Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft
File: vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft (raw, json)
Hash identifier: LgoLpQlWyuYzvzagb1lLIPWzr4DsAScUJ9ZVQi80X8Q=
Subject key identifier: 4A:3B:CE:19:91:1A:85:08:2F:01:AF:E4:07:02:DB:B2:CF:0C:9B:FC
Authority key identifier: BC:06:3D:65:05:34:AA:9F:06:93:1F:D8:ED:6E:0B:B2:76:EB:D3:BF
Certificate issuer: /CN=bc063d650534aa9f06931fd8ed6e0bb276ebd3bf
Certificate serial: 0194C3BEA7038D6FBCE25E61D74274F6A24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft
Manifest number: 142D
Signing time: Sat 01 Feb 2025 23:00:39 +0000
Manifest this update: Sat 01 Feb 2025 23:00:39 +0000
Manifest next update: Sun 02 Feb 2025 23:00:39 +0000
Files and hashes: 1: Il2poWeT4F_H4KiL-0HdiaMsadA.roa (hash: VrsL8H9loMqzLX65T7cvzeckeITcvwECmwnt6mshIP0=)
2: vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl (hash: P4TpgkOb6ldeFDqGOvd9o6WKZi11fLha6kjyyYwh2JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:a7:03:8d:6f:bc:e2:5e:61:d7:42:74:f6:a2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc063d650534aa9f06931fd8ed6e0bb276ebd3bf
Validity
Not Before: Feb 1 23:00:39 2025 GMT
Not After : Feb 2 23:00:39 2025 GMT
Subject: CN=4a3bce19911a85082f01afe40702dbb2cf0c9bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:c2:35:1f:14:0e:20:00:01:f8:19:55:0e:
c8:eb:30:98:f3:6a:34:21:f7:96:2a:15:e9:f8:f5:
7b:cd:e3:c7:ad:a7:bd:7d:78:3e:46:d5:38:89:d5:
8a:10:87:d0:34:df:7b:02:b4:c4:82:b3:4e:9b:ff:
42:62:f9:fc:f1:11:f6:c3:1d:60:2e:d7:49:22:59:
33:6c:be:fa:94:52:38:74:7e:5a:89:91:ea:65:b3:
aa:28:9a:ad:a0:ae:55:7f:8b:7e:7f:7a:60:00:0b:
82:87:96:bd:05:d7:4b:40:93:21:e1:c9:46:9a:05:
4e:e8:f9:79:fb:50:38:ac:a9:f1:74:6f:7f:a6:fc:
65:6b:24:f8:e2:2d:9c:bd:6b:7a:1a:ca:3e:71:c0:
de:bc:34:64:b7:13:5d:fd:1e:7a:b5:1a:96:64:46:
3c:1a:0d:ff:b9:71:12:7a:29:31:e2:9b:c5:6e:5e:
95:4d:fb:1d:18:18:49:0e:ec:6d:de:5e:3e:a2:c3:
22:26:8e:b5:e8:5a:48:ce:9e:29:82:30:7c:5f:5d:
92:ba:db:64:01:d5:3f:53:2c:41:44:f1:34:2b:bc:
5c:39:d6:e5:83:28:ec:8d:f6:f6:59:f7:35:36:ce:
54:b6:44:4e:3a:98:ca:f4:eb:16:27:f4:33:cc:6f:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3B:CE:19:91:1A:85:08:2F:01:AF:E4:07:02:DB:B2:CF:0C:9B:FC
X509v3 Authority Key Identifier:
keyid:BC:06:3D:65:05:34:AA:9F:06:93:1F:D8:ED:6E:0B:B2:76:EB:D3:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ba:aa:6a:af:5d:a8:c8:04:d6:04:3a:d5:1c:b5:4b:f8:b3:
