Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
File: T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json)
Hash identifier: J3Yj54BHMB1YHpflZuqDNqU2dp5PEAiM90PnuL0Yolo=
Subject key identifier: BB:E2:2C:D3:F9:E0:C5:BD:19:5A:77:94:47:9E:97:0F:F3:1F:9E:54
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Certificate issuer: /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial: 0194BB5FE08F5D456FBF5B80445F31CEB8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
Manifest number: 03CC
Signing time: Fri 31 Jan 2025 08:00:10 +0000
Manifest this update: Fri 31 Jan 2025 08:00:10 +0000
Manifest next update: Sat 01 Feb 2025 08:00:10 +0000
Files and hashes: 1: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: g8J3zP0+Fcpg/zcN9p0N1HPyrKZ3FvcCkwyYB8DbZo8=)
2: q0JCtn0ymXJ_44Fp2RsnS-aL5Os.roa (hash: ol9vwFP2kye7kweAuJ86LI17vpYzbBP1gC/LI4vVUEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e0:8f:5d:45:6f:bf:5b:80:44:5f:31:ce:b8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Validity
Not Before: Jan 31 08:00:10 2025 GMT
Not After : Feb 1 08:00:10 2025 GMT
Subject: CN=bbe22cd3f9e0c5bd195a7794479e970ff31f9e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:2b:4f:46:20:5a:99:6d:f3:4c:75:83:4e:
10:f5:2b:de:60:53:48:94:0f:ef:a6:5c:f4:0e:a8:
9b:4a:fc:79:64:d1:4e:23:a9:4d:c6:a1:29:6a:e6:
4f:a8:e4:6e:a6:27:61:34:c3:cf:e6:a0:0d:49:08:
6f:ef:ff:82:d3:07:ce:c1:63:26:15:d7:83:81:d2:
44:bb:bd:01:ef:96:3b:1e:59:dd:db:67:60:67:9a:
5e:61:00:ef:90:99:fd:91:50:6e:ce:35:9e:6c:61:
57:53:c5:d2:22:20:fe:0d:8f:d4:98:a4:ec:4e:82:
d4:ec:88:61:1f:40:ec:a3:3a:32:82:06:08:29:b7:
6f:23:17:86:a2:cd:2b:1e:2c:57:6b:4b:bc:0e:c3:
cf:d8:67:2a:08:4b:ef:17:d5:2c:82:65:d1:bc:89:
ff:e7:34:dc:8f:05:7f:71:03:b7:41:bc:ae:f8:25:
3c:00:ae:62:44:b8:84:04:2a:12:45:3e:e9:9a:95:
0f:b0:70:d2:fc:f3:63:93:af:05:6a:dc:d3:30:76:
ff:7c:7f:23:80:50:22:b1:e0:39:39:78:4e:bb:d9:
0e:cc:d2:b9:23:eb:6b:bb:59:4d:dc:ad:2a:90:43:
2b:c3:6a:74:a6:f6:3e:65:75:24:c1:3e:05:49:dd:
d5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E2:2C:D3:F9:E0:C5:BD:19:5A:77:94:47:9E:97:0F:F3:1F:9E:54
X509v3 Authority Key Identifier:
keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:89:0f:6e:b4:c7:c6:e9:8c:c5:d3:43:ce:48:dd:3d:a8:9d:
17:22:79:3b:5c:3c:cd:c6:1e:18:d6:83:20:82:1b:8f:a2:e7:
04:ae:f1:89:f7:83:df:a1:5f:57:16:10:8a:e3:27:98:ab:1e:
