Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier: K6c/Oa3nTYfLCyfC8kUQc2uxg8jKrnnbvFEVW3sVnnM=
Subject key identifier: B5:F7:97:EB:D6:A8:F2:15:A1:56:18:BE:61:4F:24:CA:69:94:A7:7C
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial: 0194BAF261EF99DC5F9C3BB24F49907E482A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 06:00:34 +0000
Manifest this update: Fri 31 Jan 2025 06:00:34 +0000
Manifest next update: Sat 01 Feb 2025 06:00:34 +0000
Files and hashes: 1: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: GQE/gT4c5GX/Yfho/1KFDyZHXSXG+4M2+ztdrTC6lfU=)
2: r7a6D_FkR9xhVp2w9lPW31aBNv4.roa (hash: XnCRXOHC4FDX1dXWIOiOTBOBjGntvWRiOFTSpLk90Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:61:ef:99:dc:5f:9c:3b:b2:4f:49:90:7e:48:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Validity
Not Before: Jan 31 06:00:34 2025 GMT
Not After : Feb 1 06:00:34 2025 GMT
Subject: CN=b5f797ebd6a8f215a15618be614f24ca6994a77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:79:a1:81:fa:fb:d4:62:c4:fe:ca:5f:4e:
f8:d9:da:3c:26:8e:d2:7c:fc:e9:63:1e:a3:c7:2e:
ba:11:bf:c1:ce:16:78:8d:fb:87:53:1f:78:03:6b:
d3:37:8a:1d:24:6f:b8:22:9b:04:3e:e9:64:83:32:
76:d2:fe:ae:51:8f:54:72:74:bd:2b:57:ba:d8:e8:
10:31:62:c5:be:8e:db:02:08:f4:af:dc:24:c8:d3:
c2:cd:b2:54:71:d5:9e:ec:d9:80:60:5e:12:ea:7c:
cb:30:1f:fa:b2:9e:41:ee:33:24:2d:25:2b:b6:55:
d4:14:81:86:dc:a9:b0:c7:fe:d6:f8:0f:41:5b:82:
ef:94:9a:32:54:a9:7e:5c:6e:b8:a5:14:0e:5d:d0:
30:4e:a9:a9:87:23:82:6f:bb:21:9c:63:cd:17:3e:
1e:4d:e5:25:ee:7a:67:0c:b2:79:db:33:57:c9:04:
a0:23:d9:6c:e9:79:62:db:7f:12:04:14:2d:00:0d:
8b:95:4d:7c:83:7e:ed:e2:86:01:a5:5f:b0:62:fa:
c4:1b:c6:dd:7f:04:dd:7c:20:31:ad:23:21:b3:37:
f3:4a:ea:aa:ca:ba:a9:87:9c:6f:16:b5:17:8b:b4:
cc:5a:87:89:6e:a4:6e:99:5e:cd:8c:9e:7a:d8:a7:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F7:97:EB:D6:A8:F2:15:A1:56:18:BE:61:4F:24:CA:69:94:A7:7C
X509v3 Authority Key Identifier:
keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:28:31:d2:b6:e7:c2:9f:05:ae:d5:97:39:be:28:57:77:a8:
a6:ac:63:d5:71:07:bd:04:4b:f8:10:04:47:5e:a2:6d:b1:0a:
c3:d1:ed:87:ae:52:94:34:2c:aa:28:b2:c0:45:e1:d2:bb:d7:
05:f1:2e:30:89:ab:5d:df:a9:f8:12:f9:21:22:3c:53:33:4a:
df:a5:69:c1:70:78:9e:b9:50:92:c4:01:80:40:92:af:27:c9:
77:97:b9:59:1c:a7:33:39:44:13:e0:c7:bc:b9:7f:cc:b7:02:
b7:a4:9b:65:f5:4f:8d:7c:61:dc:08:72:e3:30:66:8c:9f:bc:
fd:fc:95:df:b7:10:fc:ad:c2:4d:2b:2c:f9:86:9f:f7:c4:c9:
a4:76:c8:cc:67:0c:fa:36:b0:f0:3b:0f:5d:8d:0c:2e:02:04:
a5:86:ea:70:e8:1b:df:2d:35:fd:b0:b0:64:4b:09:a9:3d:9d:
8f:3c:ff:fd:d9:8f:40:88:f7:68:50:39:f6:c7:6c:10:54:25:
89:96:93:74:13:56:f7:5d:60:e3:ae:02:60:3d:93:15:a7:27:
f4:43:4c:81:64:94:51:39:92:52:6a:e0:96:ce:e1:3d:35:52:
09:ee:b6:55:59:91:80:37:8a:1e:99:ce:22:7b:86:5f:7c:81:
bc:f5:bf:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68mHvmdxfnDuyT0mQfkgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjRiNWI3YjIxY2FlYmYzZDIwODA5ZjZjNTcwNTk5ZjFk
NjA0NjgwHhcNMjUwMTMxMDYwMDM0WhcNMjUwMjAxMDYwMDM0WjAzMTEwLwYDVQQD
EyhiNWY3OTdlYmQ2YThmMjE1YTE1NjE4YmU2MTRmMjRjYTY5OTRhNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5d5oYH6+9RixP7KX0742do8Jo7S
fPzpYx6jxy66Eb/BzhZ4jfuHUx94A2vTN4odJG+4IpsEPulkgzJ20v6uUY9UcnS9
K1e62OgQMWLFvo7bAgj0r9wkyNPCzbJUcdWe7NmAYF4S6nzLMB/6sp5B7jMkLSUr
tlXUFIGG3Kmwx/7W+A9BW4LvlJoyVKl+XG64pRQOXdAwTqmphyOCb7shnGPNFz4e
TeUl7npnDLJ52zNXyQSgI9ls6Xli238SBBQtAA2LlU18g37t4oYBpV+wYvrEG8bd
fwTdfCAxrSMhszfzSuqqyrqph5xvFrUXi7TMWoeJbqRumV7NjJ562KdqywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX3l+vWqPIVoVYYvmFPJMpplKd8MB8GA1UdIwQY
MBaAFDO0tbeyHK6/PSCAn2xXBZnx1gRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMt
ODYyMzMzNWMwZWUwLzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84NDZkNmUtMDRlYy00MjE5LTgyMjMtODYyMzMzNWMwZWUw
LzEvTTdTMXQ3SWNycjg5SUlDZmJGY0ZtZkhXQkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkygx0rbn
wp8FrtWXOb4oV3eopqxj1XEHvQRL+BAER16ibbEKw9Hth65SlDQsqiiywEXh0rvX
BfEuMImrXd+p+BL5ISI8UzNK36VpwXB4nrlQksQBgECSryfJd5e5WRynMzlEE+DH
vLl/zLcCt6SbZfVPjXxh3Ahy4zBmjJ+8/fyV37cQ/K3CTSss+Yaf98TJpHbIzGcM
+jaw8DsPXY0MLgIEpYbqcOgb3y01/bCwZEsJqT2djzz//dmPQIj3aFA59sdsEFQl
iZaTdBNW911g464CYD2TFacn9ENMgWSUUTmSUmrgls7hPTVSCe62VVmRgDeKHpnO
InuGX3yBvPW/EQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:26 2025 by rpki-client on console-fra.rpki-client.org