Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier: UMp9iY343L4gc2bBd4RvLI3oZbB4+6fUak4Fa/y2GtI=
Subject key identifier: 54:55:B2:9E:6D:79:50:DA:0C:03:C2:EC:D9:9C:80:47:D4:C6:B7:80
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 0194BABBB115CE55D6D9574840A88E3AA4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number: 084C
Signing time: Fri 31 Jan 2025 05:00:50 +0000
Manifest this update: Fri 31 Jan 2025 05:00:50 +0000
Manifest next update: Sat 01 Feb 2025 05:00:50 +0000
Files and hashes: 1: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: g4/AEtdX4+W2ZGSQcpvdq6sjZH4HBzYaLC9Nantj0zI=)
2: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (hash: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:b1:15:ce:55:d6:d9:57:48:40:a8:8e:3a:a4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: Jan 31 05:00:50 2025 GMT
Not After : Feb 1 05:00:50 2025 GMT
Subject: CN=5455b29e6d7950da0c03c2ecd99c8047d4c6b780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:d5:7a:9a:d9:6c:80:50:f6:55:4d:08:2a:
b1:c5:4e:e8:f9:cd:c6:8e:27:79:58:5e:42:ac:9e:
f9:f2:1e:98:e6:27:8d:a9:ae:c3:c6:40:09:e6:7e:
87:d8:af:17:ea:9b:bc:66:80:0a:ac:22:8c:94:f0:
d0:58:47:e6:ac:e4:fa:50:b9:f9:0f:fd:cf:1e:4c:
77:5b:b6:ff:09:97:9f:47:47:b1:d2:35:65:a3:98:
16:88:5d:f1:97:ba:66:63:ca:8d:7f:85:f6:ca:3a:
18:26:69:e4:59:f1:8d:58:d1:0b:25:a6:d4:03:2a:
2b:b2:7d:f3:aa:7e:e8:fc:ca:79:99:e0:b2:50:6e:
0d:50:b2:2a:78:ec:e7:57:9a:7b:8d:6a:29:b8:fb:
7b:d4:fb:2c:d0:7b:13:5b:5f:69:82:df:07:8d:01:
ae:0f:8b:17:5e:ae:33:11:35:7f:34:04:7f:47:8c:
fa:cf:ae:3d:04:ba:47:6f:d3:02:08:1b:b6:e4:41:
9f:f4:dd:7a:18:d7:77:34:0f:be:e8:66:60:55:4c:
74:ee:5d:a5:af:48:9d:01:9b:c9:9a:0a:cf:9a:e4:
b6:29:7c:55:9c:d8:8d:79:a3:9b:4e:56:64:82:b1:
30:80:0b:2a:14:fc:05:b5:fc:c0:72:41:2f:11:08:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:55:B2:9E:6D:79:50:DA:0C:03:C2:EC:D9:9C:80:47:D4:C6:B7:80
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f6:e3:ca:99:ee:0e:b4:34:07:3d:2c:f0:ee:ef:5c:92:f9:
00:ec:d8:78:0f:11:cf:f4:cf:3f:1d:e9:43:82:cf:d7:b2:e4:
0d:07:72:9b:99:a9:39:f8:51:15:bc:3d:69:2c:e9:96:22:08:
f5:24:b2:dd:f8:b2:19:9d:dc:4e:30:1b:eb:43:9a:69:84:df:
b8:54:e8:6e:ea:ce:d1:4f:c6:86:00:af:8d:e6:07:e0:df:44:
13:76:32:fd:02:42:63:73:ad:fa:57:72:02:7d:dd:fa:5a:30:
53:00:0f:8c:57:b6:dd:28:cd:5b:fa:0d:34:d0:ef:b6:9d:30:
0d:f2:22:a3:95:0b:42:f0:c4:5d:04:fd:69:7b:74:bb:0a:51:
9a:21:8b:aa:61:4f:9d:fd:2c:5b:18:ab:08:fc:f0:71:cf:28:
3b:bd:38:20:6c:b0:dd:33:a5:15:a4:87:6e:cc:93:d9:7b:89:
1c:3a:e1:d8:a8:b8:44:96:dc:bc:3e:b3:87:65:e7:37:76:2c:
8b:5a:fa:34:80:64:72:45:13:dd:55:36:b9:da:58:b4:14:a6:
c0:7d:bf:d1:6a:59:e4:6a:7b:21:bf:bc:a5:a4:49:eb:5e:ed:
fc:3a:1b:39:2a:38:b1:c9:b7:b9:26:a7:5d:20:9f:56:9a:57:
47:3a:8d:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u7EVzlXW2VdIQKiOOqTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzVmMTBhZjhiY2I1ZmM2ZTM0YTQ3M2I0YTZjYWU3YWQw
MmQ5MDIwHhcNMjUwMTMxMDUwMDUwWhcNMjUwMjAxMDUwMDUwWjAzMTEwLwYDVQQD
Eyg1NDU1YjI5ZTZkNzk1MGRhMGMwM2MyZWNkOTljODA0N2Q0YzZiNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyurVeprZbIBQ9lVNCCqxxU7o+c3G
jid5WF5CrJ758h6Y5ieNqa7DxkAJ5n6H2K8X6pu8ZoAKrCKMlPDQWEfmrOT6ULn5
D/3PHkx3W7b/CZefR0ex0jVlo5gWiF3xl7pmY8qNf4X2yjoYJmnkWfGNWNELJabU
Ayorsn3zqn7o/Mp5meCyUG4NULIqeOznV5p7jWopuPt71Pss0HsTW19pgt8HjQGu
D4sXXq4zETV/NAR/R4z6z649BLpHb9MCCBu25EGf9N16GNd3NA++6GZgVUx07l2l
r0idAZvJmgrPmuS2KXxVnNiNeaObTlZkgrEwgAsqFPwFtfzAckEvEQi9jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRVsp5teVDaDAPC7NmcgEfUxreAMB8GA1UdIwQY
MBaAFJPF8Qr4vLX8bjSkc7SmyuetAtkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMt
OGVhYWQwYjA0OWE3LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMtOGVhYWQwYjA0OWE3
LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/bjypnu
DrQ0Bz0s8O7vXJL5AOzYeA8Rz/TPPx3pQ4LP17LkDQdym5mpOfhRFbw9aSzpliII
9SSy3fiyGZ3cTjAb60OaaYTfuFToburO0U/GhgCvjeYH4N9EE3Yy/QJCY3Ot+ldy
An3d+lowUwAPjFe23SjNW/oNNNDvtp0wDfIio5ULQvDEXQT9aXt0uwpRmiGLqmFP
nf0sWxirCPzwcc8oO704IGyw3TOlFaSHbsyT2XuJHDrh2Ki4RJbcvD6zh2XnN3Ys
i1r6NIBkckUT3VU2udpYtBSmwH2/0WpZ5Gp7Ib+8paRJ617t/DobOSo4scm3uSan
XSCfVppXRzqNSQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:34 2025 by rpki-client on console-fra.rpki-client.org