Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
File: d-g56lm5dYJP1wigrXNVUAF8v3w.mft (raw, json)
Hash identifier: e/gh2NDWBBmomiUf/53FF73V5A/+vg5X7X/J8R1fmKk=
Subject key identifier: 02:87:09:DB:40:F0:DF:CC:FE:94:45:D4:AF:43:1D:71:5A:F7:A6:9E
Authority key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
Certificate issuer: /CN=77e839ea59b975824fd708a0ad735550017cbf7c
Certificate serial: 0194BB96FB80E731AC19D93B3F78ACE5B74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
Manifest number: 1197
Signing time: Fri 31 Jan 2025 09:00:21 +0000
Manifest this update: Fri 31 Jan 2025 09:00:21 +0000
Manifest next update: Sat 01 Feb 2025 09:00:21 +0000
Files and hashes: 1: AdtLsSKpD88rZG8vPkZiD9QZ3II.roa (hash: r/TtnbjU6TzYG7n4J08Ln2zhCxACBBJlAa/WOkQ9bLA=)
2: ZZKHxuzT9f9uOTLxBtzMJ_ndYYE.roa (hash: w2L+9XVGxP7AjhXdVbAOAOleu3PnA4M7uTmUbZQNGw0=)
3: d-g56lm5dYJP1wigrXNVUAF8v3w.crl (hash: K+axBkGmylBB4HUyG8EIN2UhveMh63Xw7JOkenOGmv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:fb:80:e7:31:ac:19:d9:3b:3f:78:ac:e5:b7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e839ea59b975824fd708a0ad735550017cbf7c
Validity
Not Before: Jan 31 09:00:21 2025 GMT
Not After : Feb 1 09:00:21 2025 GMT
Subject: CN=028709db40f0dfccfe9445d4af431d715af7a69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:16:a7:bf:7e:67:36:bc:67:4e:d2:a9:1d:
4a:b3:ab:4e:04:a5:0d:30:82:fd:7f:33:51:48:80:
bf:3c:06:63:38:b9:b2:e9:5d:2f:2b:27:94:12:a3:
77:4d:a5:84:98:4e:90:49:80:cf:4c:59:fa:a6:c6:
72:69:4d:9f:34:f9:ac:c6:43:44:20:6c:1e:40:23:
cf:df:8b:ac:7b:a2:d9:07:aa:26:d1:2d:1b:08:6f:
1b:75:aa:d7:42:88:e6:2a:18:94:ce:b8:f1:db:95:
fd:c5:74:4a:fd:4d:f3:3d:16:15:7f:82:67:c8:dc:
0f:5a:81:aa:77:f8:c7:52:2a:98:0c:df:95:03:6e:
84:5b:82:5c:f6:02:54:35:88:9b:fc:b5:a9:d9:3c:
c5:1a:c2:0e:41:19:0d:2d:b4:c6:1e:60:b1:bf:24:
06:05:0d:42:75:06:85:53:d4:f0:41:bc:25:d3:8f:
5b:db:80:f2:6f:a4:b4:81:02:42:e9:7e:a4:92:3b:
d3:34:8a:b7:7d:8c:61:71:7c:72:c9:00:5c:74:89:
2c:94:a4:e0:2d:4d:91:db:5e:06:14:86:6e:52:2a:
01:83:50:da:54:7c:71:2f:3b:1e:1a:02:fc:06:87:
f3:10:6c:44:d8:32:0a:34:2a:a8:07:47:51:65:db:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:87:09:DB:40:F0:DF:CC:FE:94:45:D4:AF:43:1D:71:5A:F7:A6:9E
X509v3 Authority Key Identifier:
keyid:77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:24:e8:89:b5:20:f9:8c:f4:7e:f0:eb:fc:82:ea:54:8a:f0:
1c:0d:e1:10:74:94:43:13:2b:b3:3a:17:65:5b:f4:b6:f4:85:
