Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: dbOkITmmxB3D4CKmcQ9efTsnZS23QGF6PxkPaXaL1/U=
Subject key identifier: FF:CF:99:7F:87:76:F4:89:D5:81:EC:6B:FF:8E:03:B6:20:E4:24:F1
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 0194BB6032C83B3C5EBB798A62132ACEB3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 08BF
Signing time: Fri 31 Jan 2025 08:00:31 +0000
Manifest this update: Fri 31 Jan 2025 08:00:31 +0000
Manifest next update: Sat 01 Feb 2025 08:00:31 +0000
Files and hashes: 1: 0avBUZc0fRe5pdYzvDk9HgX1ajQ.roa (hash: vHaXs0oLz+thOA7Ry4E1jwe2sP/zqNcNu+NOGxEA+rM=)
2: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: siBlue1ZaYPl+k10cGoRXXz3YYpAAyA7lZ4nvtgTq/E=)
3: EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa (hash: vmy1JQIAxBf7tCsU1XK4dYqZEdqdyJHgDm3eJn2Yp94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:32:c8:3b:3c:5e:bb:79:8a:62:13:2a:ce:b3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Jan 31 08:00:31 2025 GMT
Not After : Feb 1 08:00:31 2025 GMT
Subject: CN=ffcf997f8776f489d581ec6bff8e03b620e424f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:74:c5:ff:c0:de:c8:8d:99:54:fb:e1:d9:
48:db:ee:02:61:d0:79:47:af:08:a5:a6:e7:67:e0:
85:ea:9a:77:9c:1d:2a:d1:f7:de:6a:35:77:eb:84:
47:d7:e4:d1:bc:83:de:63:21:e2:50:76:b6:c2:ea:
c2:cd:24:e2:96:08:12:93:33:df:11:30:05:dc:b3:
54:57:d2:32:dd:e5:22:40:7b:b3:66:ca:63:89:51:
64:fd:d2:2d:5e:2f:69:10:e4:27:e4:27:64:05:d6:
fa:49:32:d1:14:07:94:98:4c:7c:67:14:81:06:bd:
de:ba:1b:73:75:4b:76:04:2f:fc:59:b4:1c:9e:58:
70:93:09:97:77:fe:87:67:b0:b2:b9:e9:0e:f1:c0:
9a:80:12:c1:9f:bb:28:4a:1a:78:14:30:d0:63:a2:
f1:f2:77:b8:68:74:8f:71:f3:cf:a1:f8:78:a1:bf:
78:25:68:47:a9:e8:f9:30:eb:02:55:d0:0f:2d:42:
22:b8:f8:14:54:0b:19:b4:8a:a7:ce:d8:75:37:1d:
36:3a:1e:a3:02:8a:ab:12:a6:d5:e1:13:cc:ff:9f:
2b:ed:eb:65:bb:39:01:ee:a5:61:f1:b6:81:ef:4c:
1e:35:1f:ca:0d:87:23:b3:70:87:b7:3b:55:5d:ee:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CF:99:7F:87:76:F4:89:D5:81:EC:6B:FF:8E:03:B6:20:E4:24:F1
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3c:ee:31:ad:1f:66:4a:3c:22:c1:6b:4f:69:d3:c7:c8:81:
0f:22:e9:34:6b:ae:b3:dd:ac:0a:38:d0:b7:82:e6:87:96:f7:
d5:f3:a2:e5:c2:e0:93:28:8e:f8:a8:b2:9b:b0:61:ff:ae:29:
fe:5b:0c:af:ef:ce:a5:72:a0:f9:f4:81:27:1c:a2:3a:b0:98:
0d:2f:43:19:62:84:91:30:e1:ab:05:5f:ac:d6:b8:c3:2b:04:
bc:b9:bb:29:b5:0d:2b:16:3b:06:47:8f:81:81:be:ef:85:fe:
09:57:17:de:e6:11:d8:87:d0:0e:4f:92:d0:6c:c5:1f:6e:07:
29:9c:bd:9e:88:1a:f8:ee:2c:3b:1d:05:43:01:b7:28:fc:fe:
6d:b9:dc:17:fb:52:f4:2d:e7:c3:3f:48:46:b5:10:de:44:9c:
ac:1d:4f:05:ad:ed:9f:20:8f:90:45:c9:85:ce:97:35:d3:fa:
3d:39:18:37:86:cd:67:cb:be:14:df:60:ee:34:58:67:77:72:
d3:07:26:0f:eb:b4:f6:3e:31:73:fb:bd:1e:1c:cb:f8:d3:a4:
e0:a7:bc:a1:e9:ad:a2:37:34:5e:08:37:9e:16:9c:e6:26:5b:
8b:6a:d1:c4:64:e2:19:41:2f:60:ae:9a:69:3a:97:4a:8a:fc:
ff:4d:7c:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YDLIOzxeu3mKYhMqzrO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWQ2ZDgzYzgwODM3MjlkN2E5ZDg1NzFkNjVjZTk3ZTA1
OGI4MjEwHhcNMjUwMTMxMDgwMDMxWhcNMjUwMjAxMDgwMDMxWjAzMTEwLwYDVQQD
EyhmZmNmOTk3Zjg3NzZmNDg5ZDU4MWVjNmJmZjhlMDNiNjIwZTQyNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zx0xf/A3siNmVT74dlI2+4CYdB5
R68IpabnZ+CF6pp3nB0q0ffeajV364RH1+TRvIPeYyHiUHa2wurCzSTilggSkzPf
ETAF3LNUV9Iy3eUiQHuzZspjiVFk/dItXi9pEOQn5CdkBdb6STLRFAeUmEx8ZxSB
Br3euhtzdUt2BC/8WbQcnlhwkwmXd/6HZ7CyuekO8cCagBLBn7soShp4FDDQY6Lx
8ne4aHSPcfPPofh4ob94JWhHqej5MOsCVdAPLUIiuPgUVAsZtIqnzth1Nx02Oh6j
AoqrEqbV4RPM/58r7etluzkB7qVh8baB70weNR/KDYcjs3CHtztVXe7gTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/PmX+HdvSJ1YHsa/+OA7Yg5CTxMB8GA1UdIwQY
MBaAFACtbYPICDcp16nYVx1lzpfgWLghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kYjI5MTItODlhOS00ZWU5LTgyMjkt
YTU1Zjc3YjgzZTZiLzEvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kYjI5MTItODlhOS00ZWU5LTgyMjktYTU1Zjc3YjgzZTZi
LzEvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjzuMa0f
Zko8IsFrT2nTx8iBDyLpNGuus92sCjjQt4Lmh5b31fOi5cLgkyiO+Kiym7Bh/64p
/lsMr+/OpXKg+fSBJxyiOrCYDS9DGWKEkTDhqwVfrNa4wysEvLm7KbUNKxY7BkeP
gYG+74X+CVcX3uYR2IfQDk+S0GzFH24HKZy9noga+O4sOx0FQwG3KPz+bbncF/tS
9C3nwz9IRrUQ3kScrB1PBa3tnyCPkEXJhc6XNdP6PTkYN4bNZ8u+FN9g7jRYZ3dy
0wcmD+u09j4xc/u9HhzL+NOk4Ke8oemtojc0Xgg3nhac5iZbi2rRxGTiGUEvYK6a
aTqXSor8/018Tg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:38 2025 by rpki-client on console-fra.rpki-client.org