Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: aCNWE49VqyjvPUb4/NYLEF2jhMGefxeQRFRgQdHViH8=
Subject key identifier: 93:72:99:96:7A:70:F9:DF:17:CD:8F:26:73:3D:BF:E5:B2:83:E1:01
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 0194BB297FCDC6EA974FBDEA5A465610FDA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 0EC5
Signing time: Fri 31 Jan 2025 07:00:46 +0000
Manifest this update: Fri 31 Jan 2025 07:00:46 +0000
Manifest next update: Sat 01 Feb 2025 07:00:46 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: btn6bF3YvR/qRpO2zEFFoAK2GAOqhw62Lkyom9rTXac=)
2: wfCvw7M0UWwwmqgY4ndwt7Ezdvc.roa (hash: nadXDZSO5g66NQALk/0GLGlBJpZj5fLYUofWKpN1pZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:7f:cd:c6:ea:97:4f:bd:ea:5a:46:56:10:fd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Jan 31 07:00:46 2025 GMT
Not After : Feb 1 07:00:46 2025 GMT
Subject: CN=937299967a70f9df17cd8f26733dbfe5b283e101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:f0:36:a3:2d:df:94:59:80:61:5c:31:1a:
dd:a7:67:62:c5:6f:b3:53:2e:f6:4d:e9:fc:59:be:
aa:d0:f8:ef:f3:d4:f9:05:78:b1:5c:2d:db:dd:d4:
fa:80:73:4e:88:2d:37:f2:99:20:5b:e0:a6:68:a6:
ec:06:51:78:8e:68:61:7d:4a:8a:51:27:5a:3e:41:
c9:a4:8a:6c:4b:94:83:8c:a2:89:e4:02:d7:07:1c:
ab:db:cf:e2:3d:ac:51:16:7c:16:e5:03:35:0d:ef:
be:84:74:55:2f:02:d9:27:9f:a2:0e:0e:20:4c:72:
cc:09:cb:76:e3:d2:c0:f9:f3:1d:6c:57:49:8b:db:
c3:ea:56:0c:06:3a:5a:b6:1a:f5:ab:e4:5f:fb:a4:
82:df:ab:b3:76:9d:78:1e:f7:f0:bf:45:96:8a:3b:
43:d0:a9:1e:98:64:ec:c0:47:4b:46:7b:de:c6:3c:
70:28:7e:5b:1d:05:38:8c:75:8b:c2:51:38:cb:c4:
a2:c9:01:25:01:89:73:8c:56:76:52:88:1d:7d:24:
ce:54:e5:1a:18:3f:5c:08:e4:c6:74:bd:63:af:1a:
8b:2c:d6:43:e2:44:a1:16:f0:b8:8a:46:7e:f8:79:
38:11:fb:e5:b1:3c:74:87:6a:40:dc:a3:d2:24:e0:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:72:99:96:7A:70:F9:DF:17:CD:8F:26:73:3D:BF:E5:B2:83:E1:01
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0f:d4:5e:cb:35:1b:d8:17:bd:ca:af:e9:1d:a5:cd:ad:ee:
05:52:9b:1e:1f:ed:0c:93:f9:ce:0c:e2:bf:24:d6:8c:8c:28:
b0:34:81:22:c9:6b:8f:d4:90:a2:f3:90:42:3e:92:97:fe:2e:
a2:93:db:64:e2:c3:7c:f3:24:42:70:47:1c:6a:19:7d:c6:8c:
41:ec:0d:4d:dc:4e:33:f4:b0:53:f0:90:83:78:35:9b:35:a4:
54:37:07:35:4c:e7:c3:0f:e8:05:b3:ea:72:3d:c7:ef:ef:8b:
b9:25:54:06:7b:46:14:08:03:86:7f:a4:59:f3:3f:ee:9f:42:
f4:a6:ca:93:53:b0:70:e9:38:40:09:2e:97:0c:79:8c:fd:6d:
5e:be:f3:4a:79:9b:bd:dc:7b:af:59:c4:58:d1:a3:d3:65:58:
17:93:60:e1:66:c0:10:ce:67:cb:3f:27:30:10:50:48:98:f7:
c2:72:2b:17:86:44:b6:d2:95:31:3c:46:f8:55:ef:af:5e:14:
37:26:e1:a2:03:d4:e0:a6:73:95:f4:71:2e:65:05:df:50:77:
20:60:f2:0a:68:c4:af:45:1e:d9:d1:d7:7d:41:fc:3e:d7:cf:
b5:e3:ff:e8:88:9c:25:a5:25:22:10:ac:94:42:5f:ff:17:e0:
49:cf:a2:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KX/NxuqXT73qWkZWEP2kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTA4MjQ4OWE0MTQwYzBhNzhlMDNkNTBiNmJmZDU0MDJi
MDQ0ZWEwHhcNMjUwMTMxMDcwMDQ2WhcNMjUwMjAxMDcwMDQ2WjAzMTEwLwYDVQQD
Eyg5MzcyOTk5NjdhNzBmOWRmMTdjZDhmMjY3MzNkYmZlNWIyODNlMTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsPwNqMt35RZgGFcMRrdp2dixW+z
Uy72Ten8Wb6q0Pjv89T5BXixXC3b3dT6gHNOiC038pkgW+CmaKbsBlF4jmhhfUqK
USdaPkHJpIpsS5SDjKKJ5ALXBxyr28/iPaxRFnwW5QM1De++hHRVLwLZJ5+iDg4g
THLMCct249LA+fMdbFdJi9vD6lYMBjpathr1q+Rf+6SC36uzdp14Hvfwv0WWijtD
0KkemGTswEdLRnvexjxwKH5bHQU4jHWLwlE4y8SiyQElAYlzjFZ2UogdfSTOVOUa
GD9cCOTGdL1jrxqLLNZD4kShFvC4ikZ++Hk4EfvlsTx0h2pA3KPSJOBMiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNymZZ6cPnfF82PJnM9v+Wyg+EBMB8GA1UdIwQY
MBaAFNyggkiaQUDAp44D1Qtr/VQCsETqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kYjliYzgtNGIwNi00YmFmLThiYTgt
ZGZjMDU2NTQ1YmU0LzEvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kYjliYzgtNGIwNi00YmFmLThiYTgtZGZjMDU2NTQ1YmU0
LzEvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATw/UXss1
G9gXvcqv6R2lza3uBVKbHh/tDJP5zgzivyTWjIwosDSBIslrj9SQovOQQj6Sl/4u
opPbZOLDfPMkQnBHHGoZfcaMQewNTdxOM/SwU/CQg3g1mzWkVDcHNUznww/oBbPq
cj3H7++LuSVUBntGFAgDhn+kWfM/7p9C9KbKk1OwcOk4QAkulwx5jP1tXr7zSnmb
vdx7r1nEWNGj02VYF5Ng4WbAEM5nyz8nMBBQSJj3wnIrF4ZEttKVMTxG+FXvr14U
NybhogPU4KZzlfRxLmUF31B3IGDyCmjEr0Ue2dHXfUH8PtfPteP/6IicJaUlIhCs
lEJf/xfgSc+i5w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:04 2025 by rpki-client on console-fra.rpki-client.org