Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: 4EWOE3HRnnlVEYyRY32/eYx1/skW9JQypHzFK4YJRO8=
Subject key identifier: 84:72:0B:BB:5F:E1:BC:7E:4E:34:61:4B:CD:E5:FD:7A:8B:64:05:59
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 0194BB5FFB78B784245ED190B2C16B301C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 14
Signing time: Fri 31 Jan 2025 08:00:17 +0000
Manifest this update: Fri 31 Jan 2025 08:00:17 +0000
Manifest next update: Sat 01 Feb 2025 08:00:17 +0000
Files and hashes: 1: cbfaYBjluJFGRHIZotfNKfL5QOM.roa (hash: hnnwP5hTMZNnGccOJwmbq229la5aF88t7OiSZXiU/mU=)
2: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: xlSlnknGGMPWIpQFeWPcl214j71WWTfuZZxmH+gsHnA=)
3: zwNxRZCXOiLKuZa_7Wmh9NcuOqQ.roa (hash: 6xxBkLaHc1up/veCbZl0eXM5uTf3B1SDA3dM0Oft33U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:fb:78:b7:84:24:5e:d1:90:b2:c1:6b:30:1c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Jan 31 08:00:17 2025 GMT
Not After : Feb 1 08:00:17 2025 GMT
Subject: CN=84720bbb5fe1bc7e4e34614bcde5fd7a8b640559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:e4:80:54:2e:43:04:78:dc:11:0d:fa:a2:
85:f2:58:b8:b3:97:1f:a3:5c:43:c3:41:9d:bb:66:
18:f8:77:65:c4:30:a0:3e:f9:91:bb:6a:ce:f8:d0:
d7:8b:77:7b:c6:f3:c0:76:69:b4:c7:83:0b:f1:2d:
94:02:3e:0a:73:15:d6:ad:8b:9c:a2:95:89:97:0c:
75:00:ea:4a:af:f4:73:38:56:b1:e8:b4:2e:81:69:
99:42:9d:3a:00:36:51:5e:f7:a8:09:83:3a:52:7b:
b6:38:3b:2c:df:15:75:64:d8:83:b9:09:65:7b:a2:
71:84:5e:0f:7c:8d:9b:7a:a1:d0:63:9e:29:5a:6e:
c5:50:bc:6c:31:6a:ea:22:ef:41:28:8d:ae:12:85:
5a:2f:87:c0:b7:b5:6a:67:98:e3:11:8d:77:68:a6:
77:8a:ed:0c:8d:d4:1a:43:a6:4a:02:21:5a:0e:68:
79:ed:ab:8a:0b:2b:35:36:f8:66:40:ac:d8:93:45:
08:15:4e:b6:55:af:53:ce:f6:4f:9d:b2:f5:f2:5d:
a5:cb:38:a7:ee:5b:31:da:dc:c3:a2:a7:51:45:a8:
60:76:2e:f3:7f:6b:a0:23:ed:30:7c:fb:bb:c9:5c:
41:cc:6f:82:d7:7b:1b:70:18:94:90:5e:24:1b:f3:
53:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:72:0B:BB:5F:E1:BC:7E:4E:34:61:4B:CD:E5:FD:7A:8B:64:05:59
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7f:d3:b9:90:86:7e:08:47:0c:d7:f7:92:df:3b:9a:28:8d:
10:17:bc:e8:5a:05:7a:a4:b5:77:5a:9f:2c:05:6a:b7:2b:52:
d6:9e:ca:b3:ee:f5:25:c4:0e:79:f1:fd:e6:45:cb:4d:a0:18:
aa:24:b4:77:9f:01:9e:cc:c5:c7:41:46:09:d4:f2:7e:fa:6c:
c5:38:79:a1:ef:34:28:37:74:a0:91:7a:55:e5:c6:b9:40:cf:
80:5f:e0:74:14:05:f4:b0:15:99:48:82:37:55:ab:4f:29:25:
47:52:61:43:ea:b5:7f:4b:1a:48:1f:16:6e:26:f6:0f:1f:52:
77:50:ea:37:2b:91:e9:3d:9b:45:f5:22:68:5b:ba:1c:f0:32:
54:eb:6e:f6:14:27:5e:c8:e9:47:41:9f:4c:c6:c8:42:81:36:
fa:5f:f2:6c:a8:70:82:ef:87:18:9d:74:5c:bc:47:f6:c9:14:
4c:70:11:df:f9:f0:13:c8:f2:cf:3f:2e:00:5b:30:d0:e4:70:
bb:87:5c:fd:12:47:b2:ce:a9:34:70:e2:28:19:7e:17:9c:4e:
95:b1:f1:34:f8:4b:fe:8f:93:a3:a2:36:d7:c0:11:e6:cb:55:
e8:8c:30:09:d8:75:b8:bb:c2:1d:00:1e:ec:8b:c2:8d:13:25:
e4:a9:32:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X/t4t4QkXtGQssFrMBw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MTc2NzE5OTEyOTg5OTc5ZTA4NjEyNWEyYTQxYTEzM2Zm
ZmRjMjQwHhcNMjUwMTMxMDgwMDE3WhcNMjUwMjAxMDgwMDE3WjAzMTEwLwYDVQQD
Eyg4NDcyMGJiYjVmZTFiYzdlNGUzNDYxNGJjZGU1ZmQ3YThiNjQwNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/rkgFQuQwR43BEN+qKF8li4s5cf
o1xDw0Gdu2YY+HdlxDCgPvmRu2rO+NDXi3d7xvPAdmm0x4ML8S2UAj4KcxXWrYuc
opWJlwx1AOpKr/RzOFax6LQugWmZQp06ADZRXveoCYM6Unu2ODss3xV1ZNiDuQll
e6JxhF4PfI2beqHQY54pWm7FULxsMWrqIu9BKI2uEoVaL4fAt7VqZ5jjEY13aKZ3
iu0MjdQaQ6ZKAiFaDmh57auKCys1NvhmQKzYk0UIFU62Va9TzvZPnbL18l2lyzin
7lsx2tzDoqdRRahgdi7zf2ugI+0wfPu7yVxBzG+C13sbcBiUkF4kG/NTVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRyC7tf4bx+TjRhS83l/XqLZAVZMB8GA1UdIwQY
MBaAFKQXZxmRKYmXnghhJaKkGhM//9wkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEJkbkdaRXBpWmVlQ0dFbG9xUWFFel9fM0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYTQwZjUtYjljOS00ODU2LTgzYzYt
ZWYwNDBhZWJlYTYwLzEvcEJkbkdaRXBpWmVlQ0dFbG9xUWFFel9fM0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xYTQwZjUtYjljOS00ODU2LTgzYzYtZWYwNDBhZWJlYTYw
LzEvcEJkbkdaRXBpWmVlQ0dFbG9xUWFFel9fM0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfH/TuZCG
fghHDNf3kt87miiNEBe86FoFeqS1d1qfLAVqtytS1p7Ks+71JcQOefH95kXLTaAY
qiS0d58BnszFx0FGCdTyfvpsxTh5oe80KDd0oJF6VeXGuUDPgF/gdBQF9LAVmUiC
N1WrTyklR1JhQ+q1f0saSB8Wbib2Dx9Sd1DqNyuR6T2bRfUiaFu6HPAyVOtu9hQn
XsjpR0GfTMbIQoE2+l/ybKhwgu+HGJ10XLxH9skUTHAR3/nwE8jyzz8uAFsw0ORw
u4dc/RJHss6pNHDiKBl+F5xOlbHxNPhL/o+To6I218AR5stV6IwwCdh1uLvCHQAe
7IvCjRMl5KkyUw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:21 2025 by rpki-client on console-fra.rpki-client.org