cd:75:ee:3a:5d:7e:09:cc:7b:bb:21:2c:3e:af:02:d9:b5:e8:
d8:a3:e2:ee:9b:ea:88:cd:38:a3:9d:af:52:49:10:2d:8a:12:
72:40:7e:73:ca:5a:f4:ef:f5:3a:e5:0a:a5:c8:1b:9c:0d:49:
e4:0a:1e:e7:5f:3e:d0:62:8d:da:19:e7:5d:f1:c7:cc:90:9e:
aa:cc:d9:3c:c5:7f:58:ea:7e:e4:31:38:dc:c3:64:61:a1:c4:
59:7a:04:31:60:aa:8c:61:3c:db:c2:84:f2:1a:62:3c:ed:a3:
8f:23:65:40:73:0f:3d:a7:9d:a9:76:52:18:44:02:e0:e3:48:
70:e5:85:4b:49:20:c8:84:85:58:0d:e6:74:31:ab:72:e2:1e:
74:e1:63:7d:9f:f9:1b:0b:98:2c:b7:72:56:7e:71:3b:e4:54:
05:81:05:98:11:2c:4e:73:bc:02:c4:16:c7:f9:4e:10:a5:95:
fd:3f:bc:f1:be:93:a6:c0:78:2f:cc:a6:45:9d:2e:7d:58:af:
1f:34:b7:c2:a0:c4:2a:08:32:cc:8e:46:1b:22:2d:80:f1:00:
d2:b7:ff:55:30:68:3f:bf:2f:5d:40:ce:d2:25:48:8c:71:21:
56:ab:6f:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvqcDjW+84l5h10J09qJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMDYzZDY1MDUzNGFhOWYwNjkzMWZkOGVkNmUwYmIyNzZl
YmQzYmYwHhcNMjUwMjAxMjMwMDM5WhcNMjUwMjAyMjMwMDM5WjAzMTEwLwYDVQQD
Eyg0YTNiY2UxOTkxMWE4NTA4MmYwMWFmZTQwNzAyZGJiMmNmMGM5YmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0zCNR8UDiAAAfgZVQ7I6zCY82o0
IfeWKhXp+PV7zePHrae9fXg+RtU4idWKEIfQNN97ArTEgrNOm/9CYvn88RH2wx1g
LtdJIlkzbL76lFI4dH5aiZHqZbOqKJqtoK5Vf4t+f3pgAAuCh5a9BddLQJMh4clG
mgVO6Pl5+1A4rKnxdG9/pvxlayT44i2cvWt6Gso+ccDevDRktxNd/R56tRqWZEY8
Gg3/uXESeikx4pvFbl6VTfsdGBhJDuxt3l4+osMiJo616FpIzp4pgjB8X12Suttk
AdU/UyxBRPE0K7xcOdblgyjsjfb2Wfc1Ns5UtkROOpjK9OsWJ/QzzG9/JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo7zhmRGoUILwGv5AcC27LPDJv8MB8GA1UdIwQY
MBaAFLwGPWUFNKqfBpMf2O1uC7J269O/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkFZOVpRVTBxcDhHa3hfWTdXNExzbmJyMDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xNzk0ZTgtODk5OC00NTE0LWI3ZTEt
MjE2ZDI4OWYxNzY0LzEvdkFZOVpRVTBxcDhHa3hfWTdXNExzbmJyMDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xNzk0ZTgtODk5OC00NTE0LWI3ZTEtMjE2ZDI4OWYxNzY0
LzEvdkFZOVpRVTBxcDhHa3hfWTdXNExzbmJyMDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7qqaq9d
qMgE1gQ61Ry1S/izzXXuOl1+Ccx7uyEsPq8C2bXo2KPi7pvqiM04o52vUkkQLYoS
ckB+c8pa9O/1OuUKpcgbnA1J5Aoe518+0GKN2hnnXfHHzJCeqszZPMV/WOp+5DE4
3MNkYaHEWXoEMWCqjGE828KE8hpiPO2jjyNlQHMPPaedqXZSGEQC4ONIcOWFS0kg
yISFWA3mdDGrcuIedOFjfZ/5GwuYLLdyVn5xO+RUBYEFmBEsTnO8AsQWx/lOEKWV
/T+88b6TpsB4L8ymRZ0ufVivHzS3wqDEKggyzI5GGyItgPEA0rf/VTBoP78vXUDO
0iVIjHEhVqtv/Q==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:23 2025 by rpki-client