Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File: POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier: Xa8aZlpprz1gxD1EhdLpqhh2hjBRdilsNNwnRFds4yY=
Subject key identifier: E9:60:B4:D4:9D:FF:EF:F7:BE:46:04:62:7E:B1:BC:4A:4A:E8:B3:DF
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 0194BABB83111C19B7680CE16C884F689A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number: 0C85
Signing time: Fri 31 Jan 2025 05:00:38 +0000
Manifest this update: Fri 31 Jan 2025 05:00:38 +0000
Manifest next update: Sat 01 Feb 2025 05:00:38 +0000
Files and hashes: 1: LnOKhHlXHgf9Bc7By8RdD87CENc.roa (hash: SBq8tD3nAGx2l0m6YmZ4sb5xKbi6vLmOJJ/u4lHDzyQ=)
2: MtOebLSNSemLqQH1Qdt6lKbCdQU.roa (hash: p2mZ95DJo3RCkhalV7XQwJkDag3/z20BD18MDcr1SRU=)
3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: qqlZdxVAgPfUEn7hkhj2iP6wBUbWth9JCyoCV1gEGOE=)
4: qQRcQNcowo3kCSFmxOhnd54Y8jY.roa (hash: raMUt5t5W5lynqzBwroXOMjtxQgLkjALLNPiIADIJEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:83:11:1c:19:b7:68:0c:e1:6c:88:4f:68:9a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Jan 31 05:00:38 2025 GMT
Not After : Feb 1 05:00:38 2025 GMT
Subject: CN=e960b4d49dffeff7be4604627eb1bc4a4ae8b3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:60:25:94:c9:da:cc:22:f2:57:f1:8f:7d:
bb:f5:17:5d:19:2f:90:5e:4b:85:26:96:cf:43:de:
8f:10:b5:58:f8:0d:59:de:46:84:bc:1a:ee:c8:bd:
d7:bd:aa:86:d3:b8:31:8c:85:1d:77:e6:9f:91:6b:
6c:c6:34:3d:35:e7:32:28:f1:83:54:3b:4e:d6:dd:
3b:08:65:db:59:67:a5:31:61:a7:6e:c5:db:30:36:
b1:95:e3:c7:41:d2:92:42:0d:af:50:b3:53:0e:24:
b6:50:34:55:94:e9:b1:c6:1e:83:09:e8:d7:08:da:
85:81:f4:08:71:bc:77:a9:9c:97:e6:01:e8:d0:6c:
3a:5f:1a:12:92:bc:b6:83:1a:09:9c:c3:20:13:53:
77:5e:cc:fb:9f:78:88:b0:1e:69:53:21:9a:66:b4:
10:e6:c9:d2:dd:60:81:3d:4c:c5:38:aa:a2:0a:a3:
16:3e:fd:38:a3:d3:7c:7a:de:a9:1c:92:0c:1e:6f:
fd:47:13:a8:a6:59:b5:2c:13:88:46:00:b5:6a:ab:
fc:d7:7d:97:78:58:54:6d:e2:4d:66:16:0d:dc:43:
61:2c:dd:bb:b2:18:a3:a5:79:c7:7e:2f:15:6a:fe:
65:75:b8:97:e4:ed:a3:9c:89:54:1f:d2:6f:13:95:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:B4:D4:9D:FF:EF:F7:BE:46:04:62:7E:B1:BC:4A:4A:E8:B3:DF
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bc:13:36:42:17:b8:f4:23:ce:9f:06:b4:b6:73:b9:ff:62:
d7:70:bc:bf:3f:5d:f8:c0:8c:9b:a8:2c:ba:75:93:c7:49:a8:
79:19:00:76:3c:bb:01:40:7c:a5:80:27:b9:f2:6b:e8:76:2c:
bc:4e:07:ca:87:8d:51:61:44:e2:26:9a:f9:3d:bf:de:7b:66:
c7:27:37:6d:df:b3:8f:e5:8e:8a:12:0a:96:3a:58:f1:e6:cc:
c8:b3:ec:a9:01:0d:92:11:b8:e3:12:12:c3:3d:07:5c:d0:d2:
bd:24:bb:f1:92:ca:a2:72:52:d6:39:4b:fb:2f:53:28:ea:f2:
11:50:ce:24:99:54:a8:d2:70:f8:cb:1f:2e:2c:57:12:ae:64:
09:9f:9e:02:7c:bb:9b:05:ba:87:37:46:e5:94:2b:12:9d:cc:
b5:53:06:5b:0b:4c:65:39:ba:fe:2e:31:89:25:97:cc:38:37:
da:ed:c8:b2:6d:3d:56:93:05:0c:61:d6:ff:07:9d:8c:97:4e:
2c:37:d8:12:5d:3a:49:fa:9d:0e:cd:3c:35:5b:ae:83:3a:c2:
58:02:06:19:e7:b4:5a:15:97:24:77:bb:aa:06:34:d0:a6:8f:
c0:94:58:10:7e:72:5d:fe:f1:95:db:12:68:e1:30:e3:d8:7a:
6f:09:20:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u4MRHBm3aAzhbIhPaJp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZTc1NjZiYjViMTllNzAwZjQ4ZTI1ZTA3NTA2YzJmMjIy
ZGYzODQwHhcNMjUwMTMxMDUwMDM4WhcNMjUwMjAxMDUwMDM4WjAzMTEwLwYDVQQD
EyhlOTYwYjRkNDlkZmZlZmY3YmU0NjA0NjI3ZWIxYmM0YTRhZThiM2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb9gJZTJ2swi8lfxj3279RddGS+Q
XkuFJpbPQ96PELVY+A1Z3kaEvBruyL3XvaqG07gxjIUdd+afkWtsxjQ9NecyKPGD
VDtO1t07CGXbWWelMWGnbsXbMDaxlePHQdKSQg2vULNTDiS2UDRVlOmxxh6DCejX
CNqFgfQIcbx3qZyX5gHo0Gw6XxoSkry2gxoJnMMgE1N3Xsz7n3iIsB5pUyGaZrQQ
5snS3WCBPUzFOKqiCqMWPv04o9N8et6pHJIMHm/9RxOoplm1LBOIRgC1aqv8132X
eFhUbeJNZhYN3ENhLN27shijpXnHfi8Vav5ldbiX5O2jnIlUH9JvE5UqWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlgtNSd/+/3vkYEYn6xvEpK6LPfMB8GA1UdIwQY
MBaAFDznVmu1sZ5wD0jiXgdQbC8iLfOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTIt
ODlmZjA2Zjc5NjM1LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTItODlmZjA2Zjc5NjM1
LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLwTNkIX
uPQjzp8GtLZzuf9i13C8vz9d+MCMm6gsunWTx0moeRkAdjy7AUB8pYAnufJr6HYs
vE4HyoeNUWFE4iaa+T2/3ntmxyc3bd+zj+WOihIKljpY8ebMyLPsqQENkhG44xIS
wz0HXNDSvSS78ZLKonJS1jlL+y9TKOryEVDOJJlUqNJw+MsfLixXEq5kCZ+eAny7
mwW6hzdG5ZQrEp3MtVMGWwtMZTm6/i4xiSWXzDg32u3Ism09VpMFDGHW/wedjJdO
LDfYEl06SfqdDs08NVuugzrCWAIGGee0WhWXJHe7qgY00KaPwJRYEH5yXf7xldsS
aOEw49h6bwkgRQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:35 2025 by rpki-client on console-fra.rpki-client.org