Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
File: ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json)
Hash identifier: KgtTdwdv0LMwBxViiy+V+KbIghalNV/l9E6UZR/gHuI=
Subject key identifier: 31:6F:A0:57:45:62:81:0A:C9:E8:60:AD:6A:DB:01:8F:AB:B8:37:3C
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial: 0194BB604596524AE1D8B25E3A7DF3371146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 08:00:35 +0000
Manifest this update: Fri 31 Jan 2025 08:00:35 +0000
Manifest next update: Sat 01 Feb 2025 08:00:35 +0000
Files and hashes: 1: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: dnEeJEhdUgYVUie0PPBp+KaQeYuNCuuBJAGgLrsnGwQ=)
2: SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa (hash: WHZNVk5rkxUgRKY5cx0WN0Gw305ahmbGMR8jfHweazo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:45:96:52:4a:e1:d8:b2:5e:3a:7d:f3:37:11:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Validity
Not Before: Jan 31 08:00:35 2025 GMT
Not After : Feb 1 08:00:35 2025 GMT
Subject: CN=316fa0574562810ac9e860ad6adb018fabb8373c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:2b:03:39:39:8a:c7:01:05:89:41:6d:59:
f8:e6:3d:89:67:19:8f:aa:ed:5e:97:9a:41:11:8e:
1e:f1:20:8e:81:01:0d:e5:93:b4:16:14:e5:86:04:
25:c9:a6:af:cc:1c:5c:5f:69:56:e6:cb:76:6a:9c:
24:d3:ae:ab:27:90:0b:0b:dd:e4:02:01:19:5d:8f:
5f:8f:e0:9a:62:ac:93:a0:ca:fb:8d:aa:c0:cc:43:
08:8f:22:b3:31:ec:b1:3d:2a:9b:01:ce:4f:3b:e6:
7d:c5:9e:8f:2f:4b:22:e0:7e:0d:9c:03:a7:29:0f:
5f:03:f9:6b:ed:f8:c4:2c:03:9a:eb:32:07:63:a6:
65:19:e1:c9:06:af:80:aa:c9:15:65:97:9a:03:72:
cf:06:b1:13:09:31:45:4f:0f:de:46:6d:69:4e:c8:
f1:8f:44:45:4f:04:ae:be:3c:91:90:d0:56:bd:01:
34:91:e7:71:1c:15:ae:aa:bf:07:26:e5:38:39:c3:
1d:3f:7f:5c:e1:cc:2c:8b:49:7f:75:ad:48:52:00:
a9:8b:9f:2b:5d:32:24:f9:fd:8f:bc:9c:bc:25:e1:
7c:48:29:d1:6d:a6:0b:3c:fa:a8:4a:4c:c9:82:32:
2b:70:3a:98:7f:01:35:4d:f8:27:07:a9:95:49:5f:
b2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6F:A0:57:45:62:81:0A:C9:E8:60:AD:6A:DB:01:8F:AB:B8:37:3C
X509v3 Authority Key Identifier:
keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b8:13:7e:38:0c:0a:55:e1:84:39:5b:83:a9:9c:d7:3d:95:
a2:39:ac:d2:fa:2b:9c:a8:76:5f:d9:c2:bc:17:03:2f:3e:9b:
79:c6:07:b0:26:29:ec:56:e0:1b:96:e3:3f:04:fa:a8:66:51:
55:b6:a2:90:df:77:44:5e:79:be:84:a5:75:84:91:db:57:9e:
29:0c:4d:fa:62:58:77:ba:8d:99:95:85:ec:30:aa:8f:2c:35:
5f:96:a2:6c:7c:bb:4c:a0:47:2a:fc:05:1b:18:de:20:b9:eb:
87:e8:35:59:bc:95:4e:6d:f7:a3:23:5b:1f:2e:47:61:59:bb:
9b:84:b1:30:3e:f1:92:e1:99:8c:ca:03:8e:7c:15:a5:36:f0:
ee:e9:7b:49:4e:07:e1:11:91:87:e3:1d:ec:79:0c:ea:1e:34:
de:68:85:69:70:9a:be:dd:45:fa:cf:21:bb:9f:74:85:01:3e:
94:12:24:cc:43:23:f3:f2:df:12:35:c6:b2:d6:17:3e:bb:c2:
35:cc:dc:fc:0c:5b:c0:4b:8e:8c:21:56:44:f6:fd:fc:04:74:
ed:df:30:e1:8d:2c:f7:36:ec:6c:7a:a3:37:5b:be:39:a0:25:
71:76:8a:41:fc:57:3b:25:21:75:07:9c:54:c3:5f:a0:0c:3b:
46:a5:f3:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YEWWUkrh2LJeOn3zNxFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWQ4OTU0OTJlZDRiNjlkNWFhNmVkYTVmNzAyZmU3NjNh
MjdiYTAwHhcNMjUwMTMxMDgwMDM1WhcNMjUwMjAxMDgwMDM1WjAzMTEwLwYDVQQD
EygzMTZmYTA1NzQ1NjI4MTBhYzllODYwYWQ2YWRiMDE4ZmFiYjgzNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqUrAzk5iscBBYlBbVn45j2JZxmP
qu1el5pBEY4e8SCOgQEN5ZO0FhTlhgQlyaavzBxcX2lW5st2apwk066rJ5ALC93k
AgEZXY9fj+CaYqyToMr7jarAzEMIjyKzMeyxPSqbAc5PO+Z9xZ6PL0si4H4NnAOn
KQ9fA/lr7fjELAOa6zIHY6ZlGeHJBq+AqskVZZeaA3LPBrETCTFFTw/eRm1pTsjx
j0RFTwSuvjyRkNBWvQE0kedxHBWuqr8HJuU4OcMdP39c4cwsi0l/da1IUgCpi58r
XTIk+f2PvJy8JeF8SCnRbaYLPPqoSkzJgjIrcDqYfwE1TfgnB6mVSV+yeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFvoFdFYoEKyehgrWrbAY+ruDc8MB8GA1UdIwQY
MBaAFBEdiVSS7Utp1apu2l9wL+djonugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84MGQxY2MtNDUzZi00MmUzLTlmZDQt
ODdiZWNmNzRkNTY0LzEvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84MGQxY2MtNDUzZi00MmUzLTlmZDQtODdiZWNmNzRkNTY0
LzEvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILgTfjgM
ClXhhDlbg6mc1z2Vojms0vornKh2X9nCvBcDLz6becYHsCYp7FbgG5bjPwT6qGZR
VbaikN93RF55voSldYSR21eeKQxN+mJYd7qNmZWF7DCqjyw1X5aibHy7TKBHKvwF
GxjeILnrh+g1WbyVTm33oyNbHy5HYVm7m4SxMD7xkuGZjMoDjnwVpTbw7ul7SU4H
4RGRh+Md7HkM6h403miFaXCavt1F+s8hu590hQE+lBIkzEMj8/LfEjXGstYXPrvC
Nczc/AxbwEuOjCFWRPb9/AR07d8w4Y0s9zbsbHqjN1u+OaAlcXaKQfxXOyUhdQec
VMNfoAw7RqXzkw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:04 2025 by rpki-client on console-fra.rpki-client.org