Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json)
Hash identifier: E9FkfxbwBDqKO1LhCpP7OKCoN9B1anQm/LabBsFgI9k=
Subject key identifier: 5C:08:DD:9F:05:4F:46:07:20:9E:5E:00:93:47:23:FF:72:68:91:67
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 0194BB5FFC20A09C89866F2520D37D68EF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
Manifest number: 1417
Signing time: Fri 31 Jan 2025 08:00:17 +0000
Manifest this update: Fri 31 Jan 2025 08:00:17 +0000
Manifest next update: Sat 01 Feb 2025 08:00:17 +0000
Files and hashes: 1: TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa (hash: eeX0IhSYNZ9FE4vi+lYEY7nwkpcGZsK3aVToAyhv5yM=)
2: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: 7+wYBuipQVRBctFgfklw4ojYOMa2A02VjTVsZZ8MlZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:fc:20:a0:9c:89:86:6f:25:20:d3:7d:68:ef:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Jan 31 08:00:17 2025 GMT
Not After : Feb 1 08:00:17 2025 GMT
Subject: CN=5c08dd9f054f4607209e5e00934723ff72689167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:d5:2a:9f:f1:43:18:d5:ff:68:eb:50:53:
5b:89:c0:db:9f:37:10:b5:bd:b5:36:0a:36:cc:a5:
13:fa:f4:b8:b3:3b:b6:4f:6a:70:47:46:97:91:21:
65:f6:92:69:17:f9:1c:25:ff:dc:42:82:49:df:94:
e6:14:dd:6a:af:bd:12:ef:b3:dc:a1:ba:4e:d7:4f:
c3:96:6e:4b:7d:d2:ee:cd:db:43:57:1f:c7:60:7e:
55:70:74:15:e0:33:d8:de:e3:34:0c:a9:d5:eb:72:
15:e6:f9:d3:42:29:3e:95:96:23:a0:1d:03:cb:27:
e4:d4:5f:0c:7f:b9:4d:d8:e9:59:98:fa:2a:bd:f8:
46:a4:6c:70:5c:f8:43:16:a8:94:f0:c3:2f:11:fd:
59:08:d4:4f:1f:aa:dc:4d:e0:ef:b2:2d:07:3c:25:
74:2e:3f:4a:77:46:6f:58:93:53:49:2f:cc:78:81:
08:3f:61:13:28:e4:29:07:a0:a8:fa:61:58:0e:e6:
99:f7:7a:ad:3b:14:43:83:b7:0d:a6:46:58:2f:3f:
04:5b:13:76:df:73:af:c3:06:1d:16:d4:91:66:07:
c8:37:92:02:e0:c1:56:41:ad:19:c9:20:51:d3:73:
13:d2:b6:bf:fa:d7:ae:b7:e3:0a:a6:67:8c:8d:a3:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:08:DD:9F:05:4F:46:07:20:9E:5E:00:93:47:23:FF:72:68:91:67
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:be:2e:bc:73:27:53:18:ce:bf:e9:1a:af:1e:54:c2:9a:cb:
00:a3:ec:0a:e6:45:6a:80:47:d8:0c:06:e1:26:f4:b6:6e:03:
28:cf:c4:97:d5:ab:78:8a:0d:db:f3:e4:65:81:87:2c:43:cf:
b2:9a:17:ab:18:b7:85:6e:f1:94:fa:23:8e:e7:cd:f2:7d:f1:
9c:4e:dc:6c:b0:43:f6:f5:e1:b7:43:e4:46:17:fc:18:26:10:
1b:c2:c8:4b:50:d2:da:64:62:d0:7a:2f:0b:97:f2:44:31:7c:
1c:07:1c:83:3b:ba:d4:5f:01:9f:d4:25:48:a7:2b:3f:11:a4:
4a:39:b0:c6:55:f8:77:bb:b2:74:ec:3f:eb:f1:f6:b5:5b:8e:
37:4f:84:87:04:47:6e:44:1e:f1:b7:e5:9b:ba:af:06:61:19:
7b:72:6e:d8:de:21:4b:77:e3:41:2f:1d:c2:fe:b7:35:0f:31:
fe:c7:e3:9a:44:cc:c2:79:06:85:0f:10:dc:27:49:0c:57:42:
a2:f7:96:d5:dd:51:06:3b:65:18:ed:da:54:23:30:12:5a:0c:
f1:b0:00:77:23:5f:62:97:f5:85:f0:08:d2:38:77:d2:e5:ea:
b7:2d:22:20:18:21:47:c9:02:31:92:f6:04:2f:04:ed:d3:f4:
33:07:e1:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X/wgoJyJhm8lINN9aO80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmJmODJmZGEyOGUwOGY2MjI5NDYwYmEyZTI0MTQxNDY0
MzMxZTUwHhcNMjUwMTMxMDgwMDE3WhcNMjUwMjAxMDgwMDE3WjAzMTEwLwYDVQQD
Eyg1YzA4ZGQ5ZjA1NGY0NjA3MjA5ZTVlMDA5MzQ3MjNmZjcyNjg5MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBLVKp/xQxjV/2jrUFNbicDbnzcQ
tb21Ngo2zKUT+vS4szu2T2pwR0aXkSFl9pJpF/kcJf/cQoJJ35TmFN1qr70S77Pc
obpO10/Dlm5LfdLuzdtDVx/HYH5VcHQV4DPY3uM0DKnV63IV5vnTQik+lZYjoB0D
yyfk1F8Mf7lN2OlZmPoqvfhGpGxwXPhDFqiU8MMvEf1ZCNRPH6rcTeDvsi0HPCV0
Lj9Kd0ZvWJNTSS/MeIEIP2ETKOQpB6Co+mFYDuaZ93qtOxRDg7cNpkZYLz8EWxN2
33OvwwYdFtSRZgfIN5IC4MFWQa0ZySBR03MT0ra/+teut+MKpmeMjaMJ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwI3Z8FT0YHIJ5eAJNHI/9yaJFnMB8GA1UdIwQY
MBaAFK8r+C/aKOCPYilGC6LiQUFGQzHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnl2NEw5b280STlpS1VZTG91SkJRVVpETWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zYjkxYTItZDJhNy00ZTY5LTljODYt
YmRmMzkxN2E5MjY3LzEvcnl2NEw5b280STlpS1VZTG91SkJRVVpETWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zYjkxYTItZDJhNy00ZTY5LTljODYtYmRmMzkxN2E5MjY3
LzEvcnl2NEw5b280STlpS1VZTG91SkJRVVpETWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb74uvHMn
UxjOv+karx5UwprLAKPsCuZFaoBH2AwG4Sb0tm4DKM/El9WreIoN2/PkZYGHLEPP
spoXqxi3hW7xlPojjufN8n3xnE7cbLBD9vXht0PkRhf8GCYQG8LIS1DS2mRi0Hov
C5fyRDF8HAccgzu61F8Bn9QlSKcrPxGkSjmwxlX4d7uydOw/6/H2tVuON0+EhwRH
bkQe8bflm7qvBmEZe3Ju2N4hS3fjQS8dwv63NQ8x/sfjmkTMwnkGhQ8Q3CdJDFdC
oveW1d1RBjtlGO3aVCMwEloM8bAAdyNfYpf1hfAI0jh30uXqty0iIBghR8kCMZL2
BC8E7dP0Mwfh4w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:24 2025 by rpki-client on console-fra.rpki-client.org