Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: 5wLH0w7WB7yV2M5C22qKqb77ni41I2jkPk7V84nxVrk=
Subject key identifier: 7C:4E:14:44:55:66:6B:09:F4:E4:CA:67:57:07:6B:3E:19:09:66:80
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 0194BA84CAF5EB920A226B6168D991527837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 0641
Signing time: Fri 31 Jan 2025 04:00:52 +0000
Manifest this update: Fri 31 Jan 2025 04:00:52 +0000
Manifest next update: Sat 01 Feb 2025 04:00:52 +0000
Files and hashes: 1: LN9Y4VYuBPHcqnOfi1whRTolirA.roa (hash: oKsBnnzz1/szS+noOPKG/sq6k5F0SOG+hrVgu4395L0=)
2: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: onvXJMocKauwpDKRw4UvLviWH/MUARdjCATrLWZxfUU=)
3: aOjeQ_LFlj3ColO7fwm2y03noI8.roa (hash: ZPkI6QIM1mrIPNFFrmXcy/CvfmDUl8kYYI0d126tg6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:ca:f5:eb:92:0a:22:6b:61:68:d9:91:52:78:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Jan 31 04:00:52 2025 GMT
Not After : Feb 1 04:00:52 2025 GMT
Subject: CN=7c4e144455666b09f4e4ca6757076b3e19096680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:99:a6:c5:37:4c:92:bf:fd:59:2a:c0:93:
d4:f9:ed:d9:25:24:ac:b0:d2:ea:37:6d:ba:7d:95:
36:7c:bb:7f:75:c0:77:1f:b1:ae:9f:6c:9a:a0:e2:
5c:e3:05:4a:dd:46:89:b7:67:7e:73:2e:5b:6a:37:
1a:47:60:78:8d:a0:59:85:69:f1:9d:3a:f3:8f:6e:
7e:fd:c3:44:47:bd:4e:b6:17:6e:61:1f:7e:b8:20:
ff:14:c0:53:49:bb:e5:07:9b:a1:fa:f7:c7:24:40:
c4:ed:07:89:2b:69:1b:4f:e1:e9:d9:93:aa:aa:35:
0f:3e:35:12:a1:47:87:5b:2a:f1:35:87:06:23:50:
cf:44:2a:0f:2e:ab:c0:47:7d:83:26:27:82:90:74:
54:e7:46:5e:44:e5:8e:4d:89:69:23:9d:f0:21:a4:
06:70:9b:b1:0f:5d:b2:3c:79:6b:97:4a:18:b4:49:
bb:ac:c2:d8:2f:86:54:6b:03:49:6c:23:0f:87:0a:
a0:b1:cf:45:23:a5:c2:d1:0e:50:6e:70:bf:fb:70:
b8:b3:68:37:8b:9d:5b:9e:e6:13:86:c8:7c:99:92:
5c:d9:7e:06:42:5e:89:08:d0:45:78:f4:9e:8e:62:
5e:48:95:14:ad:14:f7:00:0e:01:96:d3:a2:9a:a5:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4E:14:44:55:66:6B:09:F4:E4:CA:67:57:07:6B:3E:19:09:66:80
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:74:86:38:20:d6:be:94:76:39:43:c5:54:3b:0e:ab:1b:0f:
1f:05:e0:37:dd:cf:b5:e4:40:fc:47:2d:9a:01:2c:80:82:bb:
e4:ee:02:ac:c1:f5:de:05:fe:d6:f9:aa:dc:73:39:c3:e4:93:
bb:61:3e:47:38:46:b1:65:65:54:c3:10:6f:9a:14:7c:35:55:
8d:9e:db:b7:54:90:21:ae:3b:b9:62:5e:a8:96:ae:12:2f:f8:
61:61:c2:c5:62:66:5a:17:8b:3f:3f:be:8b:63:af:c9:27:cd:
3c:7f:69:3f:0a:e0:f6:5d:11:18:67:dc:e6:d0:ab:b9:58:e9:
69:18:bb:6c:34:9f:ac:4a:7e:97:93:13:b8:51:07:bb:2b:36:
6f:14:a0:bc:a1:76:a0:a4:64:13:c9:22:f9:e2:df:99:2c:a0:
aa:38:c3:db:56:59:25:fb:fa:04:4c:5c:28:d5:c6:a3:59:47:
6e:41:ac:7a:c4:4e:27:6c:80:78:5f:9a:23:60:64:73:5b:2b:
81:d1:9d:9b:64:2d:47:7e:14:f9:46:4a:bb:cb:e0:36:4f:0f:
5b:9d:fe:91:46:f8:4f:76:d5:2b:7b:98:aa:4f:87:8e:13:d9:
e5:31:12:2d:45:7b:1e:df:9b:b4:10:df:15:97:43:e3:2a:e8:
3b:9b:bc:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hMr165IKImthaNmRUng3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMzRiMDJlZGM3YzI4NzhmOTRjNTEwNGNhZmE4OTc4YWZi
Njc1MmQwHhcNMjUwMTMxMDQwMDUyWhcNMjUwMjAxMDQwMDUyWjAzMTEwLwYDVQQD
Eyg3YzRlMTQ0NDU1NjY2YjA5ZjRlNGNhNjc1NzA3NmIzZTE5MDk2NjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wGZpsU3TJK//VkqwJPU+e3ZJSSs
sNLqN226fZU2fLt/dcB3H7Gun2yaoOJc4wVK3UaJt2d+cy5bajcaR2B4jaBZhWnx
nTrzj25+/cNER71OthduYR9+uCD/FMBTSbvlB5uh+vfHJEDE7QeJK2kbT+Hp2ZOq
qjUPPjUSoUeHWyrxNYcGI1DPRCoPLqvAR32DJieCkHRU50ZeROWOTYlpI53wIaQG
cJuxD12yPHlrl0oYtEm7rMLYL4ZUawNJbCMPhwqgsc9FI6XC0Q5QbnC/+3C4s2g3
i51bnuYThsh8mZJc2X4GQl6JCNBFePSejmJeSJUUrRT3AA4BltOimqUkBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxOFERVZmsJ9OTKZ1cHaz4ZCWaAMB8GA1UdIwQY
MBaAFD40sC7cfCh4+UxRBMr6iXivtnUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQt
MzVhMDI0MWE0MzAxLzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQtMzVhMDI0MWE0MzAx
LzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3SGOCDW
vpR2OUPFVDsOqxsPHwXgN93PteRA/EctmgEsgIK75O4CrMH13gX+1vmq3HM5w+ST
u2E+RzhGsWVlVMMQb5oUfDVVjZ7bt1SQIa47uWJeqJauEi/4YWHCxWJmWheLPz++
i2OvySfNPH9pPwrg9l0RGGfc5tCruVjpaRi7bDSfrEp+l5MTuFEHuys2bxSgvKF2
oKRkE8ki+eLfmSygqjjD21ZZJfv6BExcKNXGo1lHbkGsesROJ2yAeF+aI2Bkc1sr
gdGdm2QtR34U+UZKu8vgNk8PW53+kUb4T3bVK3uYqk+HjhPZ5TESLUV7Ht+btBDf
FZdD4yroO5u8GA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:22 2025 by rpki-client on console-fra.rpki-client.org