Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier: 2/BoFkU2HHSVPEVKjU51jJxYmn0JaORgCVz87e0ePSg=
Subject key identifier: FB:87:31:66:D9:2D:75:F0:69:1A:F9:BB:2F:7F:AB:BA:F4:57:8E:77
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial: 0194BAF21993C4BD9A26663BE90CF9FE4561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number: 0204
Signing time: Fri 31 Jan 2025 06:00:15 +0000
Manifest this update: Fri 31 Jan 2025 06:00:15 +0000
Manifest next update: Sat 01 Feb 2025 06:00:15 +0000
Files and hashes: 1: 1-d2k_vU-BkEDRcLdH-TIekg9VxQ.roa (hash: BNmjLGfRynwPkim2jPmJ7ZmYJ2M4K6NMjQ6A9ZIWsHE=)
2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: txQZ67P0urwYr1F1+pLz7ZKZkZJWR876t9DFforZnA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:19:93:c4:bd:9a:26:66:3b:e9:0c:f9:fe:45:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Validity
Not Before: Jan 31 06:00:15 2025 GMT
Not After : Feb 1 06:00:15 2025 GMT
Subject: CN=fb873166d92d75f0691af9bb2f7fabbaf4578e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:31:37:39:45:ce:2f:2b:82:c5:97:e9:b8:
ef:2a:1d:77:37:46:9d:ba:0e:25:75:9d:9e:a6:b1:
bf:a8:9a:38:c4:3d:10:5d:84:09:c4:1d:ae:70:c0:
7d:b3:22:53:95:a2:08:1d:a1:a9:01:dd:0d:58:41:
a7:be:a2:bc:37:99:eb:8e:b5:97:b8:c1:97:9b:51:
f5:52:ac:6a:5c:ef:f0:d6:da:55:e4:9e:0e:2a:ab:
59:ce:f5:e5:07:60:bc:e9:61:ec:0a:18:e3:ab:bf:
fb:fd:76:1e:c0:df:39:be:8e:c2:19:c5:97:cf:d3:
bd:5f:a3:3a:38:0b:6f:09:71:55:80:49:cc:b3:8a:
e3:7d:7f:02:ec:9d:92:25:85:3a:86:49:38:83:3f:
0a:30:22:79:81:b9:03:56:47:44:2d:93:5d:ab:5c:
f7:a9:6f:da:f0:d4:da:8a:dc:3c:56:cc:1b:6b:e8:
39:91:cf:98:83:7c:35:de:83:c9:dc:08:e6:8c:f1:
07:33:c1:4a:6d:47:57:44:f7:de:de:68:72:83:6c:
95:68:ac:7d:60:4a:51:24:4c:51:ff:74:02:98:ff:
d4:28:02:13:d0:34:43:b8:ff:6e:ac:4f:50:d9:50:
39:26:f4:20:ea:99:89:97:64:66:bd:44:2b:9b:4b:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:87:31:66:D9:2D:75:F0:69:1A:F9:BB:2F:7F:AB:BA:F4:57:8E:77
X509v3 Authority Key Identifier:
keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f8:f2:54:b1:82:8d:03:d6:b2:ac:1a:46:29:f9:5b:ff:9b:
e0:ef:6e:17:18:2e:60:4a:f1:92:0d:eb:9d:81:49:54:6b:1f:
4d:11:9e:82:a0:f2:96:eb:94:a8:e5:c7:2a:b5:f8:ce:1a:af:
6d:bb:10:81:51:70:8c:1a:f8:0e:79:65:36:cb:f9:f8:98:75:
f6:58:db:9f:df:ce:5b:c9:3d:66:49:04:02:c5:93:11:b4:f5:
08:dc:c7:34:cf:a6:a6:54:ce:61:76:0b:5f:9c:2a:9b:5f:f3:
a5:e4:9c:18:d9:bf:e0:db:fd:ae:5a:05:bd:c2:99:26:1a:e0:
1b:5c:37:9b:b2:99:c9:79:f1:ce:a7:77:1b:b9:09:19:7d:31:
c5:6f:b2:ee:b8:0e:7e:89:f4:48:70:3c:f7:77:92:a7:ec:1d:
40:12:35:52:f2:89:67:be:a5:b2:cb:00:64:9b:06:6d:f2:92:
8f:3a:78:c3:44:cb:cb:c4:f1:4d:2e:0b:77:79:6e:4f:5e:f5:
f6:d4:b8:c4:01:8e:39:b5:ca:8c:95:6c:f2:b3:56:6b:08:7b:
af:88:7d:05:98:38:ef:98:72:d3:98:90:8b:d5:eb:67:1d:de:
d2:24:ab:7d:f5:73:5e:17:2d:6d:6f:5f:86:88:08:9e:d4:c0:
f7:1a:c4:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68hmTxL2aJmY76Qz5/kVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOTM2OTMzZGMzYWEwM2IzZGFhMDZlNWIzODczZjM1YmRh
YjU1ZDIwHhcNMjUwMTMxMDYwMDE1WhcNMjUwMjAxMDYwMDE1WjAzMTEwLwYDVQQD
EyhmYjg3MzE2NmQ5MmQ3NWYwNjkxYWY5YmIyZjdmYWJiYWY0NTc4ZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfsxNzlFzi8rgsWX6bjvKh13N0ad
ug4ldZ2eprG/qJo4xD0QXYQJxB2ucMB9syJTlaIIHaGpAd0NWEGnvqK8N5nrjrWX
uMGXm1H1UqxqXO/w1tpV5J4OKqtZzvXlB2C86WHsChjjq7/7/XYewN85vo7CGcWX
z9O9X6M6OAtvCXFVgEnMs4rjfX8C7J2SJYU6hkk4gz8KMCJ5gbkDVkdELZNdq1z3
qW/a8NTaitw8Vswba+g5kc+Yg3w13oPJ3AjmjPEHM8FKbUdXRPfe3mhyg2yVaKx9
YEpRJExR/3QCmP/UKAIT0DRDuP9urE9Q2VA5JvQg6pmJl2RmvUQrm0u6aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuHMWbZLXXwaRr5uy9/q7r0V453MB8GA1UdIwQY
MBaAFLuTaTPcOqA7PaoG5bOHPzW9q1XSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wY2E1OWItMzJkMS00NmEyLWJlNDgt
MGMzM2UxMjY0ZDdmLzEvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wY2E1OWItMzJkMS00NmEyLWJlNDgtMGMzM2UxMjY0ZDdm
LzEvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvjyVLGC
jQPWsqwaRin5W/+b4O9uFxguYErxkg3rnYFJVGsfTRGegqDyluuUqOXHKrX4zhqv
bbsQgVFwjBr4DnllNsv5+Jh19ljbn9/OW8k9ZkkEAsWTEbT1CNzHNM+mplTOYXYL
X5wqm1/zpeScGNm/4Nv9rloFvcKZJhrgG1w3m7KZyXnxzqd3G7kJGX0xxW+y7rgO
fon0SHA893eSp+wdQBI1UvKJZ76lsssAZJsGbfKSjzp4w0TLy8TxTS4Ld3luT171
9tS4xAGOObXKjJVs8rNWawh7r4h9BZg475hy05iQi9XrZx3e0iSrffVzXhctbW9f
hogIntTA9xrEfQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:05 2025 by rpki-client on console-fra.rpki-client.org