Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: 8S1g/OT9uS24cPV7QKVTQpq8nrPOAg6c7mLlReJQeI8=
Subject key identifier: F7:90:4B:91:47:31:1D:88:0D:FC:E5:50:4E:6A:78:E8:3B:B1:85:AC
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 0194BB606B2DFBB9678863FD807EE1365F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 0178
Signing time: Fri 31 Jan 2025 08:00:45 +0000
Manifest this update: Fri 31 Jan 2025 08:00:45 +0000
Manifest next update: Sat 01 Feb 2025 08:00:45 +0000
Files and hashes: 1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=)
2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: /BKpkux1WkmQ6G9wtgbt39KjkQeKiaZahxcIeGvkVLY=)
3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:6b:2d:fb:b9:67:88:63:fd:80:7e:e1:36:5f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: Jan 31 08:00:45 2025 GMT
Not After : Feb 1 08:00:45 2025 GMT
Subject: CN=f7904b9147311d880dfce5504e6a78e83bb185ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:ef:99:c4:3f:94:2b:5a:2f:cf:6f:77:b0:
ed:99:1f:ec:58:db:14:42:e9:ef:68:24:75:0d:c8:
55:77:dc:07:7c:ed:59:b4:7e:e2:f8:61:e7:fe:f9:
89:c2:15:da:3b:39:e9:73:91:47:81:52:d9:c0:af:
6a:60:5f:5b:0e:b7:1c:82:e0:2b:1a:7b:85:e9:e9:
6e:56:8d:81:e9:ef:44:e5:8a:57:1e:9f:aa:a0:a1:
56:e1:5b:ea:c8:90:06:ac:fe:9e:69:ce:28:17:0f:
04:f3:3e:b4:58:06:cd:6a:2f:3c:0e:6a:dd:ad:1c:
1d:ad:76:4f:be:63:3a:26:bb:f2:f2:14:d2:23:6e:
c2:5d:e1:fc:c9:b6:bb:4e:c0:fc:75:35:9b:45:7a:
10:12:8c:41:81:b2:11:d1:ac:64:da:79:90:cd:5b:
de:aa:38:89:db:35:c0:cc:bb:26:a5:b9:20:3b:7c:
24:2c:a5:99:fa:a4:58:69:2d:bf:85:4a:b8:95:91:
31:25:ee:2b:f8:5c:94:ca:22:c4:a6:a8:f4:47:9b:
b5:a1:98:89:b8:98:89:c8:21:8b:1d:f0:8e:94:2b:
2c:bc:c7:07:4e:fd:76:dd:cd:2b:68:18:97:da:4c:
07:65:2c:f9:11:a8:d7:fd:75:6c:1f:26:d4:68:ca:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:90:4B:91:47:31:1D:88:0D:FC:E5:50:4E:6A:78:E8:3B:B1:85:AC
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4f:b7:ba:6a:eb:ba:bc:78:85:05:25:28:53:fe:1e:77:92:
4d:e2:f9:8d:a3:a9:18:63:9b:f3:cb:29:76:2a:3c:a7:a8:cf:
cc:a7:16:e0:f6:43:7a:3c:78:52:f5:4c:ed:06:32:05:3b:cb:
9f:f4:18:9e:77:f7:36:44:65:eb:34:fe:a8:2f:cc:f1:56:32:
dc:1a:38:70:40:73:c8:48:16:30:b5:35:c6:5d:4c:e3:f0:75:
52:10:20:81:dc:52:87:ab:62:30:49:1c:ed:79:e8:c9:02:81:
6d:b1:60:de:92:da:45:5d:15:16:58:bb:55:0d:71:79:c5:80:
89:5c:c5:dc:70:cf:9d:28:12:f0:ec:4f:bf:77:43:4e:e4:2d:
f4:43:a7:18:f6:30:93:c0:af:50:d0:78:1c:d2:49:39:3f:59:
88:d8:45:de:91:c5:8a:d3:db:d3:c1:aa:e9:65:0c:56:6a:4c:
e9:97:5b:33:84:aa:3b:13:f7:64:2b:cc:6f:84:7e:ab:6f:26:
61:b5:2d:a0:2f:a9:22:b4:f5:03:70:af:6c:aa:96:b5:02:8f:
8b:37:75:1f:bd:1f:06:e2:65:ed:93:8a:4a:26:52:70:50:1e:
73:d1:0e:71:d3:c3:10:ca:94:6b:51:b0:23:bf:a7:b6:5d:fc:
b9:58:57:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YGst+7lniGP9gH7hNl9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNGQ1MGYzOTBjZjk0NWM2ZmE1YjkwMDkwNWI0ZDUxN2Vi
YjA5MWEwHhcNMjUwMTMxMDgwMDQ1WhcNMjUwMjAxMDgwMDQ1WjAzMTEwLwYDVQQD
EyhmNzkwNGI5MTQ3MzExZDg4MGRmY2U1NTA0ZTZhNzhlODNiYjE4NWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn7vmcQ/lCtaL89vd7DtmR/sWNsU
QunvaCR1DchVd9wHfO1ZtH7i+GHn/vmJwhXaOznpc5FHgVLZwK9qYF9bDrccguAr
GnuF6eluVo2B6e9E5YpXHp+qoKFW4VvqyJAGrP6eac4oFw8E8z60WAbNai88Dmrd
rRwdrXZPvmM6Jrvy8hTSI27CXeH8yba7TsD8dTWbRXoQEoxBgbIR0axk2nmQzVve
qjiJ2zXAzLsmpbkgO3wkLKWZ+qRYaS2/hUq4lZExJe4r+FyUyiLEpqj0R5u1oZiJ
uJiJyCGLHfCOlCssvMcHTv123c0raBiX2kwHZSz5EajX/XVsHybUaMreNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeQS5FHMR2IDfzlUE5qeOg7sYWsMB8GA1UdIwQY
MBaAFA9NUPOQz5Rcb6W5AJBbTVF+uwkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgt
ZjJiZGMyMjc1YjZlLzEvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgtZjJiZGMyMjc1YjZl
LzEvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0+3umrr
urx4hQUlKFP+HneSTeL5jaOpGGOb88spdio8p6jPzKcW4PZDejx4UvVM7QYyBTvL
n/QYnnf3NkRl6zT+qC/M8VYy3Bo4cEBzyEgWMLU1xl1M4/B1UhAggdxSh6tiMEkc
7XnoyQKBbbFg3pLaRV0VFli7VQ1xecWAiVzF3HDPnSgS8OxPv3dDTuQt9EOnGPYw
k8CvUNB4HNJJOT9ZiNhF3pHFitPb08Gq6WUMVmpM6ZdbM4SqOxP3ZCvMb4R+q28m
YbUtoC+pIrT1A3CvbKqWtQKPizd1H70fBuJl7ZOKSiZScFAec9EOcdPDEMqUa1Gw
I7+ntl38uVhX2A==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:23 2025 by rpki-client on console-fra.rpki-client.org