Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: qt41GwXqzs0JwThV2IkzuawlTjitLZpASN+NjEzTHFs=
Subject key identifier: 6B:7D:51:0C:95:54:9A:9B:FD:EE:7B:25:DE:BA:8D:AC:2E:F1:F0:AD
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 0194BB6014242334F53985D7F3F7B0A1DE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 1C
Signing time: Fri 31 Jan 2025 08:00:23 +0000
Manifest this update: Fri 31 Jan 2025 08:00:23 +0000
Manifest next update: Sat 01 Feb 2025 08:00:23 +0000
Files and hashes: 1: 7ZCM2DGQAxMoqKS4r08nTwBlTvg.roa (hash: Nsq7TZX/LJBEuY63VFLqAaBjZcBcw7djLWbv9kH4DH4=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: vHfJvz/roaqKaV7OFqqzCvajT4flVBmxOO0oBtDsOOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:14:24:23:34:f5:39:85:d7:f3:f7:b0:a1:de:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Jan 31 08:00:23 2025 GMT
Not After : Feb 1 08:00:23 2025 GMT
Subject: CN=6b7d510c95549a9bfdee7b25deba8dac2ef1f0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:32:ae:25:8f:11:5d:9b:79:20:a8:42:de:
36:3e:86:f1:f2:c9:c4:e9:1c:8f:7a:99:38:96:54:
66:69:14:c7:f8:0f:41:2b:fd:d7:e9:57:b0:a9:a0:
c3:6d:a2:8e:ab:d9:91:76:22:31:f0:0f:7e:c1:6b:
31:a5:90:dd:2b:7f:fe:22:c1:57:77:e4:df:6e:31:
ba:4a:d2:17:92:17:b7:92:d7:dc:aa:c5:54:bf:db:
b0:8c:59:96:80:0f:a6:54:f8:1f:37:c3:df:74:31:
2b:cf:ae:98:8c:1e:2f:3a:e0:67:43:20:c9:bd:ab:
1c:cf:bd:82:be:b2:c9:4b:bc:42:14:79:c5:25:6d:
a5:5d:18:5c:87:9e:ae:19:3a:47:33:df:c3:12:d4:
15:5b:6f:47:7c:6a:f0:97:68:3f:93:95:f4:c4:42:
09:86:6e:12:2e:67:d5:27:ac:ae:7d:fe:af:3b:99:
48:81:36:94:0c:af:fa:41:79:b0:a5:17:06:9a:2a:
9d:98:59:29:c4:2a:28:a2:ae:24:02:a1:d0:49:b8:
d1:43:e3:38:0d:f7:d5:16:87:2a:33:e1:32:49:c8:
71:a7:fb:23:ed:b8:6f:60:1a:77:eb:a3:10:d2:59:
44:2a:72:fd:3f:b1:d4:1a:5f:86:34:1f:36:71:0b:
e9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7D:51:0C:95:54:9A:9B:FD:EE:7B:25:DE:BA:8D:AC:2E:F1:F0:AD
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:78:4e:68:95:42:68:fb:67:d9:62:6c:e4:ed:9f:65:81:1d:
49:7d:4a:39:9c:72:ea:a5:e4:e7:df:ac:45:71:f8:12:f1:61:
1a:cd:fb:ed:06:1b:0c:8c:97:f1:93:a2:64:7b:55:95:da:45:
70:15:0b:26:f2:36:56:33:e6:8f:5a:7d:19:ae:81:4d:e4:0a:
64:3e:47:14:c1:1e:43:6b:4c:d5:87:d3:56:6e:0a:e3:25:28:
3a:93:9a:ef:18:2c:a7:7b:3d:7a:4f:ce:54:bd:3a:96:bf:87:
4d:30:c4:86:0d:ca:ef:bc:21:93:40:02:6a:d0:77:ef:7b:95:
5b:87:5b:35:42:85:02:95:36:5e:a8:ce:cf:f6:9e:82:3e:f0:
71:31:c1:51:83:8d:02:32:51:34:fe:84:f5:12:90:03:e9:2b:
37:dd:ea:54:87:18:70:e3:ce:c2:11:6e:06:39:c4:f5:21:88:
b2:9a:39:14:f5:99:24:5d:54:3b:7c:73:47:6c:5e:de:b1:aa:
1c:4f:ef:99:2b:3e:2e:74:d5:03:64:bf:99:89:9b:a6:5b:2f:
76:74:67:32:33:d0:7b:0b:cc:4d:b9:33:51:f0:1c:fe:21:71:
ba:72:0d:5e:be:ff:48:7a:bc:dd:74:2f:d9:b8:f7:aa:1f:1f:
d6:b2:ed:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YBQkIzT1OYXX8/ewod6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTYxZmIwOTI2YmNlMGNhZmFkZDBmMmIxOTM0ODg5NWE0
NDgxNDcwHhcNMjUwMTMxMDgwMDIzWhcNMjUwMjAxMDgwMDIzWjAzMTEwLwYDVQQD
Eyg2YjdkNTEwYzk1NTQ5YTliZmRlZTdiMjVkZWJhOGRhYzJlZjFmMGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvQyriWPEV2beSCoQt42Pobx8snE
6RyPepk4llRmaRTH+A9BK/3X6VewqaDDbaKOq9mRdiIx8A9+wWsxpZDdK3/+IsFX
d+TfbjG6StIXkhe3ktfcqsVUv9uwjFmWgA+mVPgfN8PfdDErz66YjB4vOuBnQyDJ
vascz72CvrLJS7xCFHnFJW2lXRhch56uGTpHM9/DEtQVW29HfGrwl2g/k5X0xEIJ
hm4SLmfVJ6yuff6vO5lIgTaUDK/6QXmwpRcGmiqdmFkpxCoooq4kAqHQSbjRQ+M4
DffVFocqM+EySchxp/sj7bhvYBp366MQ0llEKnL9P7HUGl+GNB82cQvp8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt9UQyVVJqb/e57Jd66jawu8fCtMB8GA1UdIwQY
MBaAFJzmH7CSa84Mr63Q8rGTSIlaRIFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MGU5NTctMWUxNy00MTBlLTkxYTEt
OTZiN2UwYThlZTA5LzEvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MGU5NTctMWUxNy00MTBlLTkxYTEtOTZiN2UwYThlZTA5
LzEvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3hOaJVC
aPtn2WJs5O2fZYEdSX1KOZxy6qXk59+sRXH4EvFhGs377QYbDIyX8ZOiZHtVldpF
cBULJvI2VjPmj1p9Ga6BTeQKZD5HFMEeQ2tM1YfTVm4K4yUoOpOa7xgsp3s9ek/O
VL06lr+HTTDEhg3K77whk0ACatB373uVW4dbNUKFApU2XqjOz/aegj7wcTHBUYON
AjJRNP6E9RKQA+krN93qVIcYcOPOwhFuBjnE9SGIspo5FPWZJF1UO3xzR2xe3rGq
HE/vmSs+LnTVA2S/mYmbplsvdnRnMjPQewvMTbkzUfAc/iFxunINXr7/SHq83XQv
2bj3qh8f1rLtwQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:32 2025 by rpki-client on console-fra.rpki-client.org