64:98:f2:dd:eb:6e:d8:f4:bd:4f:fe:4f:00:37:2d:db:e2:65:
63:39:55:a6:a9:88:b6:20:6c:34:48:c5:f8:90:39:5c:cc:6d:
c3:c1:47:18:ca:9c:36:92:fa:8f:cd:a4:31:cf:ed:b3:c3:e0:
d4:e5:04:b6:d7:46:69:aa:9a:ee:2c:ac:5a:a9:f6:12:4b:d6:
73:dc:46:a4:f8:bb:5d:c2:c6:14:b7:9e:40:7e:10:fc:75:25:
97:12:1e:c6:3d:a8:9d:d9:a5:9b:dd:6f:9f:06:9e:a1:2d:46:
ce:2b:df:e9:ca:f6:b3:2f:8c:31:82:89:60:54:76:c4:38:81:
82:c2:90:40:d7:ff:7c:80:b4:c5:dd:d8:98:ea:2f:a1:db:a6:
fb:b5:9e:1f:48:68:23:2d:04:b2:2d:8e:a2:01:db:8f:ef:79:
ea:ab:76:87:e4:bb:25:87:98:02:c3:91:b5:25:73:97:59:a8:
66:bf:a1:e2:f2:3a:ce:e9:ab:83:5f:40:bb:6e:6d:c6:ed:32:
65:8f:55:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X+CPXUVvv1uARF8xzrj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjY1NzZlY2RhMjUyNDZkZjcwZDdhNzJlMWNmZmZhZDg4
OGVhM2IwHhcNMjUwMTMxMDgwMDEwWhcNMjUwMjAxMDgwMDEwWjAzMTEwLwYDVQQD
EyhiYmUyMmNkM2Y5ZTBjNWJkMTk1YTc3OTQ0NzllOTcwZmYzMWY5ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MIrT0YgWplt80x1g04Q9SveYFNI
lA/vplz0DqibSvx5ZNFOI6lNxqEpauZPqORupidhNMPP5qANSQhv7/+C0wfOwWMm
FdeDgdJEu70B75Y7Hlnd22dgZ5peYQDvkJn9kVBuzjWebGFXU8XSIiD+DY/UmKTs
ToLU7IhhH0DsozoyggYIKbdvIxeGos0rHixXa0u8DsPP2GcqCEvvF9UsgmXRvIn/
5zTcjwV/cQO3Qbyu+CU8AK5iRLiEBCoSRT7pmpUPsHDS/PNjk68FatzTMHb/fH8j
gFAiseA5OXhOu9kOzNK5I+tru1lN3K0qkEMrw2p0pvY+ZXUkwT4FSd3V3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLviLNP54MW9GVp3lEeelw/zH55UMB8GA1UdIwQY
MBaAFE+2V27NolJG33DXpy4c//rYiOo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdaWGJzMmlVa2JmY05lbkxoel8tdGlJNmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81MDFlYmYtNWZmZC00Y2RhLWE2NmQt
MDYyZDcwZTNhYTIzLzEvVDdaWGJzMmlVa2JmY05lbkxoel8tdGlJNmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81MDFlYmYtNWZmZC00Y2RhLWE2NmQtMDYyZDcwZTNhYTIz
LzEvVDdaWGJzMmlVa2JmY05lbkxoel8tdGlJNmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWokPbrTH
xumMxdNDzkjdPaidFyJ5O1w8zcYeGNaDIIIbj6LnBK7xifeD36FfVxYQiuMnmKse
ZJjy3etu2PS9T/5PADct2+JlYzlVpqmItiBsNEjF+JA5XMxtw8FHGMqcNpL6j82k
Mc/ts8Pg1OUEttdGaaqa7iysWqn2EkvWc9xGpPi7XcLGFLeeQH4Q/HUllxIexj2o
ndmlm91vnwaeoS1Gzivf6cr2sy+MMYKJYFR2xDiBgsKQQNf/fIC0xd3YmOovodum
+7WeH0hoIy0Esi2OogHbj+956qt2h+S7JYeYAsORtSVzl1moZr+h4vI6zumrg19A
u25txu0yZY9V+Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:21 2025 by rpki-client on console-fra.rpki-client.org