Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json)
Hash identifier: 3jLyjz+1S3jXTrsjGDASuzTPNYa3hoe62smZI3MN33Q=
Subject key identifier: 66:72:94:02:08:70:30:52:A7:26:54:E8:3F:21:E2:54:8F:27:B7:58
Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
Certificate issuer: /CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Certificate serial: 0194C463CA4320B5E6D0B37E9D6E1C9AF531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
Manifest number: 34
Signing time: Sun 02 Feb 2025 02:01:01 +0000
Manifest this update: Sun 02 Feb 2025 02:01:01 +0000
Manifest next update: Mon 03 Feb 2025 02:01:01 +0000
Files and hashes: 1: MaMIYt08Tc0Dvw5CdW33aL4DYlE.roa (hash: 1yCq3fhsKBl5S18vVeljQHZ1fPWzPn1J4kkG7WWFZZc=)
2: jzoaRST14iVv_bSGhulsr5_HKjg.roa (hash: eDucU+vORvsLhsrcVm/yMIU0JKeTCq2CqXsu5GoLiJA=)
3: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: 1hjfpmZuztbwBgm0rRT1mS7/gwudc/M8fazfd/zuoco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:ca:43:20:b5:e6:d0:b3:7e:9d:6e:1c:9a:f5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Validity
Not Before: Feb 2 02:01:01 2025 GMT
Not After : Feb 3 02:01:01 2025 GMT
Subject: CN=6672940208703052a72654e83f21e2548f27b758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a6:c1:ef:75:e7:7d:b9:70:a0:f8:52:d1:e6:
eb:b2:d1:e7:24:b5:33:da:1b:aa:7b:03:ef:6c:c8:
8e:37:3b:22:de:8f:08:47:f0:6a:8d:d4:cc:cf:99:
5a:69:87:a0:07:24:65:fb:2c:12:f4:33:06:47:30:
e2:6a:5b:a5:8b:32:22:ca:dd:3a:a9:a1:7f:7b:57:
35:c2:53:4e:14:bb:ff:91:61:a4:d4:ec:98:19:17:
55:e0:0d:a4:45:f7:cc:d1:55:f9:a7:9d:66:cf:fd:
6c:b8:8c:1b:29:03:0f:ed:57:1e:c1:ef:be:11:51:
58:99:98:a9:fc:06:b9:11:c0:33:5a:fa:e5:db:78:
b6:ab:76:22:ab:fc:48:ad:3e:5f:57:64:46:87:df:
f7:13:f2:ba:30:ed:3a:5a:5e:0b:b2:d4:e2:84:14:
9e:8b:5a:db:c8:78:63:74:f3:65:27:ea:42:bd:53:
51:aa:b6:46:9d:a6:9c:2e:10:82:35:09:48:b7:35:
aa:51:94:62:6a:71:ab:6d:96:bf:0d:39:a2:7f:8f:
15:a6:02:52:6e:5f:83:81:b3:ac:f6:84:ac:48:33:
60:ed:4f:99:df:54:e3:3c:cd:f5:52:78:e1:d7:92:
31:38:44:1f:d3:56:e9:3c:c3:ec:b5:b1:1d:bd:e2:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:72:94:02:08:70:30:52:A7:26:54:E8:3F:21:E2:54:8F:27:B7:58
X509v3 Authority Key Identifier:
keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:87:1a:f6:e0:27:a7:e5:65:79:0d:b7:71:27:4b:2b:83:54:
dd:5e:23:da:e1:39:4f:7a:a9:d5:3a:25:08:93:4e:1d:61:33:
e8:c4:3c:f4:2e:8a:cc:1b:8a:83:e1:97:85:4c:af:de:11:99:
71:f7:46:e8:38:7e:bc:d6:a8:30:5c:0e:d7:05:a9:ab:1e:57:
37:60:30:e5:25:16:62:f9:47:b0:2c:ef:ff:69:94:64:fb:4e:
4b:90:67:ff:36:63:17:1a:7e:30:48:fa:15:9c:f6:95:45:70:
92:4d:8b:89:5d:ce:8f:e1:11:35:15:b0:3e:33:1e:b6:ac:fd:
25:36:28:12:6e:58:9f:9f:5c:57:28:6d:b1:9d:08:e9:0a:17:
f7:13:59:94:3f:69:a5:0b:1a:26:ac:bb:19:01:cc:70:fb:6b:
2c:76:95:d4:4d:07:d2:1c:a7:f1:32:4f:f6:40:62:cf:28:21:
c2:b8:01:59:78:c7:01:7b:4d:df:06:b9:f8:49:95:d2:22:ea:
15:7a:9c:1f:cc:a7:74:3f:dd:e0:07:f0:07:50:96:54:a3:9b:
c4:a8:29:09:f5:5d:4a:6f:0c:95:7b:6d:07:a6:65:21:2e:8f:
ac:b8:30:80:4b:3b:15:3d:31:45:59:0c:e0:b5:6a:6b:9b:d0:
fe:45:bf:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY8pDILXm0LN+nW4cmvUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNWExNzI3MWQ5OWNmMTViNzNlY2M2NTg2NzMxNDNjMjhl
MjA3ZWQwHhcNMjUwMjAyMDIwMTAxWhcNMjUwMjAzMDIwMTAxWjAzMTEwLwYDVQQD
Eyg2NjcyOTQwMjA4NzAzMDUyYTcyNjU0ZTgzZjIxZTI1NDhmMjdiNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96bB73XnfblwoPhS0ebrstHnJLUz
2huqewPvbMiONzsi3o8IR/BqjdTMz5laaYegByRl+ywS9DMGRzDialulizIiyt06
qaF/e1c1wlNOFLv/kWGk1OyYGRdV4A2kRffM0VX5p51mz/1suIwbKQMP7Vcewe++
EVFYmZip/Aa5EcAzWvrl23i2q3Yiq/xIrT5fV2RGh9/3E/K6MO06Wl4LstTihBSe
i1rbyHhjdPNlJ+pCvVNRqrZGnaacLhCCNQlItzWqUZRianGrbZa/DTmif48VpgJS
bl+DgbOs9oSsSDNg7U+Z31TjPM31Unjh15IxOEQf01bpPMPstbEdveIGXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZylAIIcDBSpyZU6D8h4lSPJ7dYMB8GA1UdIwQY
MBaAFJ1aFycdmc8Vtz7MZYZzFDwo4gftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZvWEp4Mlp6eFczUHN4bGhuTVVQQ2ppQi0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85MDg5NTYtYzVlNi00YTNlLTlmMTct
YTE0Y2EwZWMxYzFhLzEvblZvWEp4Mlp6eFczUHN4bGhuTVVQQ2ppQi0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My85MDg5NTYtYzVlNi00YTNlLTlmMTctYTE0Y2EwZWMxYzFh
LzEvblZvWEp4Mlp6eFczUHN4bGhuTVVQQ2ppQi0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4ca9uAn
p+VleQ23cSdLK4NU3V4j2uE5T3qp1TolCJNOHWEz6MQ89C6KzBuKg+GXhUyv3hGZ
cfdG6Dh+vNaoMFwO1wWpqx5XN2Aw5SUWYvlHsCzv/2mUZPtOS5Bn/zZjFxp+MEj6
FZz2lUVwkk2LiV3Oj+ERNRWwPjMetqz9JTYoEm5Yn59cVyhtsZ0I6QoX9xNZlD9p
pQsaJqy7GQHMcPtrLHaV1E0H0hyn8TJP9kBizyghwrgBWXjHAXtN3wa5+EmV0iLq
FXqcH8yndD/d4AfwB1CWVKObxKgpCfVdSm8MlXttB6ZlIS6PrLgwgEs7FT0xRVkM
4LVqa5vQ/kW/iA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:06 2025 by rpki-client