Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
File: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft (raw, json)
Hash identifier: KQD3vVmGAGtVhOdcdq4BJRcU7DmZUKOOvJEZCCLQn2c=
Subject key identifier: 58:14:AB:D9:D3:D0:0F:03:85:E8:5E:48:A7:E1:35:CB:62:D9:4E:04
Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
Certificate issuer: /CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Certificate serial: 0194BAF210A98FD133D9346A4AADB6FF6BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 06:00:13 +0000
Manifest this update: Fri 31 Jan 2025 06:00:13 +0000
Manifest next update: Sat 01 Feb 2025 06:00:13 +0000
Files and hashes: 1: Et82Ox-YoPWswPFqxd1JmT5HiVY.roa (hash: dKjp2M/qEJfQktMuqf3U3untvmBMHbGfy5ZX8hyRWlU=)
2: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl (hash: eCvA0l2kxUykCFqPU61fuwimV+VZX5GdjYjmbD2MsPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:10:a9:8f:d1:33:d9:34:6a:4a:ad:b6:ff:6b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Validity
Not Before: Jan 31 06:00:13 2025 GMT
Not After : Feb 1 06:00:13 2025 GMT
Subject: CN=5814abd9d3d00f0385e85e48a7e135cb62d94e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:ed:8f:a1:2b:e2:62:d1:23:c4:39:bc:4d:
bf:80:32:fb:45:fe:10:6b:61:9c:cd:4f:5a:6a:79:
26:8f:28:6b:cc:63:9d:94:15:4e:78:aa:b2:04:5c:
8f:cc:38:c4:96:97:2b:40:a0:63:34:04:62:67:a4:
48:d7:88:ff:8b:67:6b:f5:b8:9e:02:18:63:72:97:
db:ec:a1:8c:68:20:f8:12:53:b0:b2:73:22:8d:82:
d3:80:25:4e:9e:52:2e:17:28:74:3e:9e:f5:45:91:
0a:55:27:0c:d7:6a:0b:bd:5b:67:ec:74:3e:31:cd:
97:b8:4b:e6:46:88:aa:3a:63:b9:36:a0:12:cf:f8:
e9:fb:ab:3e:25:08:64:41:32:82:00:0f:7f:ca:31:
0c:36:97:7a:d7:fd:6b:43:df:b3:0c:fe:b6:f9:d2:
e4:6d:c8:5d:c0:62:f6:68:15:c2:70:ec:9a:95:40:
7b:ca:f4:28:7d:c8:5f:95:29:3d:ac:be:a7:52:aa:
22:06:60:2d:69:66:2f:e6:a8:03:26:de:eb:1c:d4:
75:f2:b7:f4:8d:a5:bc:08:80:1c:4c:4c:28:5b:57:
5f:e4:18:d6:a9:37:2b:f6:48:4b:da:8b:10:f3:00:
58:66:1c:8a:26:6c:be:53:d7:76:5d:33:2e:5f:c5:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:14:AB:D9:D3:D0:0F:03:85:E8:5E:48:A7:E1:35:CB:62:D9:4E:04
X509v3 Authority Key Identifier:
keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ff:b7:09:15:64:33:de:7d:75:32:9a:99:8b:21:99:b0:d3:
b1:56:7a:e3:ec:88:86:65:08:fd:90:ec:ed:2a:5b:5d:d8:0b:
43:15:54:cf:c6:d4:b6:aa:3d:6d:61:b5:29:db:69:3f:27:90:
c8:e6:98:91:9e:57:e2:df:71:de:68:80:d1:9d:48:dd:3f:3e:
9e:36:1f:9b:62:1f:cc:8d:5f:f0:f5:ed:8e:f7:b7:d8:86:7b:
db:da:ea:da:96:0c:96:2f:1c:d2:96:55:d6:5a:e4:f8:fc:47:
90:a4:af:26:17:35:79:c4:b4:80:3d:aa:91:65:ba:f4:b8:f2:
34:21:42:96:db:48:a5:9f:1a:18:5d:db:45:cf:6f:e0:ef:e5:
78:22:28:40:82:e6:70:41:fa:91:49:5a:85:38:6a:21:21:6b:
57:b5:a4:b6:dc:7a:a2:8f:d9:3c:10:57:d3:aa:71:d1:d1:f9:
f9:8f:28:d7:57:8f:e6:a4:a1:bd:92:06:83:1d:19:32:d0:0a:
a2:1e:b0:ae:bc:cb:1e:6b:73:13:cc:92:06:ad:10:95:33:18:
6c:b8:92:4f:38:85:da:76:7e:48:a0:28:a8:75:b1:76:4f:65:
f2:73:c7:ff:8e:19:c5:92:82:12:c9:6e:b1:09:15:1c:82:91:
78:c9:9d:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68hCpj9Ez2TRqSq22/2vkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UxMjZmYTU4MzA5MTEwODNlNDVmNTgzY2FkYjA4YTYz
ZWM2ZjkwHhcNMjUwMTMxMDYwMDEzWhcNMjUwMjAxMDYwMDEzWjAzMTEwLwYDVQQD
Eyg1ODE0YWJkOWQzZDAwZjAzODVlODVlNDhhN2UxMzVjYjYyZDk0ZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Htj6Er4mLRI8Q5vE2/gDL7Rf4Q
a2GczU9aankmjyhrzGOdlBVOeKqyBFyPzDjElpcrQKBjNARiZ6RI14j/i2dr9bie
Ahhjcpfb7KGMaCD4ElOwsnMijYLTgCVOnlIuFyh0Pp71RZEKVScM12oLvVtn7HQ+
Mc2XuEvmRoiqOmO5NqASz/jp+6s+JQhkQTKCAA9/yjEMNpd61/1rQ9+zDP62+dLk
bchdwGL2aBXCcOyalUB7yvQofchflSk9rL6nUqoiBmAtaWYv5qgDJt7rHNR18rf0
jaW8CIAcTEwoW1df5BjWqTcr9khL2osQ8wBYZhyKJmy+U9d2XTMuX8Ut0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgUq9nT0A8DheheSKfhNcti2U4EMB8GA1UdIwQY
MBaAFCrOEm+lgwkRCD5F9YPK2wimPsb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQt
NmNiY2I3ZTNkOGQyLzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQtNmNiY2I3ZTNkOGQy
LzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhv+3CRVk
M959dTKamYshmbDTsVZ64+yIhmUI/ZDs7SpbXdgLQxVUz8bUtqo9bWG1KdtpPyeQ
yOaYkZ5X4t9x3miA0Z1I3T8+njYfm2IfzI1f8PXtjve32IZ729rq2pYMli8c0pZV
1lrk+PxHkKSvJhc1ecS0gD2qkWW69LjyNCFClttIpZ8aGF3bRc9v4O/leCIoQILm
cEH6kUlahThqISFrV7Wkttx6oo/ZPBBX06px0dH5+Y8o11eP5qShvZIGgx0ZMtAK
oh6wrrzLHmtzE8ySBq0QlTMYbLiSTziF2nZ+SKAoqHWxdk9l8nPH/44ZxZKCEslu
sQkVHIKReMmdUQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:10 2025 by rpki-client on console-fra.rpki-client.org