Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: ka1JvDkb4OXNTPMhCq3Pk13D1xibni55oHS9gQrTEag=
Subject key identifier: C6:A0:A6:8C:CC:84:11:67:12:7A:CC:A5:A0:DE:C9:9D:40:4C:8D:10
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 0194BA84B78989041B4ECAD6B9F7983E4389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 04:00:47 +0000
Manifest this update: Fri 31 Jan 2025 04:00:47 +0000
Manifest next update: Sat 01 Feb 2025 04:00:47 +0000
Files and hashes: 1: 2XUfaTirVUXiz634l6yJgIfFd-w.roa (hash: GVtKnxVhn05fl8oago4Thd0oyWhI+oUJ9lxXzUd8jx4=)
2: HnWetEwt9SfzrdVumCWXipTmrGY.roa (hash: qo1xu7/QgUA3jqTLkS8KxhBD7n5/N/B5fF5rrLaAkS8=)
3: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: s2J7JJ/B4SHYv2JNdjc0p2SJ02gzyuystvVRKrCZWsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:b7:89:89:04:1b:4e:ca:d6:b9:f7:98:3e:43:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Jan 31 04:00:47 2025 GMT
Not After : Feb 1 04:00:47 2025 GMT
Subject: CN=c6a0a68ccc841167127acca5a0dec99d404c8d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:12:ff:91:04:54:a6:ac:49:ba:a0:39:12:aa:
6a:a7:4c:83:f9:59:9d:bc:e1:de:c3:ed:ad:c5:55:
c6:b1:4b:df:f4:96:93:89:d3:cf:a9:46:9c:2b:cf:
4b:18:d2:aa:21:c6:7d:ee:37:69:ca:ee:97:54:07:
5a:eb:52:42:72:4b:52:68:98:7d:b6:e0:82:14:c0:
5c:e8:7c:0e:0f:c4:e0:9a:55:74:7a:0d:6a:4f:d0:
dc:b8:4d:a6:f1:84:5c:c8:a5:ec:2d:48:cf:4a:bf:
12:81:97:d2:7f:f7:92:ea:ae:59:87:0c:07:e3:d8:
93:b7:27:0b:33:f8:36:22:3f:91:a5:12:61:2f:74:
d6:79:8d:7b:c5:6e:cb:0b:03:14:ac:e9:a5:82:69:
b8:0a:2d:70:8e:85:5d:ea:1d:31:c7:86:48:be:dd:
2f:05:69:d2:21:8a:ba:a6:ef:23:a6:4a:aa:19:54:
ac:30:29:6e:3b:fc:b2:89:64:bd:5b:9f:b1:26:c0:
05:b6:81:a5:b2:bc:1c:7b:e9:de:f0:0a:e5:c1:2b:
63:ce:b0:c8:d5:3f:dd:ab:95:1e:90:de:29:30:b2:
28:7d:77:51:7f:c2:f5:41:0d:62:0c:34:07:10:bd:
24:c5:98:d3:98:bf:3e:ae:33:54:f9:b8:d9:dd:55:
bc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A0:A6:8C:CC:84:11:67:12:7A:CC:A5:A0:DE:C9:9D:40:4C:8D:10
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c0:b7:23:91:5d:a4:13:e6:96:5d:17:be:fe:da:5c:8b:5c:
fc:3a:e9:73:0b:2e:81:74:83:00:24:d3:cc:fc:a5:2b:3f:57:
cc:04:02:a8:6e:10:c8:de:93:23:8a:bf:7f:d5:b0:ed:66:44:
73:a6:35:90:c4:93:7a:3b:05:7b:0d:f1:48:fa:9c:7f:89:97:
c7:46:5a:f3:ba:ae:b6:b2:be:50:9f:48:e5:b5:f1:90:2d:d3:
0e:e5:ac:20:ae:ac:b9:d1:e6:7e:0a:7d:8f:a4:60:7b:8e:00:
15:74:53:aa:60:99:dd:e3:2c:b3:6d:2c:d6:2b:80:28:79:26:
81:bb:dc:0a:28:4b:ba:8c:5d:66:5d:1d:7a:30:12:03:b7:f5:
cc:3f:13:91:4b:97:3b:83:a2:52:bd:43:2b:a7:80:78:67:98:
53:57:fa:4a:f3:91:4e:4c:85:c8:70:16:02:d5:5f:92:a4:6f:
44:99:2d:34:c2:52:47:95:40:4d:bd:de:1a:9b:c4:45:9b:bb:
b8:65:2b:33:e3:cd:6a:05:54:4f:f2:4a:d3:7f:e4:1e:49:f5:
53:6a:74:75:b6:d7:2d:a9:1c:f1:c3:95:f8:16:36:81:6d:4f:
73:cd:b6:b8:53:eb:3d:46:60:5a:c9:24:a1:8c:3f:6f:75:32:
4b:b2:6d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hLeJiQQbTsrWufeYPkOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjcwOWNiMzk5YzRlMTY4Y2NiZGExNmRiMTM2YjViYzhi
OTZkZDYwHhcNMjUwMTMxMDQwMDQ3WhcNMjUwMjAxMDQwMDQ3WjAzMTEwLwYDVQQD
EyhjNmEwYTY4Y2NjODQxMTY3MTI3YWNjYTVhMGRlYzk5ZDQwNGM4ZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxL/kQRUpqxJuqA5Eqpqp0yD+Vmd
vOHew+2txVXGsUvf9JaTidPPqUacK89LGNKqIcZ97jdpyu6XVAda61JCcktSaJh9
tuCCFMBc6HwOD8TgmlV0eg1qT9DcuE2m8YRcyKXsLUjPSr8SgZfSf/eS6q5ZhwwH
49iTtycLM/g2Ij+RpRJhL3TWeY17xW7LCwMUrOmlgmm4Ci1wjoVd6h0xx4ZIvt0v
BWnSIYq6pu8jpkqqGVSsMCluO/yyiWS9W5+xJsAFtoGlsrwce+ne8ArlwStjzrDI
1T/dq5UekN4pMLIofXdRf8L1QQ1iDDQHEL0kxZjTmL8+rjNU+bjZ3VW8lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMagpozMhBFnEnrMpaDeyZ1ATI0QMB8GA1UdIwQY
MBaAFC8nCcs5nE4WjMvaFtsTa1vIuW3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAt
MjAxNjdjZDQyYjgyLzEvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAtMjAxNjdjZDQyYjgy
LzEvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMC3I5Fd
pBPmll0Xvv7aXItc/DrpcwsugXSDACTTzPylKz9XzAQCqG4QyN6TI4q/f9Ww7WZE
c6Y1kMSTejsFew3xSPqcf4mXx0Za87qutrK+UJ9I5bXxkC3TDuWsIK6sudHmfgp9
j6Rge44AFXRTqmCZ3eMss20s1iuAKHkmgbvcCihLuoxdZl0dejASA7f1zD8TkUuX
O4OiUr1DK6eAeGeYU1f6SvORTkyFyHAWAtVfkqRvRJktNMJSR5VATb3eGpvERZu7
uGUrM+PNagVUT/JK03/kHkn1U2p0dbbXLakc8cOV+BY2gW1Pc822uFPrPUZgWskk
oYw/b3UyS7JtkA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:18 2025 by rpki-client on console-fra.rpki-client.org