Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File: p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier: aQjwf5bLez/p8at9c+xgL+c9RpbstSRJ0TevFvPQ/Sg=
Subject key identifier: B6:50:52:07:F3:3B:1D:5B:03:FF:8E:C6:26:54:07:E2:10:D9:31:BE
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 0194BABB196D5DE078719C157EC744ABFE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number: 0BB2
Signing time: Fri 31 Jan 2025 05:00:11 +0000
Manifest this update: Fri 31 Jan 2025 05:00:11 +0000
Manifest next update: Sat 01 Feb 2025 05:00:11 +0000
Files and hashes: 1: DYV8rTZS8uCurZHOoqW-jfWMmWg.roa (hash: oTQ/SBogFSvxJCfk7V0vkU2XYqnVHjZNfcn9byEW2aE=)
2: LwjuDBy22G2-Q-2JO3jMhOy1eNU.roa (hash: lEUkgsAO72uMMjQemqqZ36mEX8JKjX4GaMbgSM4hzTI=)
3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: WCSyrHbB9wqUOo3tE2LA6hGd8ghqh/9WkZBRDmbUEEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:19:6d:5d:e0:78:71:9c:15:7e:c7:44:ab:fe:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: Jan 31 05:00:11 2025 GMT
Not After : Feb 1 05:00:11 2025 GMT
Subject: CN=b6505207f33b1d5b03ff8ec6265407e210d931be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:f5:c4:08:3b:0e:ac:87:5e:dd:02:47:5e:
df:c4:2f:6b:a4:6a:e3:99:fd:84:1a:85:93:13:e2:
6e:68:7c:71:d5:9e:61:a2:2d:bc:7c:d9:0c:ee:3d:
eb:67:d5:b9:2d:22:5f:53:1a:9f:73:8c:77:e1:15:
b8:97:6c:92:76:fa:ad:c1:52:55:d0:68:4a:07:8d:
80:f0:d5:2e:9b:52:f8:60:e8:35:4e:53:d9:da:9e:
57:1a:84:0d:71:70:b5:0e:84:05:83:3f:cd:84:64:
21:40:87:7e:4f:39:88:4b:89:a2:07:6d:e7:24:f6:
06:ac:20:64:f9:96:57:61:b8:24:05:7c:8f:28:e6:
45:76:70:a0:ba:5b:44:bd:6f:e2:0a:8a:e4:25:b2:
b6:09:bd:51:93:19:67:4a:a3:8e:c8:15:be:66:4f:
ec:81:ac:8e:70:a9:94:f2:62:99:89:51:de:e8:d6:
1f:50:52:46:42:31:45:f2:35:35:07:a5:e7:9a:c8:
16:21:a3:06:65:e9:18:97:b1:16:55:20:a6:34:24:
f3:be:ea:cf:eb:a1:7f:0d:d6:08:59:fa:93:35:db:
eb:9b:e6:46:0b:74:b6:ea:7e:cf:13:fc:bb:c6:9f:
c3:e2:d7:17:d4:cb:95:31:e9:de:a5:11:54:ce:4c:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:50:52:07:F3:3B:1D:5B:03:FF:8E:C6:26:54:07:E2:10:D9:31:BE
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5e:6c:90:8f:fe:4a:3e:3a:42:ed:58:a5:f2:dd:38:37:e0:
44:cf:8b:89:3c:6a:ab:d4:ab:82:16:1a:15:41:3f:7b:b2:ae:
91:23:54:43:76:71:cf:fc:a9:7e:e9:4d:71:d6:41:e7:0b:f8:
