Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
File: aXJqlhM2--eCCz10joEvSVyHLTU.mft (raw, json)
Hash identifier: ohwdM0wMuASUVS+F2Zj90bhj0WjTYc7TLYRTRSUwbtA=
Subject key identifier: 9C:9D:8D:B3:8C:8B:6C:9E:26:41:E7:47:5D:D9:7B:F3:14:F8:DE:1F
Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35
Certificate serial: 0194BB293BD01123DBAADE98CAA28BCEFED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
Manifest number: 0C19
Signing time: Fri 31 Jan 2025 07:00:29 +0000
Manifest this update: Fri 31 Jan 2025 07:00:29 +0000
Manifest next update: Sat 01 Feb 2025 07:00:29 +0000
Files and hashes: 1: TPjf70pa6qBZmpfYB0iX9CcL4Y4.roa (hash: swAbvLbVBmlLATlL/hX7o87L+INYtKkOcONzc8lraTI=)
2: aXJqlhM2--eCCz10joEvSVyHLTU.crl (hash: Q5pbzWXemPE7BhrF7lImtKAnl/QPLw9oVxe7zzzKHSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:3b:d0:11:23:db:aa:de:98:ca:a2:8b:ce:fe:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35
Validity
Not Before: Jan 31 07:00:29 2025 GMT
Not After : Feb 1 07:00:29 2025 GMT
Subject: CN=9c9d8db38c8b6c9e2641e7475dd97bf314f8de1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:63:96:48:d6:15:c4:df:c6:53:c2:ff:79:
fb:c8:d5:f4:70:38:92:74:55:c3:6b:56:b5:d5:8c:
0e:bb:7a:2e:23:09:51:61:c2:7d:c5:da:1c:9c:d4:
53:dc:f9:c8:10:d4:60:2b:8f:1f:5f:90:3a:65:27:
ee:d7:60:d5:78:5c:5c:b6:b1:78:26:4b:e9:8b:a4:
fc:f0:fd:76:c6:dc:ee:47:c8:8d:92:8b:9a:e5:41:
7a:39:89:14:53:72:d3:51:f6:b6:a6:de:c3:ef:b2:
df:65:c8:5a:84:fe:53:b2:0c:75:b4:ef:a8:9f:1d:
e8:7a:c6:a1:49:d8:c1:3c:70:e0:93:cf:62:4d:bd:
19:e3:ea:e3:c6:19:9a:71:3c:e3:38:ce:a8:c8:5d:
35:29:4d:52:6a:9c:64:dd:7f:eb:65:5a:ac:4e:bd:
57:67:78:da:52:b8:9d:e8:f8:50:2b:5c:3a:c6:af:
55:c8:a9:94:ea:14:b5:19:23:d3:64:3f:83:75:1c:
00:5c:6e:c4:d9:e9:02:ff:d5:0a:82:fd:8c:67:83:
39:8a:c3:e7:b8:07:d5:d7:bb:62:bc:a4:e4:ba:82:
4a:4f:c4:b8:67:ec:99:ea:ab:67:1e:4c:5c:86:57:
cd:5a:05:24:52:a3:45:4e:6a:25:33:de:38:c2:f1:
ab:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9D:8D:B3:8C:8B:6C:9E:26:41:E7:47:5D:D9:7B:F3:14:F8:DE:1F
X509v3 Authority Key Identifier:
keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2f:a1:f5:85:62:07:7f:c1:00:ef:f1:f8:a2:af:6b:f5:1b:
f2:aa:8e:ef:02:38:f7:49:d3:fe:27:32:2f:cf:f2:88:7c:c2:
cd:d5:fc:a9:2a:e4:5f:72:da:75:5c:8f:56:b8:6d:c0:00:a9:
b8:72:49:64:97:82:4b:13:1d:77:49:bd:ad:43:81:1b:80:c2:
10:8f:eb:82:d6:a7:ed:dd:80:8f:d5:43:34:75:42:39:7f:f3:
d6:df:52:d5:8c:8e:31:1c:13:9c:b4:a2:2c:74:11:4e:b8:bb:
5a:3c:59:f5:1f:8d:d6:49:67:d6:4f:c1:38:52:ae:32:84:d7:
7e:ea:c8:ea:33:ed:67:37:5f:f9:cc:f3:3c:b9:e4:86:2a:3d:
76:72:ca:d0:43:99:81:6e:e0:40:9b:37:da:42:0e:d0:20:1f:
bc:c6:f6:59:9c:ca:c8:1d:75:3d:e6:d5:db:a4:32:5e:f4:a1:
1c:04:95:74:76:93:c3:e7:a8:e0:55:49:83:d3:d2:a2:e2:6d:
7c:0f:fe:52:0a:34:f8:7c:b2:9d:9a:cf:37:e9:f0:9f:97:6b:
83:2f:bb:4a:09:cc:51:13:29:e1:1a:77:0e:6a:7a:8c:bb:72:
e9:dc:57:fc:36:40:72:78:4e:f7:e0:8c:28:ee:b5:ee:f0:5c:
5b:da:13:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KTvQESPbqt6YyqKLzv7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzI2YTk2MTMzNmZiZTc4MjBiM2Q3NDhlODEyZjQ5NWM4
NzJkMzUwHhcNMjUwMTMxMDcwMDI5WhcNMjUwMjAxMDcwMDI5WjAzMTEwLwYDVQQD
Eyg5YzlkOGRiMzhjOGI2YzllMjY0MWU3NDc1ZGQ5N2JmMzE0ZjhkZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19ZjlkjWFcTfxlPC/3n7yNX0cDiS
dFXDa1a11YwOu3ouIwlRYcJ9xdocnNRT3PnIENRgK48fX5A6ZSfu12DVeFxctrF4
Jkvpi6T88P12xtzuR8iNkoua5UF6OYkUU3LTUfa2pt7D77LfZchahP5Tsgx1tO+o
nx3oesahSdjBPHDgk89iTb0Z4+rjxhmacTzjOM6oyF01KU1Sapxk3X/rZVqsTr1X
Z3jaUrid6PhQK1w6xq9VyKmU6hS1GSPTZD+DdRwAXG7E2ekC/9UKgv2MZ4M5isPn
uAfV17tivKTkuoJKT8S4Z+yZ6qtnHkxchlfNWgUkUqNFTmolM944wvGr6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJydjbOMi2yeJkHnR13Ze/MU+N4fMB8GA1UdIwQY
MBaAFGlyapYTNvvnggs9dI6BL0lchy01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUt
YzAxNjZkOTcwMTBkLzEvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUtYzAxNjZkOTcwMTBk
LzEvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlS+h9YVi
B3/BAO/x+KKva/Ub8qqO7wI490nT/icyL8/yiHzCzdX8qSrkX3LadVyPVrhtwACp
uHJJZJeCSxMdd0m9rUOBG4DCEI/rgtan7d2Aj9VDNHVCOX/z1t9S1YyOMRwTnLSi
LHQRTri7WjxZ9R+N1kln1k/BOFKuMoTXfurI6jPtZzdf+czzPLnkhio9dnLK0EOZ
gW7gQJs32kIO0CAfvMb2WZzKyB11PebV26QyXvShHASVdHaTw+eo4FVJg9PSouJt
fA/+Ugo0+HyynZrPN+nwn5drgy+7SgnMURMp4Rp3Dmp6jLty6dxX/DZAcnhO9+CM
KO617vBcW9oTLQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:36 2025 by rpki-client on console-fra.rpki-client.org