Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
File: zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json)
Hash identifier: UoGccaXjXf3dfsmqJItwgWvEtws78ynMdGMeKsatFfc=
Subject key identifier: C7:AA:21:90:75:14:E9:79:93:97:B4:74:ED:32:71:4D:3F:09:7F:37
Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a
Certificate serial: 0194BB2937E091E1625B6184EB9656EF38A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 07:00:28 +0000
Manifest this update: Fri 31 Jan 2025 07:00:28 +0000
Manifest next update: Sat 01 Feb 2025 07:00:28 +0000
Files and hashes: 1: 3OCzpqqGOlJ3RRPa9qcY9JxjkUo.roa (hash: InQFvxlV7A4HcZ9T6xcxQF/B13Yg7udCj77rsg046YE=)
2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: JybGXNlEz8pnuKow6dguYu5Do3IWvM1x3sCB3GZamd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:37:e0:91:e1:62:5b:61:84:eb:96:56:ef:38:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a
Validity
Not Before: Jan 31 07:00:28 2025 GMT
Not After : Feb 1 07:00:28 2025 GMT
Subject: CN=c7aa21907514e9799397b474ed32714d3f097f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e8:18:c8:8d:51:29:2e:1c:f1:59:9a:c0:e5:
88:ab:5e:6c:90:b7:0a:12:b8:8e:35:45:18:8a:4b:
f3:d3:e7:d8:d5:53:6b:e0:11:cb:a4:1f:83:00:26:
bb:61:1c:fa:c6:68:9d:fa:1d:c5:54:54:5b:da:10:
33:63:4a:5b:21:3a:d0:68:66:cf:33:72:d4:63:d7:
d9:67:9b:ec:f3:ac:f9:bd:92:1b:66:c5:71:9b:28:
5c:15:6b:27:e8:94:a6:0f:23:45:20:5e:63:8a:77:
02:48:4a:c4:70:42:da:bf:a2:de:54:7c:d7:1c:1a:
63:61:44:0b:e7:ff:01:93:34:fd:1b:7c:12:34:b4:
34:ba:27:60:84:a1:71:3c:a2:d7:1c:a7:61:62:5a:
2c:1b:25:fe:0b:48:eb:80:42:c2:b7:19:10:9a:61:
9f:9d:66:68:25:86:b7:5d:94:23:09:06:e9:3a:95:
24:8a:65:84:dc:fe:da:27:24:58:72:f5:85:b9:2c:
7c:2a:d0:97:62:48:58:7d:b0:f0:85:cb:aa:5e:5f:
64:21:0e:ed:08:e7:7d:50:a2:ec:25:4c:23:36:9c:
b2:f8:96:ba:86:89:a9:8d:bc:73:6b:50:ad:e3:c7:
1e:71:7d:74:c1:7d:5a:ca:d4:db:fb:d6:33:1a:60:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AA:21:90:75:14:E9:79:93:97:B4:74:ED:32:71:4D:3F:09:7F:37
X509v3 Authority Key Identifier:
keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:07:30:df:38:d7:9a:b4:97:7e:0d:48:24:32:64:ac:78:fe:
74:50:94:fb:63:e2:8d:2e:57:e1:02:5c:fd:f6:84:76:04:79:
7a:07:86:3c:e9:38:7d:fb:9f:e7:f0:e1:2a:18:6e:51:bf:92:
1c:8a:d2:29:7c:75:10:b8:82:c0:c2:66:b1:c9:7a:f9:d1:15:
fa:8d:9a:cd:9f:cb:b8:d2:39:ca:cd:19:07:e9:ab:a8:5f:15:
c0:79:fb:06:c4:25:c0:1e:94:65:ca:ba:26:10:34:c7:55:b6:
df:58:cf:44:ff:b8:dd:08:23:45:51:74:a3:a9:02:30:e5:67:
5c:f0:53:fe:87:79:b5:b0:51:a0:f7:d8:31:e3:f1:61:50:a8:
3d:ab:d4:06:23:f1:37:d9:61:0f:c8:a3:1d:51:fb:ce:fb:b9:
47:3f:f8:b3:7c:f7:c2:03:e1:89:6b:81:e8:a3:c0:a3:03:ac:
7c:4e:8d:b7:52:66:36:fa:6e:e4:13:31:fe:a9:fe:b9:3a:dc:
e6:46:10:4e:b5:99:5d:15:a3:e7:18:33:68:ca:f1:36:37:43:
87:76:88:af:7f:2e:17:44:b2:1e:e6:5b:bd:99:5c:43:2e:a9:
19:fe:bb:75:ba:c4:9c:25:53:c6:50:14:d3:47:60:f1:0c:cf:
0e:33:b6:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KTfgkeFiW2GE65ZW7zigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZmNiZGU2MzJkMTA2ZmFhZDk4YzJjMTg5NWE4NzdjYTYw
MTUyMWEwHhcNMjUwMTMxMDcwMDI4WhcNMjUwMjAxMDcwMDI4WjAzMTEwLwYDVQQD
EyhjN2FhMjE5MDc1MTRlOTc5OTM5N2I0NzRlZDMyNzE0ZDNmMDk3ZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ugYyI1RKS4c8VmawOWIq15skLcK
EriONUUYikvz0+fY1VNr4BHLpB+DACa7YRz6xmid+h3FVFRb2hAzY0pbITrQaGbP
M3LUY9fZZ5vs86z5vZIbZsVxmyhcFWsn6JSmDyNFIF5jincCSErEcELav6LeVHzX
HBpjYUQL5/8BkzT9G3wSNLQ0uidghKFxPKLXHKdhYlosGyX+C0jrgELCtxkQmmGf
nWZoJYa3XZQjCQbpOpUkimWE3P7aJyRYcvWFuSx8KtCXYkhYfbDwhcuqXl9kIQ7t
COd9UKLsJUwjNpyy+Ja6hompjbxza1Ct48cecX10wX1aytTb+9YzGmCg9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeqIZB1FOl5k5e0dO0ycU0/CX83MB8GA1UdIwQY
MBaAFM38veYy0Qb6rZjCwYlah3ymAVIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mZTQ1Y2YtNGFkMi00MWQ5LWJiY2Et
MjAzY2ZhMjM4Njk2LzEvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9mZTQ1Y2YtNGFkMi00MWQ5LWJiY2EtMjAzY2ZhMjM4Njk2
LzEvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAcw3zjX
mrSXfg1IJDJkrHj+dFCU+2PijS5X4QJc/faEdgR5egeGPOk4ffuf5/DhKhhuUb+S
HIrSKXx1ELiCwMJmscl6+dEV+o2azZ/LuNI5ys0ZB+mrqF8VwHn7BsQlwB6UZcq6
JhA0x1W231jPRP+43QgjRVF0o6kCMOVnXPBT/od5tbBRoPfYMePxYVCoPavUBiPx
N9lhD8ijHVH7zvu5Rz/4s3z3wgPhiWuB6KPAowOsfE6Nt1JmNvpu5BMx/qn+uTrc
5kYQTrWZXRWj5xgzaMrxNjdDh3aIr38uF0SyHuZbvZlcQy6pGf67dbrEnCVTxlAU
00dg8QzPDjO2OQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:29 2025 by rpki-client on console-fra.rpki-client.org