76:ab:b4:d5:0f:be:27:8a:dc:ca:55:ff:77:b5:eb:f0:9d:0b:
02:a1:2b:bf:be:9c:3e:55:24:e6:6a:74:d0:87:10:14:88:ce:
6a:6c:62:d7:27:28:85:da:05:0d:5c:32:ca:10:92:2b:ae:6a:
5d:f5:62:69:3a:a6:ea:51:9a:29:b0:e5:e2:0b:4b:a6:d6:06:
99:50:11:b7:eb:0f:0c:16:e0:e4:2b:0a:50:22:69:50:68:50:
25:24:a1:c8:15:bd:93:5a:53:e9:0c:40:19:b5:c9:76:11:48:
2d:a9:49:7c:68:d8:5b:26:3e:05:c7:1f:40:50:f5:ea:8d:c7:
6c:78:52:a0:3d:ec:72:44:2e:70:9e:a5:da:4f:2b:7a:31:63:
f5:f8:01:09:12:c1:06:23:9c:7c:f0:b6:8b:13:c7:b4:45:01:
9e:62:33:78:3b:1f:59:15:1d:6e:9a:41:52:1a:e5:14:a2:48:
cb:49:cd:05:f0:69:b3:19:a8:bc:e1:7d:d7:03:09:9e:0d:4c:
a7:44:6b:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uxltXeB4cZwVfsdEq/5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZGRmYWYxM2I3ZGJlMDVkYWEzMmI1ODc4YjhiNjgwMjQw
NDU5NzEwHhcNMjUwMTMxMDUwMDExWhcNMjUwMjAxMDUwMDExWjAzMTEwLwYDVQQD
EyhiNjUwNTIwN2YzM2IxZDViMDNmZjhlYzYyNjU0MDdlMjEwZDkzMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEP1xAg7DqyHXt0CR17fxC9rpGrj
mf2EGoWTE+JuaHxx1Z5hoi28fNkM7j3rZ9W5LSJfUxqfc4x34RW4l2ySdvqtwVJV
0GhKB42A8NUum1L4YOg1TlPZ2p5XGoQNcXC1DoQFgz/NhGQhQId+TzmIS4miB23n
JPYGrCBk+ZZXYbgkBXyPKOZFdnCgultEvW/iCorkJbK2Cb1RkxlnSqOOyBW+Zk/s
gayOcKmU8mKZiVHe6NYfUFJGQjFF8jU1B6XnmsgWIaMGZekYl7EWVSCmNCTzvurP
66F/DdYIWfqTNdvrm+ZGC3S26n7PE/y7xp/D4tcX1MuVMenepRFUzkxTJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZQUgfzOx1bA/+OxiZUB+IQ2TG+MB8GA1UdIwQY
MBaAFKfd+vE7fb4F2qMrWHi4toAkBFlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDkzNjhUdDl2Z1hhb3l0WWVMaTJnQ1FFV1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMmIwODMtYjNiOS00YWE2LWExNDkt
ZmJiNTUzYjg0NjQxLzEvcDkzNjhUdDl2Z1hhb3l0WWVMaTJnQ1FFV1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mMmIwODMtYjNiOS00YWE2LWExNDktZmJiNTUzYjg0NjQx
LzEvcDkzNjhUdDl2Z1hhb3l0WWVMaTJnQ1FFV1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtl5skI/+
Sj46Qu1YpfLdODfgRM+LiTxqq9SrghYaFUE/e7KukSNUQ3Zxz/ypfulNcdZB5wv4
dqu01Q++J4rcylX/d7Xr8J0LAqErv76cPlUk5mp00IcQFIjOamxi1ycohdoFDVwy
yhCSK65qXfViaTqm6lGaKbDl4gtLptYGmVARt+sPDBbg5CsKUCJpUGhQJSShyBW9
k1pT6QxAGbXJdhFILalJfGjYWyY+BccfQFD16o3HbHhSoD3sckQucJ6l2k8rejFj
9fgBCRLBBiOcfPC2ixPHtEUBnmIzeDsfWRUdbppBUhrlFKJIy0nNBfBpsxmovOF9
1wMJng1Mp0Rrxg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:33 2025 by rpki-client on console-fra.rpki-client.org