Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
File: xVoeQFH2j-i3IOg92tM7dlHLfvk.mft (raw, json)
Hash identifier: Eu7x9oQiRPfullv9poqQeJs8gWWZW35QsLTmeOXgFvk=
Subject key identifier: 10:42:6C:86:EB:FF:33:32:6D:CD:C7:6F:A9:21:00:5B:0B:A0:2F:F6
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial: 0194BABBC15D1344B2F9E6D7E818F9884028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
Manifest number: 0AAB
Signing time: Fri 31 Jan 2025 05:00:54 +0000
Manifest this update: Fri 31 Jan 2025 05:00:54 +0000
Manifest next update: Sat 01 Feb 2025 05:00:54 +0000
Files and hashes: 1: ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa (hash: GKBVpj9NFqT4kWPy6LEsdkgiDMQ6Chmhcoso+7TmqfM=)
2: xVoeQFH2j-i3IOg92tM7dlHLfvk.crl (hash: OIMGE+GimE1xLThf36Pd89ihRcn9txwzUgfob0y/gD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c1:5d:13:44:b2:f9:e6:d7:e8:18:f9:88:40:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Validity
Not Before: Jan 31 05:00:54 2025 GMT
Not After : Feb 1 05:00:54 2025 GMT
Subject: CN=10426c86ebff33326dcdc76fa921005b0ba02ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:96:ed:1d:91:be:1c:65:5d:69:2a:b8:66:
5d:96:3e:60:09:57:07:c2:8b:44:dd:e1:2c:62:0f:
2d:e4:e0:33:5b:e9:8f:67:a9:cc:c7:c6:31:ad:88:
bb:ac:d9:a7:c3:9f:d1:04:9e:48:52:ea:d8:4f:0e:
9c:ba:4d:2a:66:b9:8d:4d:0d:6c:54:ff:a2:b1:5c:
b0:cc:83:00:aa:3a:62:58:9b:f9:e6:dc:8c:56:b3:
0b:66:04:be:aa:3f:86:c8:73:51:ca:05:57:b9:10:
4f:2c:11:25:fc:0c:3e:21:9a:89:be:c0:6e:a6:4c:
87:20:53:11:df:db:97:97:c0:38:4e:b1:c5:11:b7:
e2:02:57:66:65:c7:ab:3e:75:9b:a4:a8:f9:6d:15:
75:d8:34:c5:fb:fd:82:68:9b:fa:71:64:7c:36:e2:
b6:8b:63:5d:3d:27:17:fc:4a:6c:45:75:22:f4:dc:
5c:f7:f6:8c:16:ab:4d:be:31:c4:1d:34:b2:85:ae:
b4:74:cd:4b:09:b9:5a:60:e0:77:69:83:93:20:a4:
73:a6:2d:88:85:f2:76:69:96:ad:a5:2f:ab:58:f9:
00:45:2c:b2:2d:d2:47:b2:aa:b6:2a:a2:20:d5:02:
b5:00:be:c5:2e:38:7b:ad:c5:08:a8:4a:73:2c:24:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:6C:86:EB:FF:33:32:6D:CD:C7:6F:A9:21:00:5B:0B:A0:2F:F6
X509v3 Authority Key Identifier:
keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c5:3f:b8:6b:3e:06:fe:8d:b5:75:40:ca:b8:74:3d:50:4c:
f0:db:70:88:a5:57:d3:e8:9d:ce:54:14:23:14:30:ee:08:7f:
4f:95:de:5c:b3:5c:39:0d:90:08:1c:94:15:c4:10:c1:c4:06:
7c:44:b3:43:8c:39:75:71:1c:55:05:25:4f:11:a2:77:0d:8c:
24:a6:bf:1e:71:e2:bf:c5:00:71:eb:9b:28:84:bf:34:54:9f:
3a:ef:38:fd:6e:d7:a1:c5:b9:8b:4e:a2:a6:7b:23:d9:0c:f4:
ad:b8:e1:0e:0d:1f:74:50:8d:4c:e1:a3:ff:1b:a8:dc:f0:cc:
ce:16:c5:ba:fe:5e:b7:7c:8e:31:03:c1:de:d0:ff:8a:3f:f4:
3e:e8:01:25:d3:3e:c5:99:80:4a:d6:1b:a6:fa:90:66:a5:71:
24:0f:10:87:7c:96:ae:ac:89:dc:89:29:bc:aa:f0:e3:a3:26:
fb:ec:89:6c:91:ee:76:16:68:0a:bd:d7:a0:e7:6b:7d:12:8d:
37:19:08:2c:f1:74:82:aa:03:86:ad:ac:99:3a:44:90:3e:78:
ef:17:1a:9f:8d:ac:d4:66:bd:77:55:c5:0d:ce:d5:78:aa:e7:
82:09:cc:e4:26:55:67:a2:7d:6d:dc:c9:bf:61:a3:47:be:c1:
8f:f4:80:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u8FdE0Sy+ebX6Bj5iEAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NWExZTQwNTFmNjhmZThiNzIwZTgzZGRhZDMzYjc2NTFj
YjdlZjkwHhcNMjUwMTMxMDUwMDU0WhcNMjUwMjAxMDUwMDU0WjAzMTEwLwYDVQQD
EygxMDQyNmM4NmViZmYzMzMyNmRjZGM3NmZhOTIxMDA1YjBiYTAyZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxISW7R2RvhxlXWkquGZdlj5gCVcH
wotE3eEsYg8t5OAzW+mPZ6nMx8YxrYi7rNmnw5/RBJ5IUurYTw6cuk0qZrmNTQ1s
VP+isVywzIMAqjpiWJv55tyMVrMLZgS+qj+GyHNRygVXuRBPLBEl/Aw+IZqJvsBu
pkyHIFMR39uXl8A4TrHFEbfiAldmZcerPnWbpKj5bRV12DTF+/2CaJv6cWR8NuK2
i2NdPScX/EpsRXUi9Nxc9/aMFqtNvjHEHTSyha60dM1LCblaYOB3aYOTIKRzpi2I
hfJ2aZatpS+rWPkARSyyLdJHsqq2KqIg1QK1AL7FLjh7rcUIqEpzLCQUbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBCbIbr/zMybc3Hb6khAFsLoC/2MB8GA1UdIwQY
MBaAFMVaHkBR9o/otyDoPdrTO3ZRy375MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYt
MDNkYTdlNzRkY2FkLzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYtMDNkYTdlNzRkY2Fk
LzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMU/uGs+
Bv6NtXVAyrh0PVBM8NtwiKVX0+idzlQUIxQw7gh/T5XeXLNcOQ2QCByUFcQQwcQG
fESzQ4w5dXEcVQUlTxGidw2MJKa/HnHiv8UAceubKIS/NFSfOu84/W7XocW5i06i
pnsj2Qz0rbjhDg0fdFCNTOGj/xuo3PDMzhbFuv5et3yOMQPB3tD/ij/0PugBJdM+
xZmAStYbpvqQZqVxJA8Qh3yWrqyJ3IkpvKrw46Mm++yJbJHudhZoCr3XoOdrfRKN
NxkILPF0gqoDhq2smTpEkD547xcan42s1Ga9d1XFDc7VeKrnggnM5CZVZ6J9bdzJ
v2GjR77Bj/SAlg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:30 2025 by rpki-client on console-fra.rpki-client.org