Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
File: sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json)
Hash identifier: i5RunFy3tRnbruHz3F7F7Ei+NpZcf+yKpbPL/++loQA=
Subject key identifier: 3C:5C:E8:7D:92:12:F1:0A:6E:6C:A3:95:67:EC:FF:A0:21:A0:DF:B1
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial: 0194BA847E8215108A2E90F9CADD818E9E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
Manifest number: 0A2D
Signing time: Fri 31 Jan 2025 04:00:32 +0000
Manifest this update: Fri 31 Jan 2025 04:00:32 +0000
Manifest next update: Sat 01 Feb 2025 04:00:32 +0000
Files and hashes: 1: qrqtK-ZhNnqsmvUdjEvFxU-EYdM.roa (hash: w1CKR1mGTdMnfdWKUqyIUV2nyHBupF+j5wpw/8wUJ44=)
2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: VKeKkZVvZiV7ELj8iCfTyWSpraRh3OwfASWcMzKutEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:7e:82:15:10:8a:2e:90:f9:ca:dd:81:8e:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Validity
Not Before: Jan 31 04:00:32 2025 GMT
Not After : Feb 1 04:00:32 2025 GMT
Subject: CN=3c5ce87d9212f10a6e6ca39567ecffa021a0dfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:70:c0:78:21:da:de:62:e1:a7:b0:ed:f5:
77:44:18:03:86:a3:ee:ac:41:59:0a:08:b4:9f:1d:
c6:73:92:99:cc:0f:fc:e9:ab:93:22:50:77:d2:76:
2c:d2:c7:84:26:09:12:4d:64:14:be:2f:a1:9a:7c:
5c:21:e0:11:e2:9e:9f:e0:e8:69:04:51:6b:f8:c6:
c3:90:03:58:bc:d9:17:cb:7e:f0:f4:72:8e:6d:07:
48:f6:4d:7a:d3:0f:da:a8:5f:6b:88:6e:e3:22:56:
d9:3a:ad:4a:ef:84:f3:fa:26:81:03:67:8a:a1:f0:
25:94:af:a3:fd:d9:00:b4:43:29:59:6f:f9:f1:d2:
bd:4c:7a:b2:7e:e4:8f:7c:8c:38:0f:96:a7:29:1e:
c5:bc:56:e0:8c:84:f5:7e:00:49:97:57:95:22:68:
fa:19:8b:a7:ae:f2:39:56:cd:6a:d8:0a:99:a2:5e:
54:89:71:4a:be:9a:11:2c:77:b8:32:fe:6f:0e:a0:
09:0e:b5:74:b5:57:ff:bc:46:31:b9:57:91:1c:1a:
54:68:e0:d2:0d:85:46:06:a9:15:e3:de:53:b4:d7:
a6:e9:30:e1:a2:3e:4d:1f:b6:be:c3:98:e1:58:9b:
47:1d:3a:37:69:52:d9:e3:82:36:5f:e4:6d:ed:ce:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5C:E8:7D:92:12:F1:0A:6E:6C:A3:95:67:EC:FF:A0:21:A0:DF:B1
X509v3 Authority Key Identifier:
keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8d:0c:d8:c6:ec:f4:c1:63:13:64:34:bf:a3:8b:8c:bf:34:
4d:dc:85:6d:2f:77:da:e8:0d:47:e9:b8:f9:24:8f:a7:4a:2e:
f3:07:40:c2:b9:e6:57:c6:86:28:37:36:45:86:2d:85:e9:6b:
22:59:bc:50:8f:d8:34:fb:39:17:db:cb:5c:1a:1a:3d:08:06:
31:c0:5c:68:44:70:12:db:03:03:9f:6f:4f:24:55:5e:46:4b:
15:e4:b4:d5:34:0a:d7:e7:06:c3:2c:29:48:c9:c6:6e:3d:96:
ff:c4:85:45:eb:05:a1:1a:cc:77:ff:fd:40:39:fc:54:60:d0:
e1:66:e6:70:51:0a:6f:86:bf:87:07:d5:b3:5d:45:98:84:69:
ff:fd:f5:a5:66:5d:e4:1a:80:2b:6f:0d:76:88:cc:af:c4:0a:
2b:c6:e5:df:84:d4:06:04:b2:67:d5:29:a1:cb:c7:91:4b:c9:
3c:7e:b1:5f:86:dc:02:d9:4f:0b:dc:a6:2f:25:22:ff:f0:52:
7d:0d:b7:90:27:cf:a3:a2:62:a8:27:90:3c:a9:55:29:33:78:
5c:f9:31:16:c0:c4:c1:89:ba:af:0a:98:79:6d:86:2e:10:19:
23:88:5f:1f:eb:7a:92:b2:21:2f:64:0d:b1:4b:08:6d:f1:b4:
46:d0:c3:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hH6CFRCKLpD5yt2Bjp4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMzQwMjUxZjE4MjYzNDdmNGU5NjQ1ZjY4MjRkM2I5M2Y0
N2U1ZGUwHhcNMjUwMTMxMDQwMDMyWhcNMjUwMjAxMDQwMDMyWjAzMTEwLwYDVQQD
EygzYzVjZTg3ZDkyMTJmMTBhNmU2Y2EzOTU2N2VjZmZhMDIxYTBkZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKxwwHgh2t5i4aew7fV3RBgDhqPu
rEFZCgi0nx3Gc5KZzA/86auTIlB30nYs0seEJgkSTWQUvi+hmnxcIeAR4p6f4Ohp
BFFr+MbDkANYvNkXy37w9HKObQdI9k160w/aqF9riG7jIlbZOq1K74Tz+iaBA2eK
ofAllK+j/dkAtEMpWW/58dK9THqyfuSPfIw4D5anKR7FvFbgjIT1fgBJl1eVImj6
GYunrvI5Vs1q2AqZol5UiXFKvpoRLHe4Mv5vDqAJDrV0tVf/vEYxuVeRHBpUaODS
DYVGBqkV495TtNem6TDhoj5NH7a+w5jhWJtHHTo3aVLZ44I2X+Rt7c4CmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxc6H2SEvEKbmyjlWfs/6AhoN+xMB8GA1UdIwQY
MBaAFLA0AlHxgmNH9OlkX2gk07k/R+XeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mNTIxMGQtMDU5MC00M2EzLTllZWQt
NmE4MzU2M2I2NTViLzEvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mNTIxMGQtMDU5MC00M2EzLTllZWQtNmE4MzU2M2I2NTVi
LzEvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH40M2Mbs
9MFjE2Q0v6OLjL80TdyFbS932ugNR+m4+SSPp0ou8wdAwrnmV8aGKDc2RYYthelr
Ilm8UI/YNPs5F9vLXBoaPQgGMcBcaERwEtsDA59vTyRVXkZLFeS01TQK1+cGwywp
SMnGbj2W/8SFResFoRrMd//9QDn8VGDQ4WbmcFEKb4a/hwfVs11FmIRp//31pWZd
5BqAK28NdojMr8QKK8bl34TUBgSyZ9UpocvHkUvJPH6xX4bcAtlPC9ymLyUi//BS
fQ23kCfPo6JiqCeQPKlVKTN4XPkxFsDEwYm6rwqYeW2GLhAZI4hfH+t6krIhL2QN
sUsIbfG0RtDDqw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:52 2025 by rpki-client on console-fra.rpki-client.org