Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
File: r2Okes26jsHNhdTXnzazW2mOX4k.mft (raw, json)
Hash identifier: zKzTBTz9JduBJNQLnNay6U5Tx0dKMbdZafmtSjhpIxo=
Subject key identifier: 1B:98:2C:51:E4:9C:E6:46:DB:CF:16:EF:43:73:79:DB:96:E2:3D:8C
Authority key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
Certificate issuer: /CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Certificate serial: 0194BAF26A76BD77200E907FA80572A6F069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 06:00:36 +0000
Manifest this update: Fri 31 Jan 2025 06:00:36 +0000
Manifest next update: Sat 01 Feb 2025 06:00:36 +0000
Files and hashes: 1: YXk4VQ9w2ydeFfWUpTPAL38DI14.roa (hash: 63k2DxSPaDP/x2Jl3oeCNKnb4PXDg6/RYTgk7tLrZPw=)
2: r2Okes26jsHNhdTXnzazW2mOX4k.crl (hash: P+vM339EIfymoKfgUmhp7oWnb+tdSLrAR6aCIWppL34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:6a:76:bd:77:20:0e:90:7f:a8:05:72:a6:f0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Validity
Not Before: Jan 31 06:00:36 2025 GMT
Not After : Feb 1 06:00:36 2025 GMT
Subject: CN=1b982c51e49ce646dbcf16ef437379db96e23d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:37:ab:30:b1:86:6c:9f:bc:fa:1f:3e:25:
23:4b:38:27:67:40:41:52:b6:92:82:64:29:13:2f:
3d:c7:30:7b:e1:d1:fb:f5:aa:9e:8c:eb:e5:22:48:
c5:af:4f:29:34:58:ff:85:c8:38:01:1d:dc:65:ba:
2c:c3:b6:46:0d:2f:36:c3:d6:a1:2c:b9:23:1d:f0:
ac:f1:5d:35:67:c6:99:c5:96:c3:56:14:5b:db:03:
ca:e9:19:ed:59:d7:5a:01:fe:90:0b:0b:60:b6:cf:
0c:6b:53:94:cb:07:4b:ce:31:59:94:e0:e6:77:84:
fd:56:d6:97:ff:be:bf:ca:48:1c:ad:65:06:5c:f5:
f0:ec:2b:28:fe:69:8f:16:1f:55:85:9d:57:86:b3:
4a:4b:e1:b3:ba:a5:d3:b1:14:9e:de:c1:78:80:55:
d2:89:3e:61:56:b9:55:c7:fc:ab:f3:e1:1a:ab:5a:
fa:f9:4d:4a:d1:db:21:4b:fa:19:ca:0d:41:5b:6f:
28:84:0e:5d:ff:d8:3d:25:62:04:34:2b:c6:e9:c1:
0f:f6:dc:e2:f1:fd:f6:8b:2a:ad:ae:cb:60:b4:57:
33:99:0a:f4:b7:58:44:9c:b3:08:41:3a:b3:f9:cc:
c0:a8:0c:92:12:eb:f0:b0:f7:b6:cd:ba:c9:11:b6:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:98:2C:51:E4:9C:E6:46:DB:CF:16:EF:43:73:79:DB:96:E2:3D:8C
X509v3 Authority Key Identifier:
keyid:AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:01:f7:f7:ea:6a:d3:c3:b5:ce:a4:10:2c:fa:2c:33:28:ba:
ab:b0:14:cb:98:47:c3:35:46:01:ee:fc:f3:0d:91:fc:9b:82:
08:47:3d:f7:6f:a2:84:01:88:a3:00:63:7e:e5:09:6e:bf:31:
1b:d1:03:6f:f6:a6:84:25:5b:72:e0:fc:71:67:2c:f3:c9:68:
ef:eb:81:62:61:35:ca:d8:49:bf:36:05:f0:19:54:3b:c4:ff:
dc:d6:6b:a3:c5:2b:b6:53:c4:99:61:84:b6:35:1b:ec:88:03:
a6:ac:a8:72:45:6e:58:18:a0:ff:cf:e2:69:9f:70:30:39:3a:
16:bd:8b:5c:25:5f:bb:64:43:2c:39:33:e7:ec:51:1c:38:8b:
4b:4d:2c:92:10:2f:d3:b5:19:29:d3:df:31:8b:b6:2e:ad:5e:
1a:4b:77:3d:b6:a6:7d:4b:c6:36:8b:59:d4:3d:43:fd:72:ee:
c8:0f:fa:57:3d:1f:38:67:cd:a7:ad:1d:b0:43:36:bb:59:fc:
6f:14:d9:51:05:dd:73:bc:b8:7f:7c:ad:e3:73:d5:e0:17:30:
0d:62:8f:40:0e:47:dc:4e:77:3f:67:0b:e8:91:29:84:ac:71:
1c:10:a6:d3:53:23:b6:9a:69:e4:e2:ec:1d:15:91:5c:6a:cf:
fc:ee:ed:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68mp2vXcgDpB/qAVypvBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNjNhNDdhY2RiYThlYzFjZDg1ZDRkNzlmMzZiMzViNjk4
ZTVmODkwHhcNMjUwMTMxMDYwMDM2WhcNMjUwMjAxMDYwMDM2WjAzMTEwLwYDVQQD
EygxYjk4MmM1MWU0OWNlNjQ2ZGJjZjE2ZWY0MzczNzlkYjk2ZTIzZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6Y3qzCxhmyfvPofPiUjSzgnZ0BB
UraSgmQpEy89xzB74dH79aqejOvlIkjFr08pNFj/hcg4AR3cZbosw7ZGDS82w9ah
LLkjHfCs8V01Z8aZxZbDVhRb2wPK6RntWddaAf6QCwtgts8Ma1OUywdLzjFZlODm
d4T9VtaX/76/ykgcrWUGXPXw7Cso/mmPFh9VhZ1XhrNKS+GzuqXTsRSe3sF4gFXS
iT5hVrlVx/yr8+Eaq1r6+U1K0dshS/oZyg1BW28ohA5d/9g9JWIENCvG6cEP9tzi
8f32iyqtrstgtFczmQr0t1hEnLMIQTqz+czAqAySEuvwsPe2zbrJEbbqqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuYLFHknOZG288W70NzeduW4j2MMB8GA1UdIwQY
MBaAFK9jpHrNuo7BzYXU1582s1tpjl+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jNGQ3YjAtNmViZi00Y2FjLWE4YWQt
ZmUzZTMxOGNhZTljLzEvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jNGQ3YjAtNmViZi00Y2FjLWE4YWQtZmUzZTMxOGNhZTlj
LzEvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQH39+pq
08O1zqQQLPosMyi6q7AUy5hHwzVGAe788w2R/JuCCEc992+ihAGIowBjfuUJbr8x
G9EDb/amhCVbcuD8cWcs88lo7+uBYmE1ythJvzYF8BlUO8T/3NZro8UrtlPEmWGE
tjUb7IgDpqyockVuWBig/8/iaZ9wMDk6Fr2LXCVfu2RDLDkz5+xRHDiLS00skhAv
07UZKdPfMYu2Lq1eGkt3PbamfUvGNotZ1D1D/XLuyA/6Vz0fOGfNp60dsEM2u1n8
bxTZUQXdc7y4f3yt43PV4BcwDWKPQA5H3E53P2cL6JEphKxxHBCm01Mjtppp5OLs
HRWRXGrP/O7tKA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:26 2025 by rpki-client on console-fra.rpki-client.org