Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
File: 9rA2a7rqx7WITkJt-ACewnosYC4.mft (raw, json)
Hash identifier: sYW3OhjHgRAx9HmLEcey7WpKVPAJBoxiTrO3uyckjGQ=
Subject key identifier: 10:E1:A6:02:34:DC:A9:14:23:99:75:E1:38:92:23:AF:33:48:50:7A
Authority key identifier: F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
Certificate issuer: /CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Certificate serial: 0194BAF283AC8B288322CF371DF5DAF38D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
Manifest number: 031F
Signing time: Fri 31 Jan 2025 06:00:43 +0000
Manifest this update: Fri 31 Jan 2025 06:00:43 +0000
Manifest next update: Sat 01 Feb 2025 06:00:43 +0000
Files and hashes: 1: 9rA2a7rqx7WITkJt-ACewnosYC4.crl (hash: i2rlZyuDYRGziadBGOjMakjCUodaFySS5MRVfJL11pw=)
2: izm1O4S-x2UDeNY6fo1YhqW7N8g.roa (hash: tl5IuNJmLiqZ3agDxn5CXFUtrHRHejemwivyEs6+MfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:83:ac:8b:28:83:22:cf:37:1d:f5:da:f3:8d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Validity
Not Before: Jan 31 06:00:43 2025 GMT
Not After : Feb 1 06:00:43 2025 GMT
Subject: CN=10e1a60234dca914239975e1389223af3348507a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:eb:b0:8c:7d:79:eb:c9:0f:c7:4c:cc:63:97:
99:96:41:c7:d2:a6:cf:a9:8c:a4:74:9c:9e:7f:7f:
a4:70:bd:8d:4e:47:be:c2:c3:24:ce:59:73:57:7a:
83:22:af:3b:6f:b7:79:5a:a4:10:3a:70:f4:5c:eb:
5c:bc:90:5b:38:9d:30:3f:66:38:21:21:91:6d:76:
b6:91:08:ef:50:b2:91:68:e1:94:9b:7c:bd:da:57:
db:bf:56:67:b1:e9:23:28:25:fd:1a:b0:96:2e:90:
88:97:05:5a:a0:a8:f2:85:db:d0:27:61:72:c5:53:
78:89:8f:f9:45:76:75:62:58:84:08:60:a1:e8:1b:
83:a5:69:77:a7:c0:b5:1d:dd:9e:31:aa:1f:d9:d7:
1a:4a:24:4e:cc:f9:2c:0e:de:51:92:11:da:56:db:
75:d2:f4:76:6d:9b:7a:74:a0:8a:f4:c7:ef:bb:a8:
11:59:23:d8:ba:51:f8:b5:cb:44:8c:06:b0:8f:d9:
bd:7a:c8:53:cd:ca:02:d5:6a:0b:72:84:42:2b:40:
a7:8e:64:27:0b:c8:a3:9b:1a:62:4d:bf:9b:0e:42:
8b:ed:0f:f1:af:1e:6f:d7:aa:c4:3c:bc:f4:27:e3:
bc:81:27:b5:a1:e3:e7:b3:e1:75:cc:38:7e:df:fa:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E1:A6:02:34:DC:A9:14:23:99:75:E1:38:92:23:AF:33:48:50:7A
X509v3 Authority Key Identifier:
keyid:F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3c:3c:ab:ee:ae:10:bf:2d:a9:ef:5e:7a:66:07:b2:c3:c0:
f7:c8:0f:4b:36:4b:fc:49:d0:4c:74:a8:33:0b:1e:c2:e3:42:
5c:4b:31:ee:dd:96:bb:b5:e8:83:6f:6b:8e:89:3d:99:a7:ea:
df:45:fd:b1:f5:60:c6:17:87:93:24:8f:b0:7f:8a:8d:61:b1:
c4:41:ae:fe:7e:ed:95:43:2a:c0:35:cc:c6:78:1a:29:68:3c:
8b:0a:36:51:08:a4:e7:37:b5:82:d0:d7:83:d2:39:2b:00:a3:
c3:51:cc:ce:19:20:ab:79:2a:4e:a6:d5:62:2b:57:52:79:42:
6c:f7:4a:71:ca:77:f3:cc:cc:2a:46:c9:0a:dd:f7:ce:81:e4:
eb:fa:f3:1c:e0:f8:bf:69:4a:f4:25:ea:2d:8b:66:f1:0b:22:
56:4e:28:f6:86:95:f5:3b:40:2d:9d:a3:05:01:f1:c2:5e:12:
d7:85:3d:ce:67:1d:17:c8:9e:51:6d:3a:b5:7f:37:9a:1c:67:
53:82:96:01:97:17:04:c6:c4:ab:f0:0a:98:d5:27:1c:30:24:
a1:e1:75:30:fc:69:f8:b6:4a:f5:c9:62:f5:63:5e:20:8e:52:
44:f5:67:6a:87:4e:df:5b:44:6f:29:3d:e7:ea:fb:0c:29:56:
5e:4d:ee:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68oOsiyiDIs83HfXa841cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjAzNjZiYmFlYWM3YjU4ODRlNDI2ZGY4MDA5ZWMyN2Ey
YzYwMmUwHhcNMjUwMTMxMDYwMDQzWhcNMjUwMjAxMDYwMDQzWjAzMTEwLwYDVQQD
EygxMGUxYTYwMjM0ZGNhOTE0MjM5OTc1ZTEzODkyMjNhZjMzNDg1MDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OuwjH1568kPx0zMY5eZlkHH0qbP
qYykdJyef3+kcL2NTke+wsMkzllzV3qDIq87b7d5WqQQOnD0XOtcvJBbOJ0wP2Y4
ISGRbXa2kQjvULKRaOGUm3y92lfbv1ZnsekjKCX9GrCWLpCIlwVaoKjyhdvQJ2Fy
xVN4iY/5RXZ1YliECGCh6BuDpWl3p8C1Hd2eMaof2dcaSiROzPksDt5RkhHaVtt1
0vR2bZt6dKCK9Mfvu6gRWSPYulH4tctEjAawj9m9eshTzcoC1WoLcoRCK0CnjmQn
C8ijmxpiTb+bDkKL7Q/xrx5v16rEPLz0J+O8gSe1oePns+F1zDh+3/rfKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDhpgI03KkUI5l14TiSI68zSFB6MB8GA1UdIwQY
MBaAFPawNmu66se1iE5CbfgAnsJ6LGAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJBMmE3cnF4N1dJVGtKdC1BQ2V3bm9zWUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mYTcwN2EtYjMzNC00YjA1LTgzZmEt
MTQyMGI4NDEzNGQzLzEvOXJBMmE3cnF4N1dJVGtKdC1BQ2V3bm9zWUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9mYTcwN2EtYjMzNC00YjA1LTgzZmEtMTQyMGI4NDEzNGQz
LzEvOXJBMmE3cnF4N1dJVGtKdC1BQ2V3bm9zWUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjw8q+6u
EL8tqe9eemYHssPA98gPSzZL/EnQTHSoMwsewuNCXEsx7t2Wu7Xog29rjok9mafq
30X9sfVgxheHkySPsH+KjWGxxEGu/n7tlUMqwDXMxngaKWg8iwo2UQik5ze1gtDX
g9I5KwCjw1HMzhkgq3kqTqbVYitXUnlCbPdKccp388zMKkbJCt33zoHk6/rzHOD4
v2lK9CXqLYtm8QsiVk4o9oaV9TtALZ2jBQHxwl4S14U9zmcdF8ieUW06tX83mhxn
U4KWAZcXBMbEq/AKmNUnHDAkoeF1MPxp+LZK9cli9WNeII5SRPVnaodO31tEbyk9
5+r7DClWXk3uHg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:29 2025 by rpki-client on console-fra.rpki-client.org