85:98:3e:ff:fe:9d:74:ab:75:62:bb:74:4d:68:64:72:8d:af:
a4:62:a9:cf:63:07:59:5d:24:78:81:64:7c:a1:98:2d:b7:8d:
3a:10:0b:5b:6c:84:5b:6b:24:a3:77:92:cc:a8:db:a8:f4:8e:
cf:d7:0a:96:e7:de:eb:c6:39:2d:9d:a7:38:05:1b:5f:c1:cb:
bd:61:07:d0:e4:67:a6:58:7d:c8:bc:a2:c1:c5:87:d5:bc:ff:
19:da:df:0b:f4:23:45:d0:4e:9f:c0:73:38:b9:ae:98:b5:e6:
54:0f:31:88:77:ae:4d:41:1d:80:d3:96:ef:cb:4f:d9:03:4d:
17:4e:c3:dd:ec:eb:6d:21:da:ff:ba:80:b9:84:d9:cb:d2:15:
18:f0:73:c9:a2:81:be:1b:68:5d:64:25:e9:16:4d:45:77:fa:
55:7d:92:35:3d:e9:a1:e5:37:42:01:aa:55:4f:f1:5e:82:ff:
d9:de:e8:3c:9d:36:27:cf:69:8c:35:e0:51:98:6b:e2:bc:38:
0f:04:ce:a7:be:a5:a6:aa:7d:57:62:fe:e1:35:fc:13:12:8d:
26:fd:6c:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lvuA5zGsGdk7P3is5bdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZTgzOWVhNTliOTc1ODI0ZmQ3MDhhMGFkNzM1NTUwMDE3
Y2JmN2MwHhcNMjUwMTMxMDkwMDIxWhcNMjUwMjAxMDkwMDIxWjAzMTEwLwYDVQQD
EygwMjg3MDlkYjQwZjBkZmNjZmU5NDQ1ZDRhZjQzMWQ3MTVhZjdhNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/EWp79+Zza8Z07SqR1Ks6tOBKUN
MIL9fzNRSIC/PAZjOLmy6V0vKyeUEqN3TaWEmE6QSYDPTFn6psZyaU2fNPmsxkNE
IGweQCPP34use6LZB6om0S0bCG8bdarXQojmKhiUzrjx25X9xXRK/U3zPRYVf4Jn
yNwPWoGqd/jHUiqYDN+VA26EW4Jc9gJUNYib/LWp2TzFGsIOQRkNLbTGHmCxvyQG
BQ1CdQaFU9TwQbwl049b24Dyb6S0gQJC6X6kkjvTNIq3fYxhcXxyyQBcdIkslKTg
LU2R214GFIZuUioBg1DaVHxxLzseGgL8BofzEGxE2DIKNCqoB0dRZdtNBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKHCdtA8N/M/pRF1K9DHXFa96aeMB8GA1UdIwQY
MBaAFHfoOepZuXWCT9cIoK1zVVABfL98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1nNTZsbTVkWUpQMXdpZ3JYTlZVQUY4djN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9hZTViNWYtZTc0OC00ZmQ1LWIxZGUt
Yzc5YTNmYTcxZDM0LzEvZC1nNTZsbTVkWUpQMXdpZ3JYTlZVQUY4djN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9hZTViNWYtZTc0OC00ZmQ1LWIxZGUtYzc5YTNmYTcxZDM0
LzEvZC1nNTZsbTVkWUpQMXdpZ3JYTlZVQUY4djN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyToibUg
+Yz0fvDr/ILqVIrwHA3hEHSUQxMrszoXZVv0tvSFhZg+//6ddKt1Yrt0TWhkco2v
pGKpz2MHWV0keIFkfKGYLbeNOhALW2yEW2sko3eSzKjbqPSOz9cKlufe68Y5LZ2n
OAUbX8HLvWEH0ORnplh9yLyiwcWH1bz/GdrfC/QjRdBOn8BzOLmumLXmVA8xiHeu
TUEdgNOW78tP2QNNF07D3ezrbSHa/7qAuYTZy9IVGPBzyaKBvhtoXWQl6RZNRXf6
VX2SNT3poeU3QgGqVU/xXoL/2d7oPJ02J89pjDXgUZhr4rw4DwTOp76lpqp9V2L+
4TX8ExKNJv1sLA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:09 2025 by rpki-client on console-fra.rpki-client.org