8:6d:f2:
35:84:f8:d8:77:2d:b2:29:ce:8b:02:56:93:28:10:
b4:5d:f7:98:e9:c8:0a:63:50:0c:9c:26:73:c1:3f:
47:cd:5d:23:51:20:22:4e:4a:ab:9a:69:5d:a6:7f:
13:34:42:ba:a2:06:36:ae:35:0c:1a:17:25:f8:e0:
5c:7f:2d:f8:71:91:ee:bf:c1:96:d1:c7:78:d1:b7:
0f:ce:17:6a:8e:ea:74:8b:1a:fd:bc:d2:56:4e:ff:
ab:2f:0d:c1:ae:b9:c9:2a:b8:e9:fe:60:35:cc:1b:
45:e0:09:ac:ea:c6:65:d0:4c:fa:e0:cb:74:bf:91:
c5:0e:a5:f0:6d:d9:2c:a5:5e:5f:56:f1:f7:33:f1:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:66:C4:51:99:6C:60:72:0E:DD:CF:4E:3E:2D:AF:8C:AA:7E:DE:81
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fa:34:7a:6c:f4:73:22:95:22:ec:3b:00:43:6c:f2:a8:e0:
91:bf:fd:10:da:24:77:c0:29:41:b1:85:7f:dc:5a:85:9c:cb:
a3:f7:3e:da:d8:6d:c1:26:9a:e9:bf:04:c2:64:3b:93:01:93:
76:db:cc:48:ee:65:45:68:68:46:c7:c2:89:0a:5e:fa:fc:eb:
88:c8:0a:d8:93:18:cf:b1:5b:d1:d7:e8:66:eb:10:7e:f9:39:
5c:46:d8:d9:a7:5f:da:fc:c3:7b:a6:f2:fe:4a:86:64:46:7e:
1c:c2:01:0b:84:99:c1:c7:9b:5c:3c:4c:cf:e2:d2:b2:71:8d:
2a:46:3c:e6:09:d6:d8:f2:7c:6b:2f:ab:86:49:f3:21:72:1e:
03:0b:c0:c9:47:24:2e:ba:ec:b5:3d:2e:67:50:1b:57:46:f4:
8c:ff:51:db:b3:f0:2c:bb:bd:3e:81:e4:1b:de:fb:4d:2a:aa:
70:ea:ad:1f:65:9b:b9:6d:3c:db:8f:d1:cb:68:36:30:3c:37:
60:5e:e7:be:9f:60:c1:9e:f7:b9:4e:bb:09:cd:53:ce:21:09:
29:29:78:5c:b6:8a:aa:7a:35:19:00:0d:79:ae:54:e6:bc:9c:
02:33:90:68:69:76:cb:8e:4d:bd:fa:e7:12:b5:cb:4b:f0:ed:
cc:38:4f:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hH8OrjpoPTQJwu/TQp1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNTM4YWFlNGVjNGQwYTJmM2MwYTY1Zjg5ZjQ4NzQ2YjUx
NWU1N2IwHhcNMjUwMTMxMDQwMDMyWhcNMjUwMjAxMDQwMDMyWjAzMTEwLwYDVQQD
EygyYjY2YzQ1MTk5NmM2MDcyMGVkZGNmNGUzZTJkYWY4Y2FhN2VkZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAvzRNVg7w6lcpCCzpmCLsQcDXeA
DFpXUh051sVs12E/TKfXLMX5L+mGypzuY3eUAjXvP6bLYhsa87xFkM/tKzBEtrEk
w8TDywwfB4IP3iAFCMunIeSf1wk/zfvPTNnnF4piOarAQvKHuE1sY/n0w2WyckX4
bfI1hPjYdy2yKc6LAlaTKBC0XfeY6cgKY1AMnCZzwT9HzV0jUSAiTkqrmmldpn8T
NEK6ogY2rjUMGhcl+OBcfy34cZHuv8GW0cd40bcPzhdqjup0ixr9vNJWTv+rLw3B
rrnJKrjp/mA1zBtF4Ams6sZl0Ez64Mt0v5HFDqXwbdkspV5fVvH3M/HzcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtmxFGZbGByDt3PTj4tr4yqft6BMB8GA1UdIwQY
MBaAFP1Tiq5OxNCi88CmX4n0h0a1FeV7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1ZPS3JrN0UwS0x6d0taZmlmU0hSclVWNVhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hNjlmZDctOGUxZi00MTc2LWE1ZGYt
NDI4MzdjY2EwMGMzLzEvX1ZPS3JrN0UwS0x6d0taZmlmU0hSclVWNVhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hNjlmZDctOGUxZi00MTc2LWE1ZGYtNDI4MzdjY2EwMGMz
LzEvX1ZPS3JrN0UwS0x6d0taZmlmU0hSclVWNVhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfo0emz0
cyKVIuw7AENs8qjgkb/9ENokd8ApQbGFf9xahZzLo/c+2thtwSaa6b8EwmQ7kwGT
dtvMSO5lRWhoRsfCiQpe+vzriMgK2JMYz7Fb0dfoZusQfvk5XEbY2adf2vzDe6by
/kqGZEZ+HMIBC4SZwcebXDxMz+LSsnGNKkY85gnW2PJ8ay+rhknzIXIeAwvAyUck
LrrstT0uZ1AbV0b0jP9R27PwLLu9PoHkG977TSqqcOqtH2WbuW0824/Ry2g2MDw3
YF7nvp9gwZ73uU67Cc1TziEJKSl4XLaKqno1GQANea5U5rycAjOQaGl2y45Nvfrn
ErXLS/DtzDhPqw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:10 2025 by rpki-client on console-fra.rpki-client.org