Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
File: FqThByM1EnDNjJzGSwlkiOZOIw4.mft (raw, json)
Hash identifier: yLaaA0jmEpfpPnTMPu/mKtPfEnGKPQFWRH3H7aMV5LM=
Subject key identifier: BB:7B:0A:68:BC:58:5C:5A:A4:FE:F7:3C:9E:B2:CB:DA:A6:F8:3C:DE
Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
Certificate issuer: /CN=16a4e10723351270cd8c9cc64b096488e64e230e
Certificate serial: 0194BABB9B9B111B2B90F42265307152CC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
Manifest number: 059A
Signing time: Fri 31 Jan 2025 05:00:44 +0000
Manifest this update: Fri 31 Jan 2025 05:00:44 +0000
Manifest next update: Sat 01 Feb 2025 05:00:44 +0000
Files and hashes: 1: FqThByM1EnDNjJzGSwlkiOZOIw4.crl (hash: gu0s+SpvC0jyLad2jeOmoHlOf0pJiTgSRYmXPyA9paE=)
2: LHS-1GPmf3JlxOhkC8EvvEXsIio.roa (hash: qJmDzf2hiWRAwgR4H4d0P3HUtRpMHlkEr8kbVnNHB5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:9b:9b:11:1b:2b:90:f4:22:65:30:71:52:cc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e
Validity
Not Before: Jan 31 05:00:44 2025 GMT
Not After : Feb 1 05:00:44 2025 GMT
Subject: CN=bb7b0a68bc585c5aa4fef73c9eb2cbdaa6f83cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:ae:0c:22:b5:62:46:36:be:25:be:a4:24:
5c:b6:e5:f3:5c:ea:2b:15:19:d0:a9:16:ee:3f:8e:
23:18:20:09:6b:e2:e0:1b:09:fb:3f:7c:87:7c:38:
c8:35:18:7c:4a:43:d5:a8:b8:b6:48:48:c3:c3:a2:
79:90:f8:d0:c4:10:77:1f:7f:7c:f3:25:cb:4a:1b:
ce:42:69:7d:73:e0:37:45:3c:18:41:27:7c:2f:36:
b7:92:bc:3e:a4:5f:43:2f:c3:a1:f4:99:14:94:bf:
8f:50:e7:6b:2a:92:c4:fd:de:06:cd:48:8f:81:a1:
ee:ca:cd:63:31:1a:fe:c5:7b:5f:6b:50:37:e3:6e:
ab:98:a6:49:55:10:71:1b:23:ea:a3:4e:56:ab:5e:
3f:df:74:82:5c:ab:35:96:18:b4:17:d3:1a:62:bf:
9c:bb:24:dd:c9:56:01:0d:ab:a5:83:84:37:4f:14:
c0:95:2b:02:db:9a:d3:11:b4:30:45:d2:0c:03:2f:
ff:53:5f:9a:df:4d:be:23:09:e7:d5:20:a9:3e:6b:
10:5e:76:36:8d:3a:06:19:0d:dc:43:b2:04:b7:ef:
cd:2d:b5:49:b5:5e:1c:4a:bd:f5:f0:ac:04:d4:b1:
54:11:a1:0c:10:30:3c:f1:f9:76:f3:c0:50:58:3e:
79:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7B:0A:68:BC:58:5C:5A:A4:FE:F7:3C:9E:B2:CB:DA:A6:F8:3C:DE
X509v3 Authority Key Identifier:
keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:55:ec:e3:b9:5f:40:a7:fa:07:41:d9:d8:7f:54:93:75:53:
