Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
File: v_0PCtnHhAlsWg-56M9cLwRAQTs.mft (raw, json)
Hash identifier: 9vRtpGAYQ3DBysuUFpzfPvm4owv5GEF8X9DE+N6wqto=
Subject key identifier: 64:E6:93:00:39:7A:7C:7F:1E:85:AA:17:39:22:40:FD:F5:7E:6B:1A
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Certificate issuer: /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial: 0194BB9755BAF08F6CE5971341996E52430F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
Manifest number: 0404
Signing time: Fri 31 Jan 2025 09:00:44 +0000
Manifest this update: Fri 31 Jan 2025 09:00:44 +0000
Manifest next update: Sat 01 Feb 2025 09:00:44 +0000
Files and hashes: 1: 2Kr-1XLrgROhbD1jcsbK-FilLdY.roa (hash: 5GfsQOtJA+CgwxuKGKTuCz73LK7pVElXz0y95QkCQq0=)
2: v_0PCtnHhAlsWg-56M9cLwRAQTs.crl (hash: 9OEYAxQTQwGXpkwcMGwqW7z0IJZ21Tinxj7w2bbp4+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:55:ba:f0:8f:6c:e5:97:13:41:99:6e:52:43:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Validity
Not Before: Jan 31 09:00:44 2025 GMT
Not After : Feb 1 09:00:44 2025 GMT
Subject: CN=64e69300397a7c7f1e85aa17392240fdf57e6b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:ef:41:7f:85:c7:3b:7d:b2:44:6a:ee:2d:
b1:bc:a5:fb:6c:6e:b8:bc:77:c3:94:55:6c:54:40:
8c:58:8b:c4:11:a8:17:32:0e:fd:6f:75:e3:4c:18:
a8:9d:62:69:6b:a2:23:35:45:6a:61:d0:ee:b7:8b:
a8:ba:7e:dc:c7:9b:59:c0:67:49:16:40:55:d2:06:
95:de:9a:0f:03:56:f5:f1:c0:8a:05:c0:4f:00:84:
76:59:9b:17:32:d4:0d:1e:ef:7c:b0:b9:d1:08:c3:
0c:d7:82:6a:cf:03:a8:a6:e7:1a:cc:58:0e:44:f1:
99:34:9a:ed:70:fb:ae:8f:3c:95:27:2f:4b:89:ee:
c2:9d:28:d4:99:2e:5e:84:2c:b8:9c:23:66:4a:48:
f2:c1:60:2e:a1:44:99:ca:11:dd:1a:67:a6:03:69:
dd:99:b0:ce:17:41:4b:3c:82:b1:0c:54:4e:68:36:
96:97:79:eb:5f:81:22:18:63:89:dc:f3:2e:23:af:
a0:dc:a9:fc:d6:a0:ec:c3:f6:14:ae:c4:2f:79:e0:
6e:6e:94:48:46:b0:21:be:e2:6a:a5:94:be:2d:59:
28:4b:44:ac:6a:58:67:b2:66:4d:28:c5:28:5d:ff:
16:c8:38:1c:94:b4:03:3c:88:10:14:c9:16:33:71:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E6:93:00:39:7A:7C:7F:1E:85:AA:17:39:22:40:FD:F5:7E:6B:1A
X509v3 Authority Key Identifier:
keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:62:f2:7d:11:6e:d1:a4:16:dc:3f:a3:1d:38:7a:d8:5c:0b:
c3:63:a2:30:2c:61:b1:66:82:cd:bb:49:98:46:0c:28:61:e9:
b9:35:ed:1c:9a:79:72:cc:d8:14:43:4f:e1:64:4d:ba:c8:9c:
e2:77:f5:76:ce:f7:ef:07:ed:a3:e4:e8:ff:d9:53:ec:a4:24:
ab:07:89:5b:67:77:7f:de:30:5a:94:64:13:23:a8:07:69:3e:
64:4f:c3:09:e3:46:d0:91:ad:f2:b0:1d:b5:39:60:9a:2b:7e:
54:0b:89:d4:25:13:e8:eb:f4:c7:69:d0:9f:76:a1:78:f9:10:
ff:4b:ae:a6:4c:57:f2:f5:2e:a8:1c:6b:3e:15:ef:2b:b2:7d:
63:72:9e:c3:bb:cc:da:c9:e9:b5:a7:ff:5f:53:f9:db:c5:5d:
45:13:5b:4a:fe:16:d7:9a:4d:9a:ca:4a:f4:9c:06:7c:15:6b:
7a:03:45:59:56:e1:f1:de:6d:7a:b4:c2:f6:f0:bd:33:43:e0:
1b:aa:8e:21:de:92:52:1d:bd:d7:bb:5f:8c:8a:67:37:35:b9:
f7:ff:76:49:3f:d3:c0:5f:6a:d7:99:40:eb:36:28:c6:e3:8e:
1a:3c:3a:cb:95:b9:50:83:28:39:4c:68:b6:19:77:5a:cd:bd:
da:5c:db:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7l1W68I9s5ZcTQZluUkMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZmQwZjBhZDljNzg0MDk2YzVhMGZiOWU4Y2Y1YzJmMDQ0
MDQxM2IwHhcNMjUwMTMxMDkwMDQ0WhcNMjUwMjAxMDkwMDQ0WjAzMTEwLwYDVQQD
Eyg2NGU2OTMwMDM5N2E3YzdmMWU4NWFhMTczOTIyNDBmZGY1N2U2YjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi7vQX+Fxzt9skRq7i2xvKX7bG64
vHfDlFVsVECMWIvEEagXMg79b3XjTBionWJpa6IjNUVqYdDut4uoun7cx5tZwGdJ
FkBV0gaV3poPA1b18cCKBcBPAIR2WZsXMtQNHu98sLnRCMMM14JqzwOopucazFgO
RPGZNJrtcPuujzyVJy9Lie7CnSjUmS5ehCy4nCNmSkjywWAuoUSZyhHdGmemA2nd
mbDOF0FLPIKxDFROaDaWl3nrX4EiGGOJ3PMuI6+g3Kn81qDsw/YUrsQveeBubpRI
RrAhvuJqpZS+LVkoS0SsalhnsmZNKMUoXf8WyDgclLQDPIgQFMkWM3G8vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTmkwA5enx/HoWqFzkiQP31fmsaMB8GA1UdIwQY
MBaAFL/9DwrZx4QJbFoPuejPXC8EQEE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lYWVhNTktOTE5ZC00MTM1LTliZGUt
NmRjZjBjOTNjYmRiLzEvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lYWVhNTktOTE5ZC00MTM1LTliZGUtNmRjZjBjOTNjYmRi
LzEvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmLyfRFu
0aQW3D+jHTh62FwLw2OiMCxhsWaCzbtJmEYMKGHpuTXtHJp5cszYFENP4WRNusic
4nf1ds737wfto+To/9lT7KQkqweJW2d3f94wWpRkEyOoB2k+ZE/DCeNG0JGt8rAd
tTlgmit+VAuJ1CUT6Ov0x2nQn3ahePkQ/0uupkxX8vUuqBxrPhXvK7J9Y3Kew7vM
2snptaf/X1P528VdRRNbSv4W15pNmspK9JwGfBVregNFWVbh8d5terTC9vC9M0Pg
G6qOId6SUh2917tfjIpnNzW59/92ST/TwF9q15lA6zYoxuOOGjw6y5W5UIMoOUxo
thl3Ws292lzbog==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:17 2025 by rpki-client on console-fra.rpki-client.org