Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
File: my5v1Q3cgXq7rFpk98ahJUaFnOI.mft (raw, json)
Hash identifier: oz/lxqg1XLK3pbwJh6IK6ZzJF+lwRnhjHmHZV6mXjMk=
Subject key identifier: 25:DE:A7:1B:D6:DD:A7:03:D5:86:01:15:F4:08:04:3C:2C:78:92:D9
Authority key identifier: 9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
Certificate issuer: /CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Certificate serial: 0194BA842BE25DD0F50A722A1E538EB50A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
Manifest number: 1220
Signing time: Fri 31 Jan 2025 04:00:11 +0000
Manifest this update: Fri 31 Jan 2025 04:00:11 +0000
Manifest next update: Sat 01 Feb 2025 04:00:11 +0000
Files and hashes: 1: jyUtfXExJkIeWPFE-JODMPcR0NE.roa (hash: IvazoNxGfM9C2jqRgwqUMFSQjgy5bfUJvRSuAgaM680=)
2: my5v1Q3cgXq7rFpk98ahJUaFnOI.crl (hash: 0UDn6q5VpeZUYJYhhXr1DcDYMEcBwT6MGSOp/mH6zhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:2b:e2:5d:d0:f5:0a:72:2a:1e:53:8e:b5:0a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Validity
Not Before: Jan 31 04:00:11 2025 GMT
Not After : Feb 1 04:00:11 2025 GMT
Subject: CN=25dea71bd6dda703d5860115f408043c2c7892d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:a5:81:6e:29:1b:69:f4:ea:e3:c2:36:52:
e5:e7:0a:59:85:84:91:ac:00:fc:60:42:41:25:fe:
2f:03:2b:33:52:52:b4:7a:a5:09:18:f0:f6:1a:f3:
a9:29:96:fb:c2:ae:32:93:36:a9:c0:a3:f1:f8:d9:
19:e4:33:24:81:8e:b5:e9:cf:f5:f0:8f:96:43:01:
26:0d:4d:fc:0e:8c:83:be:e9:0b:d5:4e:97:0d:e6:
b7:f6:e9:7a:cc:28:94:fb:23:1e:dc:68:83:e5:53:
ce:4f:e1:3c:46:41:66:d7:ff:00:53:87:48:2b:24:
ce:d6:a9:ec:3d:5a:1c:7b:04:2a:e5:0a:b6:e6:0a:
d9:3e:ac:99:60:3c:cc:76:92:e1:cc:0c:f0:a1:31:
18:d7:f9:90:5e:2a:da:48:79:03:05:bb:85:1f:12:
7e:a7:0a:98:4b:63:f1:20:fe:e0:34:f1:50:ab:e2:
fa:71:87:e4:0f:cd:6b:e1:f6:54:7b:34:6b:d7:9f:
44:98:15:c4:23:6a:5e:17:d0:4b:1b:86:5d:40:f0:
a3:12:5b:08:c5:31:33:a7:17:f1:fc:75:b2:d1:03:
b0:5b:5d:30:58:18:7b:9e:3e:72:b7:de:4e:e1:4b:
c4:21:f9:dd:87:00:75:dd:a8:22:94:ba:88:98:86:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DE:A7:1B:D6:DD:A7:03:D5:86:01:15:F4:08:04:3C:2C:78:92:D9
X509v3 Authority Key Identifier:
keyid:9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:da:1c:fe:31:e3:14:ea:31:17:52:ca:18:77:6a:5b:a0:6b:
36:3e:a7:4a:dd:e6:51:d5:56:ba:0f:55:21:ad:ce:0a:cf:d9:
3c:9e:c9:fc:8b:dd:d8:07:4a:6a:95:69:ec:32:bc:4e:6d:c0:
