Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
File: h5Q8uG46cDgTd4-reQ1l8NohYVo.mft (raw, json)
Hash identifier: /3tCIZEVYzeqoKekMk0a2iPKuBM3arKrSX/ivU0f+v4=
Subject key identifier: 7E:ED:8C:1A:A6:90:42:9A:36:5C:85:65:6D:4B:CF:71:F8:85:A7:B2
Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Certificate issuer: /CN=87943cb86e3a703813778fab790d65f0da21615a
Certificate serial: 0194BA8473BD9D461568C8E406B21FED831E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 04:00:29 +0000
Manifest this update: Fri 31 Jan 2025 04:00:29 +0000
Manifest next update: Sat 01 Feb 2025 04:00:29 +0000
Files and hashes: 1: h5Q8uG46cDgTd4-reQ1l8NohYVo.crl (hash: q0+YLKRmBX+htLqamW4FlDkuXjrFxxYbvVDeVm+bQtg=)
2: yqQz2IsKQ7pg4y2EENErlYnu65I.roa (hash: 3bFflKEwuUHPYtPrbotsuT6N+1ZC/V/hbgoTc6FAPLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:73:bd:9d:46:15:68:c8:e4:06:b2:1f:ed:83:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a
Validity
Not Before: Jan 31 04:00:29 2025 GMT
Not After : Feb 1 04:00:29 2025 GMT
Subject: CN=7eed8c1aa690429a365c85656d4bcf71f885a7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:c2:4d:a4:07:f3:0b:60:25:53:52:6c:1e:
9b:10:44:2b:25:dd:a2:1f:01:52:98:f4:1c:52:4a:
82:93:03:b6:39:5a:1b:3e:49:8e:cd:a2:ca:85:ad:
89:1b:06:90:95:ec:85:53:64:3e:f9:8f:b7:31:7e:
7d:8f:6f:55:d8:c4:ab:a3:67:76:9f:82:bc:bb:fa:
90:d4:40:02:3c:3c:00:16:86:2f:cd:ce:49:f5:f7:
f8:8d:51:45:8c:6f:f8:e8:74:36:8e:8f:98:94:ab:
31:da:2b:14:72:9b:cc:98:05:82:31:fe:a2:a9:98:
e0:72:5a:5b:d6:68:7c:ce:53:22:63:ff:04:24:e4:
52:60:fd:36:3b:d3:99:16:42:4e:b9:29:b8:cb:1d:
63:16:2e:55:7e:aa:94:eb:ac:86:9b:39:d5:6f:77:
1a:49:1c:e8:19:5a:76:92:34:22:30:76:62:25:07:
ee:15:76:7b:9c:28:1b:23:2f:e9:7c:18:76:f7:70:
3b:7d:df:64:cd:3c:d2:d6:cf:13:21:f4:70:8e:5a:
a6:1f:a0:13:90:0c:cb:03:85:25:80:9a:58:d3:ca:
de:d7:8c:96:7e:2b:9e:9b:bc:15:b0:db:72:6d:f2:
22:d2:bd:d4:63:f3:bc:aa:e1:70:ea:a7:4e:61:57:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:ED:8C:1A:A6:90:42:9A:36:5C:85:65:6D:4B:CF:71:F8:85:A7:B2
X509v3 Authority Key Identifier:
keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7b:02:96:3a:08:81:d0:17:b1:c4:8a:10:0a:d3:db:8f:7c:
57:f6:e5:8c:23:5a:5c:2c:f8:cf:49:70:20:a7:9b:2f:6e:ef:
60:d0:fe:a8:1a:98:99:f1:75:6d:31:1d:5f:d7:ff:a5:a3:ec:
9b:49:88:c1:09:c7:fa:f9:3a:7e:7f:7e:b6:70:29:de:1b:33:
cf:d7:9d:c5:a5:3b:84:33:87:e0:d2:d0:4f:6a:51:25:9a:e8:
bb:17:fe:07:48:2c:c6:5c:23:d0:5e:f7:d5:0e:3c:b5:ec:ad:
48:5d:82:e9:0e:1e:58:c1:4a:e8:cb:0f:3d:fd:c4:bb:ed:a4:
75:9f:0e:22:99:9c:22:e4:cd:4d:b5:04:cb:9e:a0:16:39:8c:
27:1e:e6:fc:c7:ce:69:20:46:d3:d7:e8:98:46:ee:a3:10:1d:
d5:09:8d:9c:e2:e8:a2:b4:a0:8f:b6:45:d4:25:d2:ec:cd:36:
98:04:d1:ce:51:60:a5:e5:8f:24:f1:2a:4b:f4:30:23:ca:a7:
f9:27:d2:d7:e7:c5:21:00:f5:66:ba:6d:d2:58:65:ef:56:e5:
de:5c:49:02:fc:29:2b:ce:db:f5:05:44:59:a6:f0:8a:72:15:
ad:60:a9:64:de:63:4d:eb:00:85:5b:14:65:d7:49:77:b0:f9:
81:59:88:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hHO9nUYVaMjkBrIf7YMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTQzY2I4NmUzYTcwMzgxMzc3OGZhYjc5MGQ2NWYwZGEy
MTYxNWEwHhcNMjUwMTMxMDQwMDI5WhcNMjUwMjAxMDQwMDI5WjAzMTEwLwYDVQQD
Eyg3ZWVkOGMxYWE2OTA0MjlhMzY1Yzg1NjU2ZDRiY2Y3MWY4ODVhN2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX7CTaQH8wtgJVNSbB6bEEQrJd2i
HwFSmPQcUkqCkwO2OVobPkmOzaLKha2JGwaQleyFU2Q++Y+3MX59j29V2MSro2d2
n4K8u/qQ1EACPDwAFoYvzc5J9ff4jVFFjG/46HQ2jo+YlKsx2isUcpvMmAWCMf6i
qZjgclpb1mh8zlMiY/8EJORSYP02O9OZFkJOuSm4yx1jFi5VfqqU66yGmznVb3ca
SRzoGVp2kjQiMHZiJQfuFXZ7nCgbIy/pfBh293A7fd9kzTzS1s8TIfRwjlqmH6AT
kAzLA4UlgJpY08re14yWfiuem7wVsNtybfIi0r3UY/O8quFw6qdOYVeeFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7tjBqmkEKaNlyFZW1Lz3H4haeyMB8GA1UdIwQY
MBaAFIeUPLhuOnA4E3ePq3kNZfDaIWFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEt
Y2M1ODA1MjFkMDBmLzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEtY2M1ODA1MjFkMDBm
LzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXsCljoI
gdAXscSKEArT2498V/bljCNaXCz4z0lwIKebL27vYND+qBqYmfF1bTEdX9f/paPs
m0mIwQnH+vk6fn9+tnAp3hszz9edxaU7hDOH4NLQT2pRJZrouxf+B0gsxlwj0F73
1Q48teytSF2C6Q4eWMFK6MsPPf3Eu+2kdZ8OIpmcIuTNTbUEy56gFjmMJx7m/MfO
aSBG09fomEbuoxAd1QmNnOLoorSgj7ZF1CXS7M02mATRzlFgpeWPJPEqS/QwI8qn
+SfS1+fFIQD1Zrpt0lhl71bl3lxJAvwpK87b9QVEWabwinIVrWCpZN5jTesAhVsU
ZddJd7D5gVmI4g==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:19 2025 by rpki-client on console-fra.rpki-client.org