Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier: pCUK4mQvbql2nEQOclih/RP3fkFnZEt1kIl/5r/v3qs=
Subject key identifier: 7A:D6:ED:4B:EA:95:E5:90:0B:57:7A:B5:49:6A:41:13:51:E7:AF:91
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial: 0194BB96F8C1D763896C75210CA43944B48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number: 0AAA
Signing time: Fri 31 Jan 2025 09:00:20 +0000
Manifest this update: Fri 31 Jan 2025 09:00:20 +0000
Manifest next update: Sat 01 Feb 2025 09:00:20 +0000
Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: XdOwvbqeUn9eKpwkZx+GfiaajuiY/gjI+jY7B+Gycqk=)
2: DurnQ3dAzPxoCUXWiroCcReHID8.roa (hash: k2ck5I6D1NKufGijk0qz5B1og8UdirayVzhgWYYPrYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:f8:c1:d7:63:89:6c:75:21:0c:a4:39:44:b4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Validity
Not Before: Jan 31 09:00:20 2025 GMT
Not After : Feb 1 09:00:20 2025 GMT
Subject: CN=7ad6ed4bea95e5900b577ab5496a411351e7af91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:e9:4c:22:3f:a8:94:fa:7c:22:a1:d1:1b:
f7:5a:48:c2:70:a6:ea:c8:6f:51:9f:a1:25:0c:b5:
d2:84:0d:3d:b5:b8:cd:1e:48:70:55:c3:e7:46:5a:
0e:82:eb:7b:74:6e:94:13:30:0f:d0:10:90:d9:6d:
93:f9:b7:cf:9a:a3:2e:51:83:c7:fe:5e:c0:dc:25:
b3:9e:01:e3:b6:b1:1f:80:87:3b:58:f4:b6:2d:b7:
2c:1d:45:5b:f0:b8:32:a6:d6:91:c9:8b:77:7f:02:
7c:45:59:3c:79:72:f6:63:06:2a:da:84:2b:db:77:
f5:8e:12:4f:4a:6a:bb:a8:10:e6:7c:af:c1:dd:52:
f2:58:10:49:26:73:c1:16:e1:d1:d4:52:12:9c:95:
75:7a:0f:dc:a0:13:2a:89:4f:e5:38:f4:9e:cb:20:
bb:ac:f5:5d:d2:57:ce:b1:f4:f3:81:e5:15:03:e2:
b0:9a:e9:f1:07:bc:a4:27:45:46:4f:95:5f:61:d7:
86:96:c6:06:d9:9f:06:05:59:5b:cf:1d:09:e1:34:
97:3f:f8:34:46:5c:64:76:fb:7b:28:a8:f1:1e:f7:
1f:b9:5d:43:9f:36:4c:a8:a1:73:19:dc:ea:36:39:
6d:a2:0e:2b:d8:91:04:ec:99:cb:31:a7:6f:84:5a:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D6:ED:4B:EA:95:E5:90:0B:57:7A:B5:49:6A:41:13:51:E7:AF:91
X509v3 Authority Key Identifier:
keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f0:54:cd:4c:9a:a3:93:eb:aa:e4:f8:80:fc:7e:8e:35:10:
1e:a4:c2:16:ba:b3:be:03:43:9e:1f:e4:f6:d7:bb:b5:c0:d0:
5d:f4:6d:a1:4b:48:fc:11:ee:60:ea:fe:45:af:83:e5:11:b9:
a4:4f:2a:cc:c9:5c:41:0c:76:da:c6:92:0f:43:6b:5b:44:e0:
30:b4:48:84:72:0c:6a:4c:24:7d:29:6e:5d:c4:dc:f6:8e:5c:
83:bc:17:3c:e4:c3:33:cd:2f:19:7b:ab:85:f6:03:bf:3c:0b:
d8:ab:37:89:ce:be:7b:7a:af:f0:c2:c6:c7:20:55:34:78:79:
1a:a3:0a:4d:7e:c3:3e:4f:50:72:9e:93:f4:9e:88:74:b4:b8:
c2:7d:1e:14:d6:c5:86:e0:7e:36:01:a4:ba:76:fb:02:73:58:
f4:19:31:90:62:71:76:54:f9:d7:83:06:36:da:d4:d2:16:26:
4d:59:7d:24:c4:d1:21:f1:d2:3e:f8:ea:f9:30:89:ba:2a:dc:
ac:d4:21:a6:71:91:fb:eb:c8:bc:bd:27:d9:44:19:53:b6:36:
fe:30:3f:39:8b:90:d2:27:5c:49:4b:1d:3c:77:93:d0:c1:b2:
a4:d2:3b:e9:f0:df:21:be:bb:70:87:a4:91:8a:f6:04:a4:ef:
a7:91:e7:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lvjB12OJbHUhDKQ5RLSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOGRkZjgyMTIwOGEzNzBlM2E1YjdlZjhjZDQ3OTdjZmM1
Nzc0ODIwHhcNMjUwMTMxMDkwMDIwWhcNMjUwMjAxMDkwMDIwWjAzMTEwLwYDVQQD
Eyg3YWQ2ZWQ0YmVhOTVlNTkwMGI1NzdhYjU0OTZhNDExMzUxZTdhZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSbpTCI/qJT6fCKh0Rv3WkjCcKbq
yG9Rn6ElDLXShA09tbjNHkhwVcPnRloOgut7dG6UEzAP0BCQ2W2T+bfPmqMuUYPH
/l7A3CWzngHjtrEfgIc7WPS2LbcsHUVb8LgyptaRyYt3fwJ8RVk8eXL2YwYq2oQr
23f1jhJPSmq7qBDmfK/B3VLyWBBJJnPBFuHR1FISnJV1eg/coBMqiU/lOPSeyyC7
rPVd0lfOsfTzgeUVA+KwmunxB7ykJ0VGT5VfYdeGlsYG2Z8GBVlbzx0J4TSXP/g0
Rlxkdvt7KKjxHvcfuV1DnzZMqKFzGdzqNjltog4r2JEE7JnLMadvhFp1iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrW7UvqleWQC1d6tUlqQRNR56+RMB8GA1UdIwQY
MBaAFO2N34ISCKNw46W374zUeXz8V3SCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMt
ZTlkODFlM2Q4YjU0LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMtZTlkODFlM2Q4YjU0
LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfBUzUya
o5PrquT4gPx+jjUQHqTCFrqzvgNDnh/k9te7tcDQXfRtoUtI/BHuYOr+Ra+D5RG5
pE8qzMlcQQx22saSD0NrW0TgMLRIhHIMakwkfSluXcTc9o5cg7wXPOTDM80vGXur
hfYDvzwL2Ks3ic6+e3qv8MLGxyBVNHh5GqMKTX7DPk9Qcp6T9J6IdLS4wn0eFNbF
huB+NgGkunb7AnNY9BkxkGJxdlT514MGNtrU0hYmTVl9JMTRIfHSPvjq+TCJuirc
rNQhpnGR++vIvL0n2UQZU7Y2/jA/OYuQ0idcSUsdPHeT0MGypNI76fDfIb67cIek
kYr2BKTvp5Hnnw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:27 2025 by rpki-client on console-fra.rpki-client.org