Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: tU9Bw6e0TR0O6w/iBwqJtTZIxWnUQurjAn9tTnOgJE0=
Subject key identifier: 67:1B:E5:2D:20:03:40:3A:5A:8A:0F:56:F1:96:5D:56:96:33:62:1D
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 0194BA84B34FE3B2D2352A557BE8459F67D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 1445
Signing time: Fri 31 Jan 2025 04:00:46 +0000
Manifest this update: Fri 31 Jan 2025 04:00:46 +0000
Manifest next update: Sat 01 Feb 2025 04:00:46 +0000
Files and hashes: 1: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: kAmj70Few3aEqYkd37jAL45hW4CHhl9Ar8/82F4t+Pk=)
2: PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa (hash: rsisC5jLLAQc/j1oflIAdcSgTWRxBAcfuySQlAiOJsc=)
3: Zg0aTO_s-s5vOZoxmmqg_5sQSgQ.roa (hash: QOvTkDAZBFbf1/F4gCK1ncg1KiM7Id/ni6wFdDr4R+8=)
4: tUG2gp-hSdDfUJYQlaFq0NzbX94.roa (hash: IvkQwvvwCRW0GZATlVei8Jb/Mr/PuuQNS0wQyy4KpD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:b3:4f:e3:b2:d2:35:2a:55:7b:e8:45:9f:67:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Jan 31 04:00:46 2025 GMT
Not After : Feb 1 04:00:46 2025 GMT
Subject: CN=671be52d2003403a5a8a0f56f1965d569633621d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:15:12:c2:d2:67:b7:cd:6b:a1:b6:0a:74:0b:
b1:72:02:d5:f7:00:92:73:13:92:d1:79:ad:68:eb:
23:1b:8b:75:bd:c6:65:ab:3a:99:05:b5:8f:c5:9e:
bf:85:00:71:ce:c6:ab:f8:82:bf:08:6f:b4:bf:b7:
43:aa:f8:f1:34:85:81:76:98:e6:2c:dc:5b:77:0f:
01:bd:07:f0:16:73:69:34:4a:fd:95:ef:77:0e:e0:
0c:b5:3a:9a:85:83:d5:9a:92:f0:ae:9e:13:98:9a:
93:47:eb:fe:d7:a6:54:7f:0a:59:98:ba:35:df:ca:
1a:01:e4:43:58:f7:5b:e2:0b:81:17:ff:77:90:92:
ee:dd:89:c5:20:33:29:10:59:35:4e:55:72:30:ef:
b4:8c:6c:7c:39:9a:e6:b0:6f:82:ab:22:aa:74:9e:
e6:ba:fe:e1:36:a4:83:87:95:52:38:4e:cc:3b:f2:
36:6d:a8:46:c4:7a:b2:15:fe:f0:80:e6:db:ae:44:
55:83:17:5e:ea:23:8e:e1:87:81:46:2f:ce:11:98:
6c:e2:4e:12:61:e9:c5:ac:8f:f4:31:5b:4a:ad:ac:
86:94:6e:cd:62:cf:3e:dc:44:c1:7f:14:66:74:18:
e9:d3:18:0c:e3:09:28:1e:81:bf:e1:f2:db:9b:03:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:E5:2D:20:03:40:3A:5A:8A:0F:56:F1:96:5D:56:96:33:62:1D
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d2:34:9c:da:81:3c:71:32:36:df:9a:60:ff:63:3f:58:eb:
18:5f:46:c5:1d:e5:ca:da:f2:46:18:35:aa:7f:b2:7f:ec:fc:
c2:9f:8d:80:a4:20:5c:01:67:c0:a3:a7:ae:39:59:27:25:3c:
35:d7:8f:37:31:fe:8e:d8:2d:75:a9:5c:ad:7d:a2:4d:cf:51:
46:e1:af:4c:c5:80:69:49:14:2e:22:06:ba:81:c1:db:bf:1a:
f4:2f:60:3b:bf:cb:ce:58:3f:55:23:24:38:47:f4:a6:4f:41:
15:84:71:a8:d0:31:97:bb:d8:69:99:84:15:31:34:02:36:2e:
ed:06:ba:8f:12:e8:aa:70:55:54:0a:fe:ff:70:d7:28:71:95:
45:59:46:cc:04:87:a6:d9:c5:f1:0c:96:75:0e:4d:57:6d:bc:
0c:19:c0:0f:cf:bc:60:66:10:51:f2:ca:e4:60:da:7f:63:eb:
a5:b3:39:b2:68:c1:43:b6:34:06:74:0b:65:63:e8:ee:26:7e:
be:53:5f:26:79:21:c1:3d:1b:75:12:58:62:23:d0:90:57:86:
92:d8:c1:73:b1:de:63:ad:91:5f:2c:8a:4e:2b:c3:48:61:79:
77:f6:ab:3f:8c:a5:c9:5d:3c:9c:7b:19:46:ec:a4:37:70:3e:
83:da:12:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hLNP47LSNSpVe+hFn2fZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NzgyMWE3Yzg3NjFlMDgxMjFlNzBjOWZmNDJmZjliNmFk
MzRlNTEwHhcNMjUwMTMxMDQwMDQ2WhcNMjUwMjAxMDQwMDQ2WjAzMTEwLwYDVQQD
Eyg2NzFiZTUyZDIwMDM0MDNhNWE4YTBmNTZmMTk2NWQ1Njk2MzM2MjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxUSwtJnt81robYKdAuxcgLV9wCS
cxOS0XmtaOsjG4t1vcZlqzqZBbWPxZ6/hQBxzsar+IK/CG+0v7dDqvjxNIWBdpjm
LNxbdw8BvQfwFnNpNEr9le93DuAMtTqahYPVmpLwrp4TmJqTR+v+16ZUfwpZmLo1
38oaAeRDWPdb4guBF/93kJLu3YnFIDMpEFk1TlVyMO+0jGx8OZrmsG+CqyKqdJ7m
uv7hNqSDh5VSOE7MO/I2bahGxHqyFf7wgObbrkRVgxde6iOO4YeBRi/OEZhs4k4S
YenFrI/0MVtKrayGlG7NYs8+3ETBfxRmdBjp0xgM4wkoHoG/4fLbmwOdKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcb5S0gA0A6WooPVvGWXVaWM2IdMB8GA1UdIwQY
MBaAFNh4IafIdh4IEh5wyf9C/5tq005RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMt
NWFhNjIwYTgxMTQ5LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMtNWFhNjIwYTgxMTQ5
LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNI0nNqB
PHEyNt+aYP9jP1jrGF9GxR3lytryRhg1qn+yf+z8wp+NgKQgXAFnwKOnrjlZJyU8
NdePNzH+jtgtdalcrX2iTc9RRuGvTMWAaUkULiIGuoHB278a9C9gO7/Lzlg/VSMk
OEf0pk9BFYRxqNAxl7vYaZmEFTE0AjYu7Qa6jxLoqnBVVAr+/3DXKHGVRVlGzASH
ptnF8QyWdQ5NV228DBnAD8+8YGYQUfLK5GDaf2PrpbM5smjBQ7Y0BnQLZWPo7iZ+
vlNfJnkhwT0bdRJYYiPQkFeGktjBc7HeY62RXyyKTivDSGF5d/arP4ylyV08nHsZ
RuykN3A+g9oSIA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:46 2025 by rpki-client on console-fra.rpki-client.org