Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
File: lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json)
Hash identifier: /cjqc433pKgfsNpzlJAMltsBMnNW9/1oXhyEJxM5YfE=
Subject key identifier: FB:D1:95:90:A5:E1:98:59:AC:7A:13:EC:CA:1A:47:0D:BC:67:4F:D3
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 0194BB9722E7ACC97D65C02D6B6640A9ADED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
Manifest number: 128A
Signing time: Fri 31 Jan 2025 09:00:31 +0000
Manifest this update: Fri 31 Jan 2025 09:00:31 +0000
Manifest next update: Sat 01 Feb 2025 09:00:31 +0000
Files and hashes: 1: 3srpGduL_zOjHqnp8WJJguH4g-0.roa (hash: 0YdFBJ148GiXs/92XtOcHZ9J9KnY83sjjDOEJj+352E=)
2: GWunLY-bXSErZU3FWmnV4-5vVKY.roa (hash: xPAOKfueV0x+XEoysYucTWWsNf2sG+B7HRMkzQ4aBw8=)
3: UAmBaPfRxh1WkNPxD7uTu4XaIgU.roa (hash: 1EAW6HIPjECH2TE4ZL4WUIb5JaVxWeaXeK/6ii8nmQQ=)
4: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: MvRYlMckZDP/B9vSWqVXTVUM5/OUYEGzp2NNAJTqN8A=)
5: qFlx1w2bk_8ZzG6kySrbr5Cw93c.roa (hash: Qx9Q5kDChlIU2guBfz5UZaBHybIZXsMnUw//pyzX4sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:22:e7:ac:c9:7d:65:c0:2d:6b:66:40:a9:ad:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Jan 31 09:00:31 2025 GMT
Not After : Feb 1 09:00:31 2025 GMT
Subject: CN=fbd19590a5e19859ac7a13ecca1a470dbc674fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:73:47:49:1f:fd:d7:7b:d2:48:6b:73:24:
3e:7c:5b:cd:26:c4:3a:fc:fb:fa:cb:00:02:0f:0b:
e1:2c:08:c1:c1:89:3a:c7:3f:11:37:58:a5:ce:dd:
3e:30:69:bf:24:4a:13:71:b7:ec:cd:9a:6c:23:69:
ee:ec:7e:95:85:f1:e3:17:e3:dd:c3:88:5d:3f:91:
d1:dc:ea:f0:40:d3:bf:0e:5e:2b:13:41:29:7d:5a:
51:65:0b:1a:0d:f9:f6:98:18:fe:15:f2:53:22:b6:
ff:bc:77:f9:6d:94:29:25:cd:0f:7d:d1:fb:61:b3:
fd:9f:2d:82:e5:bb:d1:88:83:e1:b8:0a:9c:e8:ee:
d4:a7:7e:e5:36:25:68:c7:b3:cd:9b:ee:4a:c7:9f:
77:09:87:ab:4e:5e:96:1a:df:11:c3:99:1b:6a:b1:
f3:ea:78:9d:24:b3:d6:00:20:5a:29:98:ee:99:5b:
de:ff:31:27:7d:91:4b:ab:41:ef:ac:e3:10:16:bf:
08:de:a2:6a:a2:61:35:4f:bb:bc:36:cc:3a:08:c3:
4a:94:f3:3d:81:72:a2:7e:d5:f7:37:b3:ee:58:4c:
4d:44:5f:bc:a6:7c:4b:75:5d:e2:9b:7e:6a:9f:48:
c6:49:85:7c:d1:38:1f:e0:f7:67:84:60:97:5b:4c:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D1:95:90:A5:E1:98:59:AC:7A:13:EC:CA:1A:47:0D:BC:67:4F:D3
