Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File: vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier: 16c2xJuRsXvAMBGyevd50AEfkdysH1w0YyF8F6HjB78=
Subject key identifier: CD:4A:49:2B:0F:58:34:63:91:87:F4:E8:4F:DA:9D:01:15:5E:C0:0C
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer: /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial: 0194BB602186303BDB6251B1BD1E4447ADD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number: 1270
Signing time: Fri 31 Jan 2025 08:00:26 +0000
Manifest this update: Fri 31 Jan 2025 08:00:26 +0000
Manifest next update: Sat 01 Feb 2025 08:00:26 +0000
Files and hashes: 1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=)
2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: mxfjCD4dhuWZLafeNsTkROuLGH55kK9AS2QFF9+8Yig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:21:86:30:3b:db:62:51:b1:bd:1e:44:47:ad:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Validity
Not Before: Jan 31 08:00:26 2025 GMT
Not After : Feb 1 08:00:26 2025 GMT
Subject: CN=cd4a492b0f5834639187f4e84fda9d01155ec00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:a5:8e:fa:a3:81:cc:72:c8:76:df:54:81:
44:68:d8:f6:4c:6c:96:cd:94:2c:9d:9c:14:f8:78:
5f:ab:6e:de:5f:62:5b:f8:a1:2f:04:14:83:ca:2d:
57:c1:dd:26:ca:f2:a2:4e:98:f9:a8:93:cc:74:93:
32:91:ce:fd:d0:2e:90:be:82:ea:bc:95:d7:6a:8f:
37:8b:ff:49:bb:62:d9:e1:7e:05:fd:09:d7:8a:f8:
e4:78:1d:e9:58:17:68:46:50:39:6c:61:1b:9b:2d:
0d:41:db:4d:fb:44:12:db:35:c3:e3:95:b7:b1:6a:
6d:de:4b:a1:21:4d:fd:40:d3:19:9e:b3:97:52:0f:
4e:93:f9:76:a6:63:0e:52:b0:b2:fa:ec:0a:34:cf:
ad:09:04:2c:88:88:1a:cd:77:72:3a:dd:f7:17:b9:
df:29:13:90:24:a1:d5:81:73:e4:02:07:33:0f:e2:
7d:23:10:b1:3c:d6:39:7e:1b:11:c2:05:2d:49:8e:
af:17:6c:61:0a:86:60:2d:99:3c:42:96:83:4c:7a:
ac:2f:14:6a:4a:5e:ab:b2:3a:a2:11:98:f1:46:82:
84:a5:ab:dd:37:86:db:89:83:fd:bf:9f:09:07:1f:
21:93:44:e0:be:23:5d:f8:16:52:e2:f5:81:b4:a2:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4A:49:2B:0F:58:34:63:91:87:F4:E8:4F:DA:9D:01:15:5E:C0:0C
X509v3 Authority Key Identifier:
keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:43:bf:b8:d0:fe:aa:29:ab:fb:38:57:d8:ab:b3:37:e5:b7:
0b:80:05:18:80:c4:ef:64:13:be:51:03:5e:57:dc:cf:7f:32:
5b:69:6d:0d:f6:ef:80:e1:2e:31:be:76:57:89:99:c6:28:8d:
cd:08:a2:73:95:44:9c:94:ca:d4:75:d4:d8:e1:4e:3d:20:8d:
10:7b:16:b6:88:81:2c:f2:8a:b7:d4:a1:95:1d:58:48:30:22:
f4:61:50:12:c5:7d:56:72:11:b1:95:a8:4a:89:c6:f5:f8:b8:
a0:7b:02:bd:6f:52:3e:58:d0:02:88:51:a0:c8:07:ae:ee:fb:
ae:64:4b:af:44:07:e6:ac:23:25:97:21:c5:3c:d7:b7:d6:78:
a6:e9:67:11:1e:c7:e0:71:69:01:b7:98:2d:01:b7:61:f9:1d:
40:9c:b2:e2:b7:8e:93:d6:94:ce:82:8a:a5:84:e3:13:15:88:
13:50:c0:68:45:24:61:72:08:f2:06:76:5f:ed:e7:3b:0d:84:
16:dc:89:43:75:31:46:9f:f4:53:d2:20:61:f8:f7:40:48:13:
2a:54:f0:4a:fe:c0:66:78:11:72:a2:f4:8e:45:b4:97:b8:33:
4d:80:24:36:ee:67:d0:9e:29:80:ee:77:f5:32:ab:8b:d6:73:
03:67:3f:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YCGGMDvbYlGxvR5ER63WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYzdlNjc0NjY1NDQwZjZlNmI4MGU2ZmYxNTVhYWQ2YTg5
Y2IzZjIwHhcNMjUwMTMxMDgwMDI2WhcNMjUwMjAxMDgwMDI2WjAzMTEwLwYDVQQD
EyhjZDRhNDkyYjBmNTgzNDYzOTE4N2Y0ZTg0ZmRhOWQwMTE1NWVjMDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyOljvqjgcxyyHbfVIFEaNj2TGyW
zZQsnZwU+Hhfq27eX2Jb+KEvBBSDyi1Xwd0myvKiTpj5qJPMdJMykc790C6QvoLq
vJXXao83i/9Ju2LZ4X4F/QnXivjkeB3pWBdoRlA5bGEbmy0NQdtN+0QS2zXD45W3
sWpt3kuhIU39QNMZnrOXUg9Ok/l2pmMOUrCy+uwKNM+tCQQsiIgazXdyOt33F7nf
KROQJKHVgXPkAgczD+J9IxCxPNY5fhsRwgUtSY6vF2xhCoZgLZk8QpaDTHqsLxRq
Sl6rsjqiEZjxRoKEpavdN4bbiYP9v58JBx8hk0TgviNd+BZS4vWBtKJ7tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1KSSsPWDRjkYf06E/anQEVXsAMMB8GA1UdIwQY
MBaAFLzH5nRmVED25rgOb/FVqtaonLPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk1mbWRHWlVRUGJtdUE1djhWV3ExcWljc19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wOGJiOTItNmYwMC00ZTVjLTkyNGEt
ZWY2Y2NlMTQ1ZDgyLzEvdk1mbWRHWlVRUGJtdUE1djhWV3ExcWljc19JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wOGJiOTItNmYwMC00ZTVjLTkyNGEtZWY2Y2NlMTQ1ZDgy
LzEvdk1mbWRHWlVRUGJtdUE1djhWV3ExcWljc19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0O/uND+
qimr+zhX2KuzN+W3C4AFGIDE72QTvlEDXlfcz38yW2ltDfbvgOEuMb52V4mZxiiN
zQiic5VEnJTK1HXU2OFOPSCNEHsWtoiBLPKKt9ShlR1YSDAi9GFQEsV9VnIRsZWo
SonG9fi4oHsCvW9SPljQAohRoMgHru77rmRLr0QH5qwjJZchxTzXt9Z4pulnER7H
4HFpAbeYLQG3YfkdQJyy4reOk9aUzoKKpYTjExWIE1DAaEUkYXII8gZ2X+3nOw2E
FtyJQ3UxRp/0U9IgYfj3QEgTKlTwSv7AZngRcqL0jkW0l7gzTYAkNu5n0J4pgO53
9TKri9ZzA2c/HA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:44 2025 by rpki-client on console-fra.rpki-client.org