Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File: vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier: 2mQpGw1RKsXQSZLoDAre/I0eUdKdlPijNL6V4AwIXWs=
Subject key identifier: 6E:F3:7F:40:5E:0A:D1:E6:0B:B8:F1:DD:5D:FE:4E:9A:81:C9:8E:F2
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial: 0194BB5FD83919D7425D858CB3E8E885024E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 08:00:08 +0000
Manifest this update: Fri 31 Jan 2025 08:00:08 +0000
Manifest next update: Sat 01 Feb 2025 08:00:08 +0000
Files and hashes: 1: bxyMDkypoYoPE36odgLUanwOaLY.roa (hash: /Tdt2l601ImlNiIyf1pfayzYn4s0xCETamIww0AgaGc=)
2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: 1hWGNMFd+kvYBT94SZ1UUdhRn+/7r5eGc/lL+0e2Jag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:d8:39:19:d7:42:5d:85:8c:b3:e8:e8:85:02:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
Validity
Not Before: Jan 31 08:00:08 2025 GMT
Not After : Feb 1 08:00:08 2025 GMT
Subject: CN=6ef37f405e0ad1e60bb8f1dd5dfe4e9a81c98ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:ab:40:71:11:43:f0:9f:84:3e:80:21:df:
11:d4:a7:55:00:05:f7:b2:f4:4b:e5:e2:e9:39:ef:
48:a0:a2:a8:f9:0f:f3:b3:39:0b:c2:0f:7e:58:b0:
ee:0c:16:e6:39:eb:c1:21:e8:62:e6:d3:45:47:b1:
fc:b3:e4:51:60:5d:99:3c:44:e3:b2:b0:47:bb:ed:
94:e1:76:13:7c:c9:73:5d:bd:df:43:a6:67:7a:24:
1a:2c:13:b7:a6:a9:be:13:a0:ba:a5:f3:8e:0e:d9:
9a:50:f8:40:65:8a:ad:d9:8b:2d:c9:94:f8:e1:b8:
93:e2:f6:50:3e:15:4c:69:b5:04:b3:ea:b4:6c:bd:
9b:2d:2d:f7:e9:8b:16:ac:b6:f1:33:70:64:62:c4:
d6:2e:af:1d:75:71:5d:3f:e3:ad:43:16:8c:f5:36:
3d:04:9a:71:72:5a:a1:74:01:c8:67:e6:7f:16:2c:
b2:97:37:79:a0:36:a2:c4:db:21:5e:16:48:45:83:
e7:f6:cd:29:3a:2b:9d:f1:73:d2:fc:a1:3d:f3:d1:
0a:a3:e5:00:8b:a5:95:47:5f:90:14:7d:a8:84:d4:
6b:3d:86:e9:f5:23:16:3e:1d:3e:86:74:6e:61:33:
25:16:98:ec:8e:4d:36:7c:67:c1:95:03:a3:b0:0e:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F3:7F:40:5E:0A:D1:E6:0B:B8:F1:DD:5D:FE:4E:9A:81:C9:8E:F2
X509v3 Authority Key Identifier:
keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:24:d9:82:3d:b4:c6:69:23:4b:55:f1:ab:9a:4d:1c:d3:01:
be:d6:2f:40:80:b7:b7:a2:0a:e6:ef:f9:6c:fa:62:82:43:59:
81:ae:d8:de:fb:a9:e0:02:42:74:cf:56:19:6b:33:91:40:5b:
db:15:e9:cd:2b:7b:5d:32:30:f1:ac:06:cb:7b:44:be:4d:2c:
13:d2:9b:1c:76:79:09:51:05:60:30:f0:16:d2:35:a5:1c:a3:
93:f3:f2:1f:e1:47:da:3e:b9:21:fa:92:7a:fd:3f:43:1d:a3:
ae:6e:7d:b2:86:d7:d4:b0:cb:67:78:69:e1:66:26:1a:d0:3b:
b2:e8:6f:3f:80:cc:f2:5c:0e:d0:0a:6f:ca:ac:97:f1:b1:e8:
5a:fd:87:33:59:c2:aa:99:ed:33:da:e6:91:dd:0e:f2:51:1c:
7c:bc:3b:66:79:22:56:c0:85:74:2d:17:61:b7:a2:46:88:f2:
5f:78:cf:73:b1:93:b6:0b:5b:1d:68:b6:18:31:83:e4:03:f8:
69:50:4f:35:d8:c2:ca:05:81:90:2a:36:53:07:aa:87:16:51:
1f:a7:a4:7d:b0:33:a5:d8:3a:5a:a5:3a:6d:32:5d:67:58:ba:
59:f4:6e:3d:c4:d7:c6:4a:40:61:9a:9b:57:07:6a:db:0e:49:
da:28:90:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X9g5GddCXYWMs+johQJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTI3MWYwZTE1ODdjMTQ0MzRmMjQ4MGY5MTQxMDE4NTUw
N2NmYTEwHhcNMjUwMTMxMDgwMDA4WhcNMjUwMjAxMDgwMDA4WjAzMTEwLwYDVQQD
Eyg2ZWYzN2Y0MDVlMGFkMWU2MGJiOGYxZGQ1ZGZlNGU5YTgxYzk4ZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpGrQHERQ/CfhD6AId8R1KdVAAX3
svRL5eLpOe9IoKKo+Q/zszkLwg9+WLDuDBbmOevBIehi5tNFR7H8s+RRYF2ZPETj
srBHu+2U4XYTfMlzXb3fQ6ZneiQaLBO3pqm+E6C6pfOODtmaUPhAZYqt2YstyZT4
4biT4vZQPhVMabUEs+q0bL2bLS336YsWrLbxM3BkYsTWLq8ddXFdP+OtQxaM9TY9
BJpxclqhdAHIZ+Z/Fiyylzd5oDaixNshXhZIRYPn9s0pOiud8XPS/KE989EKo+UA
i6WVR1+QFH2ohNRrPYbp9SMWPh0+hnRuYTMlFpjsjk02fGfBlQOjsA7x4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7zf0BeCtHmC7jx3V3+TpqByY7yMB8GA1UdIwQY
MBaAFL5ScfDhWHwUQ08kgPkUEBhVB8+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEt
NGQ2ZDEyNTZiZjliLzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEtNGQ2ZDEyNTZiZjli
LzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSTZgj20
xmkjS1Xxq5pNHNMBvtYvQIC3t6IK5u/5bPpigkNZga7Y3vup4AJCdM9WGWszkUBb
2xXpzSt7XTIw8awGy3tEvk0sE9KbHHZ5CVEFYDDwFtI1pRyjk/PyH+FH2j65IfqS
ev0/Qx2jrm59sobX1LDLZ3hp4WYmGtA7suhvP4DM8lwO0ApvyqyX8bHoWv2HM1nC
qpntM9rmkd0O8lEcfLw7ZnkiVsCFdC0XYbeiRojyX3jPc7GTtgtbHWi2GDGD5AP4
aVBPNdjCygWBkCo2UweqhxZRH6ekfbAzpdg6WqU6bTJdZ1i6WfRuPcTXxkpAYZqb
Vwdq2w5J2iiQkw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:03 2025 by rpki-client on console-fra.rpki-client.org