Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
File: knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft (raw, json)
Hash identifier: DyA3kValjlYf9oCa/ji4Liae1hZiKtzp+XTIzIFORaw=
Subject key identifier: 54:4E:52:3C:08:99:E2:37:FF:AF:F4:3C:19:60:38:A8:4C:CE:C6:D9
Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096
Certificate serial: 0194BAF2793A8B04FEFFE553806FE6EB7ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 06:00:40 +0000
Manifest this update: Fri 31 Jan 2025 06:00:40 +0000
Manifest next update: Sat 01 Feb 2025 06:00:40 +0000
Files and hashes: 1: ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa (hash: Z8oFv1O8k+i1SuyJDIP9mmTPP/Uv75FEkkBOgolEt4M=)
2: knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl (hash: F7iIKKxvXbnD/TJi+0/A1cikze9ilpzvf7VkXv7rqdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:79:3a:8b:04:fe:ff:e5:53:80:6f:e6:eb:7e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096
Validity
Not Before: Jan 31 06:00:40 2025 GMT
Not After : Feb 1 06:00:40 2025 GMT
Subject: CN=544e523c0899e237ffaff43c196038a84ccec6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:eb:25:a1:45:fa:d1:82:7c:8f:c0:10:73:
11:5e:7b:03:39:16:b4:c7:21:9d:4a:f1:95:a5:a9:
8e:de:41:be:78:ee:3f:6b:2e:60:e1:f2:5c:d7:0c:
fb:2d:67:a9:bb:e3:e3:f8:49:0e:d7:8d:29:a7:37:
e2:d5:2e:8a:fa:58:97:43:8b:cd:8b:f3:1b:51:2f:
79:fd:21:66:53:fe:9f:73:b4:95:10:c5:4b:90:22:
ca:dc:de:87:0d:34:c9:9e:b3:ef:42:32:d0:9c:d4:
f5:7b:f7:b7:75:87:16:c3:19:3f:14:3b:ee:61:4a:
20:f3:4f:69:c8:9c:77:78:cb:57:2b:b2:d6:c1:e5:
f1:30:52:ca:78:63:eb:f9:83:77:18:89:a8:ad:90:
f0:f1:87:11:47:f3:c4:12:7b:85:67:1a:ab:3d:a5:
6e:58:3b:ba:f7:eb:1b:22:1c:eb:7e:b5:98:29:3b:
31:0f:03:9f:b4:9c:c9:e3:56:dc:6b:7f:6b:06:2f:
95:40:7b:dd:e8:52:73:2d:d4:59:3c:f7:f5:18:bc:
83:ad:49:ef:47:f1:9e:6d:bf:be:29:e3:02:a7:f0:
bf:8e:37:a3:9f:10:28:69:2d:38:d4:66:cc:63:b0:
e6:6c:76:e8:72:9d:f6:5f:0d:14:89:ab:77:83:d6:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4E:52:3C:08:99:E2:37:FF:AF:F4:3C:19:60:38:A8:4C:CE:C6:D9
X509v3 Authority Key Identifier:
keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9b:11:e0:13:2f:ea:44:6a:db:94:9c:7a:9d:52:f3:39:a2:
c2:73:b2:68:d3:f3:f6:f6:26:a2:31:48:19:25:40:21:c4:f5:
80:40:5a:50:03:07:51:74:32:64:3f:5b:98:94:84:1f:d5:a5:
de:b2:59:7a:bf:0a:61:5e:19:44:b8:32:98:a3:54:21:0f:c4:
08:2d:10:d9:af:80:39:92:a4:60:e1:62:2d:87:83:77:18:82:
88:e2:3b:f3:3f:d3:a0:48:71:53:1d:90:27:09:6f:de:f1:fc:
fb:b0:4e:64:95:8d:54:6c:90:3d:2b:1d:73:3f:7a:e5:6c:3e:
f7:66:1d:6f:4f:bb:9b:e0:25:53:a9:bc:d9:bc:07:1a:6c:c8:
e3:a1:8f:87:97:0b:b7:e8:75:23:24:3b:8d:2c:8f:3a:61:ec:
51:9a:d9:86:c8:11:0a:fe:26:9c:2c:76:48:3b:cf:38:5a:86:
7b:fd:06:25:06:ec:83:b4:97:8e:e2:de:9b:f7:5f:99:75:9d:
15:9b:84:99:a4:a5:f8:a7:70:d0:52:06:ac:52:74:bc:59:6d:
a6:c0:28:09:9e:59:a9:da:45:e7:1f:f3:8a:4a:7a:dd:1b:5c:
67:7e:13:37:c9:8c:63:18:30:78:4c:79:73:cc:b5:02:84:14:
42:08:a5:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68nk6iwT+/+VTgG/m637NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2IxZTU2YWM3ZDA3ODAyYzQ1NjdjNDY3OTQzNTE1OWI0
MjIwOTYwHhcNMjUwMTMxMDYwMDQwWhcNMjUwMjAxMDYwMDQwWjAzMTEwLwYDVQQD
Eyg1NDRlNTIzYzA4OTllMjM3ZmZhZmY0M2MxOTYwMzhhODRjY2VjNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt7rJaFF+tGCfI/AEHMRXnsDORa0
xyGdSvGVpamO3kG+eO4/ay5g4fJc1wz7LWepu+Pj+EkO140ppzfi1S6K+liXQ4vN
i/MbUS95/SFmU/6fc7SVEMVLkCLK3N6HDTTJnrPvQjLQnNT1e/e3dYcWwxk/FDvu
YUog809pyJx3eMtXK7LWweXxMFLKeGPr+YN3GImorZDw8YcRR/PEEnuFZxqrPaVu
WDu69+sbIhzrfrWYKTsxDwOftJzJ41bca39rBi+VQHvd6FJzLdRZPPf1GLyDrUnv
R/Gebb++KeMCp/C/jjejnxAoaS041GbMY7DmbHbocp32Xw0Uiat3g9asVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFROUjwImeI3/6/0PBlgOKhMzsbZMB8GA1UdIwQY
MBaAFJJ7HlasfQeALEVnxGeUNRWbQiCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTIt
MzY1MzQ3ZjQxNmMwLzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTItMzY1MzQ3ZjQxNmMw
LzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZsR4BMv
6kRq25Scep1S8zmiwnOyaNPz9vYmojFIGSVAIcT1gEBaUAMHUXQyZD9bmJSEH9Wl
3rJZer8KYV4ZRLgymKNUIQ/ECC0Q2a+AOZKkYOFiLYeDdxiCiOI78z/ToEhxUx2Q
Jwlv3vH8+7BOZJWNVGyQPSsdcz965Ww+92Ydb0+7m+AlU6m82bwHGmzI46GPh5cL
t+h1IyQ7jSyPOmHsUZrZhsgRCv4mnCx2SDvPOFqGe/0GJQbsg7SXjuLem/dfmXWd
FZuEmaSl+Kdw0FIGrFJ0vFltpsAoCZ5ZqdpF5x/zikp63RtcZ34TN8mMYxgweEx5
c8y1AoQUQgil7Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:15 2025 by rpki-client on console-fra.rpki-client.org