d3:98:4b:9f:22:ee:9a:4e:ea:1b:d2:74:98:80:f2:16:3a:97:
4e:98:37:ad:1c:86:74:0c:d2:99:52:bf:c6:42:ed:69:ea:d8:
6c:6a:8b:32:8a:ef:0c:de:62:bc:f4:b4:28:d0:6e:dc:97:65:
4e:c0:dc:5d:f1:30:95:e3:12:1c:a4:45:99:b2:24:ae:cd:70:
ab:9b:e4:4f:4a:9e:53:3e:b1:cd:98:3d:28:38:c1:12:ad:e0:
47:e4:ea:c0:f6:a8:5b:be:3f:99:d9:9e:61:1a:8f:97:a5:2d:
e2:86:04:a7:f2:b1:3f:ab:b8:43:4a:8c:0b:c5:3f:2c:86:f6:
76:03:aa:15:a6:55:7e:92:62:c5:b3:15:5e:f0:c4:f0:e5:08:
47:0f:1e:fa:09:fb:75:67:48:5b:42:97:4f:61:2b:01:84:b3:
ed:3f:33:c0:46:4e:da:22:d5:ee:14:9b:6b:15:7f:bf:c4:44:
b0:46:c0:c2:af:39:76:39:82:d3:60:c0:e2:e9:49:d9:e4:3c:
e6:ea:52:cf:c8:2d:24:31:ad:f4:d8:23:cc:3e:92:f5:3c:09:
f9:07:a6:fe:35:2b:c6:38:65:be:39:03:7c:eb:ba:b2:5b:d1:
1d:74:7b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u5ubERsrkPQiZTBxUsyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTRlMTA3MjMzNTEyNzBjZDhjOWNjNjRiMDk2NDg4ZTY0
ZTIzMGUwHhcNMjUwMTMxMDUwMDQ0WhcNMjUwMjAxMDUwMDQ0WjAzMTEwLwYDVQQD
EyhiYjdiMGE2OGJjNTg1YzVhYTRmZWY3M2M5ZWIyY2JkYWE2ZjgzY2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04auDCK1YkY2viW+pCRctuXzXOor
FRnQqRbuP44jGCAJa+LgGwn7P3yHfDjINRh8SkPVqLi2SEjDw6J5kPjQxBB3H398
8yXLShvOQml9c+A3RTwYQSd8Lza3krw+pF9DL8Oh9JkUlL+PUOdrKpLE/d4GzUiP
gaHuys1jMRr+xXtfa1A3426rmKZJVRBxGyPqo05Wq14/33SCXKs1lhi0F9MaYr+c
uyTdyVYBDaulg4Q3TxTAlSsC25rTEbQwRdIMAy//U1+a302+Iwnn1SCpPmsQXnY2
jToGGQ3cQ7IEt+/NLbVJtV4cSr318KwE1LFUEaEMEDA88fl288BQWD55mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLt7Cmi8WFxapP73PJ6yy9qm+DzeMB8GA1UdIwQY
MBaAFBak4QcjNRJwzYycxksJZIjmTiMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNzVkYzUtNmYxNS00NWZlLTk0MWYt
OWI2NDQ0NGZmNjg4LzEvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8yNzVkYzUtNmYxNS00NWZlLTk0MWYtOWI2NDQ0NGZmNjg4
LzEvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlXs47lf
QKf6B0HZ2H9Uk3VT05hLnyLumk7qG9J0mIDyFjqXTpg3rRyGdAzSmVK/xkLtaerY
bGqLMorvDN5ivPS0KNBu3JdlTsDcXfEwleMSHKRFmbIkrs1wq5vkT0qeUz6xzZg9
KDjBEq3gR+TqwPaoW74/mdmeYRqPl6Ut4oYEp/KxP6u4Q0qMC8U/LIb2dgOqFaZV
fpJixbMVXvDE8OUIRw8e+gn7dWdIW0KXT2ErAYSz7T8zwEZO2iLV7hSbaxV/v8RE
sEbAwq85djmC02DA4ulJ2eQ85upSz8gtJDGt9NgjzD6S9TwJ+Qem/jUrxjhlvjkD
fOu6slvRHXR7ZQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:41 2025 by rpki-client on console-fra.rpki-client.org