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:83:5d:ea:46:f9:28:62:8d:b6:77:f0:44:83:79:d5:97:5a:
fd:07:96:55:7e:09:bc:76:c7:4d:92:17:04:c0:8d:5c:bd:1d:
28:2f:3b:05:3e:6c:a6:01:07:86:7d:4e:2e:66:5d:2f:58:22:
6a:7b:e5:b3:88:af:12:76:2f:80:ee:7f:93:31:28:29:60:81:
34:1d:15:5a:cd:11:d6:70:5d:6a:e3:e0:f5:f2:f7:33:a0:13:
f0:3c:b7:bb:86:53:f4:1d:42:ed:8e:a5:59:e2:02:db:fc:79:
7a:0d:04:04:4a:31:d2:0e:09:a5:5a:48:9c:73:ec:32:cf:c8:
01:5c:78:48:3f:f2:dd:fb:43:1e:98:dd:c2:c6:f9:2c:0d:0d:
6f:f6:c1:4a:1f:20:e3:41:9d:87:90:d5:a7:e3:87:15:4f:f7:
95:87:aa:8d:af:a6:9e:48:a4:f2:46:ac:0b:fb:08:a7:1a:33:
c4:dd:87:3b:2e:62:80:2a:83:d0:37:cc:bd:15:f0:8b:cd:c0:
42:ae:84:53:9b:c0:43:67:13:fb:b3:c6:29:3e:4b:66:96:aa:
03:5c:91:5f:bb:c5:0e:f0:ae:f3:cb:36:f8:07:60:28:c3:f1:
31:13:77:d2:c5:1c:2d:37:d8:6c:8e:22:81:6d:de:49:33:26:
05:58:21:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lyLnrMl9ZcAta2ZAqa3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ODhkOGI0YzdhYTQ1YTliMmNkNzM3YzYxNDg3MWViNzE4
MWJhYmUwHhcNMjUwMTMxMDkwMDMxWhcNMjUwMjAxMDkwMDMxWjAzMTEwLwYDVQQD
EyhmYmQxOTU5MGE1ZTE5ODU5YWM3YTEzZWNjYTFhNDcwZGJjNjc0ZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviNzR0kf/dd70khrcyQ+fFvNJsQ6
/Pv6ywACDwvhLAjBwYk6xz8RN1ilzt0+MGm/JEoTcbfszZpsI2nu7H6VhfHjF+Pd
w4hdP5HR3OrwQNO/Dl4rE0EpfVpRZQsaDfn2mBj+FfJTIrb/vHf5bZQpJc0PfdH7
YbP9ny2C5bvRiIPhuAqc6O7Up37lNiVox7PNm+5Kx593CYerTl6WGt8Rw5kbarHz
6nidJLPWACBaKZjumVve/zEnfZFLq0HvrOMQFr8I3qJqomE1T7u8Nsw6CMNKlPM9
gXKiftX3N7PuWExNRF+8pnxLdV3im35qn0jGSYV80Tgf4PdnhGCXW0z/7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvRlZCl4ZhZrHoT7MoaRw28Z0/TMB8GA1UdIwQY
MBaAFJWI2LTHqkWpss1zfGFIcetxgbq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYt
YTQ4OGJkNDIwMjRmLzEvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYtYTQ4OGJkNDIwMjRm
LzEvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1oNd6kb5
KGKNtnfwRIN51Zda/QeWVX4JvHbHTZIXBMCNXL0dKC87BT5spgEHhn1OLmZdL1gi
anvls4ivEnYvgO5/kzEoKWCBNB0VWs0R1nBdauPg9fL3M6AT8Dy3u4ZT9B1C7Y6l
WeIC2/x5eg0EBEox0g4JpVpInHPsMs/IAVx4SD/y3ftDHpjdwsb5LA0Nb/bBSh8g
40Gdh5DVp+OHFU/3lYeqja+mnkik8kasC/sIpxozxN2HOy5igCqD0DfMvRXwi83A
Qq6EU5vAQ2cT+7PGKT5LZpaqA1yRX7vFDvCu88s2+AdgKMPxMRN30sUcLTfYbI4i
gW3eSTMmBVgh8Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:14 2025 by rpki-client on console-fra.rpki-client.org