Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier: NmeniVQOTTZXjcvySQcP2vNOl3KyhpqmYOoLwtRMfi4=
Subject key identifier: F8:45:CC:55:84:63:DF:5E:80:92:7F:71:C8:7E:43:E7:8B:FF:24:CB
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial: 0194BB602613BDAC52E0513A6C44C03E2E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 08:00:27 +0000
Manifest this update: Fri 31 Jan 2025 08:00:27 +0000
Manifest next update: Sat 01 Feb 2025 08:00:27 +0000
Files and hashes: 1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: mkIddCOCHMePgIMYQoSQKQ1+/ICSWGQ/3gbdebwrkP0=)
2: lAuSQuDFdUBMNl3lAy120twR4Nc.roa (hash: JpmAAAEWNaHqqF/Ty2UXmq2zX1BZOYcR9uwtzXs+1Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:26:13:bd:ac:52:e0:51:3a:6c:44:c0:3e:2e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Validity
Not Before: Jan 31 08:00:27 2025 GMT
Not After : Feb 1 08:00:27 2025 GMT
Subject: CN=f845cc558463df5e80927f71c87e43e78bff24cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5a:57:cf:2b:90:44:05:64:a6:d5:61:73:9b:
9b:67:0c:33:c1:22:ac:58:20:f3:8f:4f:62:7d:3e:
09:d8:fc:5d:2d:2f:e5:e9:ac:a7:dd:16:64:db:b5:
ea:42:92:2b:f8:4f:5c:17:ac:61:5d:fb:d8:ba:df:
e6:cc:a1:f9:81:ab:d9:83:dc:d6:2f:70:dd:81:63:
e3:be:fc:05:72:04:b4:60:a9:2e:0c:83:b4:4c:45:
b2:91:3e:e4:b0:2c:6d:33:6d:fe:a3:08:ae:4c:a2:
19:7f:e0:33:95:90:b8:3a:e2:fe:cb:ed:96:0d:1d:
dc:cb:b0:59:c9:67:26:57:8f:a8:6a:ac:07:e1:3c:
e7:f1:ee:1f:a6:6c:5c:3c:5e:80:05:58:ca:3b:17:
1f:da:b1:8b:e8:14:74:a3:97:5c:ab:8b:4d:44:ba:
51:98:a2:ce:1f:0a:d8:89:c6:d7:29:49:3e:8c:a1:
4a:de:12:aa:a9:3b:75:c2:8d:69:d8:32:67:5d:56:
ae:2d:07:6c:1e:0a:7a:f0:6d:eb:32:b9:5d:ed:5e:
07:f6:9b:af:71:7d:77:f6:81:4d:58:5f:42:0b:8e:
6c:93:38:2b:b5:b0:8a:94:78:7d:53:0e:b5:bb:91:
57:3c:2e:fe:93:8d:f6:f5:bc:d4:72:aa:d8:41:1c:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:45:CC:55:84:63:DF:5E:80:92:7F:71:C8:7E:43:E7:8B:FF:24:CB
X509v3 Authority Key Identifier:
keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e7:a7:56:6e:6b:e6:78:3c:27:89:c1:77:39:1e:8e:83:78:
40:ae:a8:5e:d9:77:67:67:4f:25:93:fd:9c:bd:52:4a:c2:0c:
7e:84:50:6e:b5:4d:3c:c7:ae:a3:56:6a:2c:ac:36:c4:da:12:
f5:8f:31:2b:91:90:34:4c:11:3f:c0:fe:1f:52:31:0f:6c:06:
3a:16:4b:ad:38:0a:38:12:a4:c9:e7:fe:b6:d0:6a:b5:8d:52:
6f:d9:0b:e4:07:7b:35:0e:9b:f9:04:0c:a5:03:6d:35:37:94:
78:79:cc:f2:e1:55:4d:a3:1f:3d:4f:be:1a:e6:4e:da:34:2a:
e2:f6:48:22:44:f8:26:76:77:e9:b8:7e:c7:7c:a2:d4:15:66:
d9:49:74:d9:57:61:36:7f:83:ef:9e:bf:21:1c:e0:70:26:33:
46:b5:5a:7b:15:4f:31:c4:33:52:99:dc:81:cc:6c:52:7f:98:
51:18:00:39:98:0c:32:b7:2f:ea:b1:f3:55:13:32:8e:f3:99:
e6:fc:b5:9d:0e:3e:9f:c7:d4:e8:82:ba:4e:e0:ea:38:10:21:
2f:ab:3d:26:ce:d1:75:99:f4:54:91:a1:64:0d:5f:17:38:0c:
56:97:bd:a4:23:b2:9b:a9:65:1c:59:72:b4:39:73:6e:cc:1f:
2c:95:dc:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YCYTvaxS4FE6bETAPi58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDM0ZmMwMzAwMmVhYTdmMzZiMmU3ZTYzNWVkYThjMzBj
NDgyODQwHhcNMjUwMTMxMDgwMDI3WhcNMjUwMjAxMDgwMDI3WjAzMTEwLwYDVQQD
EyhmODQ1Y2M1NTg0NjNkZjVlODA5MjdmNzFjODdlNDNlNzhiZmYyNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11pXzyuQRAVkptVhc5ubZwwzwSKs
WCDzj09ifT4J2PxdLS/l6ayn3RZk27XqQpIr+E9cF6xhXfvYut/mzKH5gavZg9zW
L3DdgWPjvvwFcgS0YKkuDIO0TEWykT7ksCxtM23+owiuTKIZf+AzlZC4OuL+y+2W
DR3cy7BZyWcmV4+oaqwH4Tzn8e4fpmxcPF6ABVjKOxcf2rGL6BR0o5dcq4tNRLpR
mKLOHwrYicbXKUk+jKFK3hKqqTt1wo1p2DJnXVauLQdsHgp68G3rMrld7V4H9puv
cX139oFNWF9CC45skzgrtbCKlHh9Uw61u5FXPC7+k4329bzUcqrYQRzwVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhFzFWEY99egJJ/cch+Q+eL/yTLMB8GA1UdIwQY
MBaAFGfTT8AwAuqn82sufmNe2owwxIKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjlOUHdEQUM2cWZ6YXk1LVkxN2FqRERFZ29RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yOTlkNjEtNmI5Ni00MDU0LTk4YTMt
ZGM0MmM3NjkzZGY5LzEvWjlOUHdEQUM2cWZ6YXk1LVkxN2FqRERFZ29RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yOTlkNjEtNmI5Ni00MDU0LTk4YTMtZGM0MmM3NjkzZGY5
LzEvWjlOUHdEQUM2cWZ6YXk1LVkxN2FqRERFZ29RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuenVm5r
5ng8J4nBdzkejoN4QK6oXtl3Z2dPJZP9nL1SSsIMfoRQbrVNPMeuo1ZqLKw2xNoS
9Y8xK5GQNEwRP8D+H1IxD2wGOhZLrTgKOBKkyef+ttBqtY1Sb9kL5Ad7NQ6b+QQM
pQNtNTeUeHnM8uFVTaMfPU++GuZO2jQq4vZIIkT4JnZ36bh+x3yi1BVm2Ul02Vdh
Nn+D756/IRzgcCYzRrVaexVPMcQzUpncgcxsUn+YURgAOZgMMrcv6rHzVRMyjvOZ
5vy1nQ4+n8fU6IK6TuDqOBAhL6s9Js7RdZn0VJGhZA1fFzgMVpe9pCOym6llHFly
tDlzbswfLJXcxQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:05 2025 by rpki-client on console-fra.rpki-client.org