db:4a:4a:5e:d2:a8:5d:57:6e:47:da:a2:3d:a8:c6:17:75:84:
00:41:de:ed:88:3c:8a:95:69:6c:77:6f:eb:16:0a:41:39:a7:
84:85:0f:ad:c5:7b:f8:e6:fe:4d:b7:2c:08:28:ed:df:c6:d0:
8f:df:f8:de:ea:9c:58:92:00:75:34:1c:08:32:4f:51:c8:23:
46:12:b8:78:49:85:fd:a1:0a:85:dc:c7:2e:10:74:1b:cf:ee:
70:23:df:53:11:fa:cf:d8:a2:7e:84:54:92:d9:45:74:be:2c:
b1:76:06:b6:a5:e2:f1:84:4e:3e:51:f5:0b:05:1e:c1:a4:85:
3c:07:c4:aa:48:79:c5:89:ce:14:11:57:ee:9b:47:ad:65:8e:
f5:98:8e:dd:5a:79:46:2f:58:44:fa:8e:a3:7b:d6:8f:55:b1:
8a:0c:35:19:f8:03:10:b0:5e:ac:be:89:af:97:68:81:e0:bd:
5a:46:6b:3d:5c:3e:8e:bb:7a:ff:d1:57:91:e9:00:12:91:b9:
cd:49:08:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hCviXdD1CnIqHlOOtQo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMmU2ZmQ1MGRkYzgxN2FiYmFjNWE2NGY3YzZhMTI1NDY4
NTljZTIwHhcNMjUwMTMxMDQwMDExWhcNMjUwMjAxMDQwMDExWjAzMTEwLwYDVQQD
EygyNWRlYTcxYmQ2ZGRhNzAzZDU4NjAxMTVmNDA4MDQzYzJjNzg5MmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qylgW4pG2n06uPCNlLl5wpZhYSR
rAD8YEJBJf4vAyszUlK0eqUJGPD2GvOpKZb7wq4ykzapwKPx+NkZ5DMkgY616c/1
8I+WQwEmDU38DoyDvukL1U6XDea39ul6zCiU+yMe3GiD5VPOT+E8RkFm1/8AU4dI
KyTO1qnsPVocewQq5Qq25grZPqyZYDzMdpLhzAzwoTEY1/mQXiraSHkDBbuFHxJ+
pwqYS2PxIP7gNPFQq+L6cYfkD81r4fZUezRr159EmBXEI2peF9BLG4ZdQPCjElsI
xTEzpxfx/HWy0QOwW10wWBh7nj5yt95O4UvEIfndhwB13agilLqImIY0jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXepxvW3acD1YYBFfQIBDwseJLZMB8GA1UdIwQY
MBaAFJsub9UN3IF6u6xaZPfGoSVGhZziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXk1djFRM2NnWHE3ckZwazk4YWhKVWFGbk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zYmEyZDktNzRjZS00ODgxLWIyM2Yt
N2NiMDcyM2RhMGJkLzEvbXk1djFRM2NnWHE3ckZwazk4YWhKVWFGbk9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zYmEyZDktNzRjZS00ODgxLWIyM2YtN2NiMDcyM2RhMGJk
LzEvbXk1djFRM2NnWHE3ckZwazk4YWhKVWFGbk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNoc/jHj
FOoxF1LKGHdqW6BrNj6nSt3mUdVWug9VIa3OCs/ZPJ7J/Ivd2AdKapVp7DK8Tm3A
20pKXtKoXVduR9qiPajGF3WEAEHe7Yg8ipVpbHdv6xYKQTmnhIUPrcV7+Ob+Tbcs
CCjt38bQj9/43uqcWJIAdTQcCDJPUcgjRhK4eEmF/aEKhdzHLhB0G8/ucCPfUxH6
z9iifoRUktlFdL4ssXYGtqXi8YROPlH1CwUewaSFPAfEqkh5xYnOFBFX7ptHrWWO
9ZiO3Vp5Ri9YRPqOo3vWj1Wxigw1GfgDELBerL6Jr5dogeC9WkZrPVw+jrt6/9FX
kekAEpG5zUkIgg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:16 2025 by rpki-client on console-fra.rpki-client.org