Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File: rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier: PWkmK+7Hyg/0DWa70pEa/KuO6ttW1wgvZIhvj2gPMyE=
Subject key identifier: 82:CE:CC:D3:49:BC:A3:58:0D:E9:35:EA:51:08:8C:42:5F:0A:E0:0B
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial: 0194BAF2303A1E7E7ACA789F6BBA3D4FFB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 06:00:21 +0000
Manifest this update: Fri 31 Jan 2025 06:00:21 +0000
Manifest next update: Sat 01 Feb 2025 06:00:21 +0000
Files and hashes: 1: M7qCgoSPH7j_UlXj4wtCLgY2-zs.roa (hash: 2v7kuoDrSLyOohwbRo40Ftf5wt7pUJT9yboky9E7jaI=)
2: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: nlPO+ZeDAV/TWfcAwWncyDK6Eu5L7r3sD5NH5cYii9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:30:3a:1e:7e:7a:ca:78:9f:6b:ba:3d:4f:fb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Validity
Not Before: Jan 31 06:00:21 2025 GMT
Not After : Feb 1 06:00:21 2025 GMT
Subject: CN=82ceccd349bca3580de935ea51088c425f0ae00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:76:80:ec:19:51:86:99:a8:9f:20:a6:fc:
de:38:06:f4:40:c4:1d:79:0e:37:4c:01:6e:71:cb:
31:6c:93:24:8b:50:ca:29:b6:ce:05:69:af:d3:e4:
84:57:96:9e:e2:dc:00:31:ac:31:a8:b2:90:b4:7e:
22:35:23:4f:7b:55:a4:03:e5:57:6e:d0:e1:3e:5c:
f8:9b:91:4d:e7:55:fe:29:48:3e:b5:83:fd:99:d2:
7c:38:3c:86:97:25:58:c4:9b:95:60:19:fc:29:19:
f5:5e:a0:8a:c6:b8:75:68:e9:7c:2f:44:b5:19:e0:
c3:6a:d3:3a:0b:12:22:0f:fb:a9:8f:a2:44:71:82:
ff:33:5f:f4:11:90:cb:18:04:4f:7b:0d:7b:eb:af:
1e:60:03:1c:2d:5d:85:2e:56:08:f2:0f:36:08:e5:
36:d2:86:31:09:70:ce:e8:f1:bb:c1:dd:d3:bc:8d:
4e:1f:bf:29:77:49:ea:11:39:0f:3e:9e:93:bc:a7:
9e:80:20:bf:9a:cf:8c:d2:79:1e:7b:45:fe:38:40:
d2:f8:77:14:3e:b4:6f:14:fd:a7:87:3c:9f:35:4d:
d8:b6:b1:7f:0c:11:ba:12:49:1a:fd:d7:d1:b5:6e:
6e:22:ac:1d:0a:95:e1:bb:ea:c2:c0:19:53:16:e3:
7e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CE:CC:D3:49:BC:A3:58:0D:E9:35:EA:51:08:8C:42:5F:0A:E0:0B
X509v3 Authority Key Identifier:
keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:33:8e:e0:b0:e1:6a:0d:42:7e:f6:a9:e2:b3:b0:5d:19:90:
5c:91:b7:41:57:69:01:66:4c:a3:55:d9:15:95:1d:d3:47:5b:
66:95:2a:c9:8c:c4:5d:49:e3:08:98:31:d7:75:2b:2d:75:cd:
c9:10:a9:f6:c2:21:17:9b:cc:e3:53:18:ca:95:13:ed:26:ab:
33:b7:9b:fe:c2:e1:e9:01:9e:7a:b1:7c:1e:58:cb:30:ee:7e:
7b:c6:0c:ce:1c:84:92:7f:87:44:1a:ad:56:42:cb:e2:b7:59:
8a:ad:1d:00:f2:7d:9b:ee:4f:7a:92:69:99:df:6a:2f:f5:e4:
c1:15:d5:55:7e:5a:26:78:b1:26:29:a6:ac:7d:7f:e4:fe:57:
a8:7a:29:93:57:27:29:fc:68:66:95:bd:3d:5e:81:d5:9a:66:
f9:12:89:10:a2:1a:fa:fd:f7:54:e2:d2:98:91:4e:86:e0:cd:
9a:52:4a:c9:7c:74:24:ea:6a:19:ef:79:66:cc:d7:f8:3a:87:
dd:e4:68:8a:c6:c8:4e:5c:be:5b:04:44:40:1b:23:4b:ab:bf:
37:d7:b9:0a:bd:df:bb:49:5e:88:d1:fc:ee:a7:db:34:31:1f:
01:e0:2a:98:96:f0:d0:8f:12:db:d4:0c:d1:9d:a5:50:e2:1c:
b5:5f:c5:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68jA6Hn56ynifa7o9T/tlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZGUyMzU4ZjU3NDM5YzQ0ZjZiMTY2MmY1NTYxNWEwYWFi
NmJhY2IwHhcNMjUwMTMxMDYwMDIxWhcNMjUwMjAxMDYwMDIxWjAzMTEwLwYDVQQD
Eyg4MmNlY2NkMzQ5YmNhMzU4MGRlOTM1ZWE1MTA4OGM0MjVmMGFlMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysp2gOwZUYaZqJ8gpvzeOAb0QMQd
eQ43TAFuccsxbJMki1DKKbbOBWmv0+SEV5ae4twAMawxqLKQtH4iNSNPe1WkA+VX
btDhPlz4m5FN51X+KUg+tYP9mdJ8ODyGlyVYxJuVYBn8KRn1XqCKxrh1aOl8L0S1
GeDDatM6CxIiD/upj6JEcYL/M1/0EZDLGARPew17668eYAMcLV2FLlYI8g82COU2
0oYxCXDO6PG7wd3TvI1OH78pd0nqETkPPp6TvKeegCC/ms+M0nkee0X+OEDS+HcU
PrRvFP2nhzyfNU3YtrF/DBG6Ekka/dfRtW5uIqwdCpXhu+rCwBlTFuN+ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILOzNNJvKNYDek16lEIjEJfCuALMB8GA1UdIwQY
MBaAFKzeI1j1dDnET2sWYvVWFaCqtrrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck40aldQVjBPY1JQYXhaaTlWWVZvS3EydXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9iNjVlMzMtZjk0Ny00OTY4LWEyN2Mt
ZGQ5OWQzOTdlNGQ2LzEvck40aldQVjBPY1JQYXhaaTlWWVZvS3EydXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9iNjVlMzMtZjk0Ny00OTY4LWEyN2MtZGQ5OWQzOTdlNGQ2
LzEvck40aldQVjBPY1JQYXhaaTlWWVZvS3EydXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDOO4LDh
ag1Cfvap4rOwXRmQXJG3QVdpAWZMo1XZFZUd00dbZpUqyYzEXUnjCJgx13UrLXXN
yRCp9sIhF5vM41MYypUT7SarM7eb/sLh6QGeerF8HljLMO5+e8YMzhyEkn+HRBqt
VkLL4rdZiq0dAPJ9m+5PepJpmd9qL/XkwRXVVX5aJnixJimmrH1/5P5XqHopk1cn
KfxoZpW9PV6B1Zpm+RKJEKIa+v33VOLSmJFOhuDNmlJKyXx0JOpqGe95ZszX+DqH
3eRoisbITly+WwREQBsjS6u/N9e5Cr3fu0leiNH87qfbNDEfAeAqmJbw0I8S29QM
0Z2lUOIctV/F1Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:42 2025 by rpki-client on console-fra.rpki-client.org