Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
File: y_I74RFfAiqiadnOpDm7i0kjB-I.mft (raw, json)
Hash identifier: jL8knkoU123wXf+97dxvqTPSiFn/J8BTtdE/Ql+eBwk=
Subject key identifier: 8E:18:7A:E7:60:64:1C:B6:2D:D7:76:3A:B0:16:98:5C:58:2C:6B:89
Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
Certificate issuer: /CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Certificate serial: 0194BB96DC86F2C7B372CE57CDA44F81619B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:13 +0000
Manifest this update: Fri 31 Jan 2025 09:00:13 +0000
Manifest next update: Sat 01 Feb 2025 09:00:13 +0000
Files and hashes: 1: 2wV8eUCUu5RGsjYa7-OlHblwpFo.roa (hash: 7BqtxHk5pTQN6TSTs893yWqV/YVjq+6kshvNaK8vqGo=)
2: 8qU7PW-1jRTW26c9BxYT5_0Bc9U.roa (hash: HOmxtNFCl//oq/U3tRw6KwgqtgI+NdJR6gPDxjaAFLQ=)
3: b3I98CB-8ce3VcwkD_Ch6vFhQXE.roa (hash: kqwOewNHVrTW/kfVyBv01vxgKvixRF0yFyDls6uT/Uo=)
4: y_I74RFfAiqiadnOpDm7i0kjB-I.crl (hash: MHIjwiSqGMeMAmFHgA2nvjdLexaugcTr3pwx7yqQBkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:dc:86:f2:c7:b3:72:ce:57:cd:a4:4f:81:61:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Validity
Not Before: Jan 31 09:00:13 2025 GMT
Not After : Feb 1 09:00:13 2025 GMT
Subject: CN=8e187ae760641cb62dd7763ab016985c582c6b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ef:4f:54:ab:a9:56:27:99:73:9d:be:f1:fe:
be:86:7f:6d:10:60:d4:58:83:08:3d:d0:c0:b0:7d:
9d:97:1a:5f:5d:5f:8d:d9:72:cb:e7:6d:9d:af:d1:
df:68:24:a0:27:61:90:6f:cf:3b:27:29:b9:96:1f:
08:d6:9d:7c:90:cc:44:ce:68:85:40:78:cf:25:16:
a3:33:50:2a:08:9f:76:8d:f8:0a:d0:b2:6c:d6:f1:
2b:83:93:41:48:63:1d:29:b9:00:fa:6b:98:10:b8:
2b:10:80:9d:ef:a2:fb:32:55:05:6d:24:72:3d:c3:
78:77:e7:94:1a:32:57:76:d3:25:04:e2:b2:35:64:
cc:6a:a9:04:6c:11:9e:55:91:d7:58:29:c3:30:4f:
0a:10:c5:80:7a:09:d9:7d:30:52:90:82:4f:fd:cd:
11:d0:78:7b:32:ac:cb:2f:26:9d:9f:f1:cb:55:87:
49:58:04:f7:5b:91:d7:99:db:fd:7f:33:9f:67:a5:
2f:e8:08:35:d0:42:50:c1:a8:b3:5f:ff:da:b9:51:
a7:91:d8:44:77:24:bc:21:4f:50:74:1d:88:0b:66:
01:1a:f3:31:eb:07:4f:3b:97:a4:06:32:dc:4c:eb:
dc:e4:c3:c7:02:f5:15:19:f7:6d:8e:58:05:06:d7:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:18:7A:E7:60:64:1C:B6:2D:D7:76:3A:B0:16:98:5C:58:2C:6B:89
X509v3 Authority Key Identifier:
keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6c:cb:57:b5:a5:0a:33:3a:96:26:fc:db:9a:2f:06:17:34:
0d:e4:ad:b0:c0:76:c0:da:3f:52:dd:6a:cb:17:15:cf:88:ea:
23:cc:14:ff:df:61:a2:25:a5:97:88:b6:3d:9d:40:41:80:40:
9b:7b:0a:9c:a1:23:21:ee:90:d0:88:64:c0:b6:51:09:6d:f6:
6a:9e:5f:c1:e2:13:2e:39:f9:c9:1b:0a:b6:16:dd:8b:ab:5d:
7e:10:80:75:fd:f1:1d:ba:6b:30:16:9c:c3:61:84:19:50:9f:
a8:ab:0d:b2:3a:d8:b4:df:c5:14:ca:e8:3c:73:52:bb:76:a5:
91:29:ea:33:c7:4a:4c:93:08:fc:b4:5b:e0:06:0d:4f:13:d0:
cb:3e:97:bc:4e:0f:71:c5:14:e7:5a:eb:0b:1b:2d:cd:6c:c2:
4c:e9:b6:8f:b1:35:4c:52:80:54:5b:8d:b6:7c:be:1f:b8:09:
0a:b4:dd:ff:ae:7c:0c:b8:2a:3e:10:73:b8:91:a5:7a:68:30:
ef:3b:4b:d2:fc:55:ce:32:9f:08:7c:f3:bc:4a:e0:10:8b:c9:
19:14:52:11:0b:41:28:6d:76:6b:cb:eb:9b:74:53:f4:6b:ba:
d5:3f:be:62:1d:90:6a:50:5a:9a:d6:a8:05:c9:84:5e:f0:63:
74:d2:f0:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ltyG8sezcs5XzaRPgWGbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZjIzYmUxMTE1ZjAyMmFhMjY5ZDljZWE0MzliYjhiNDky
MzA3ZTIwHhcNMjUwMTMxMDkwMDEzWhcNMjUwMjAxMDkwMDEzWjAzMTEwLwYDVQQD
Eyg4ZTE4N2FlNzYwNjQxY2I2MmRkNzc2M2FiMDE2OTg1YzU4MmM2Yjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e9PVKupVieZc52+8f6+hn9tEGDU
WIMIPdDAsH2dlxpfXV+N2XLL522dr9HfaCSgJ2GQb887Jym5lh8I1p18kMxEzmiF
QHjPJRajM1AqCJ92jfgK0LJs1vErg5NBSGMdKbkA+muYELgrEICd76L7MlUFbSRy
PcN4d+eUGjJXdtMlBOKyNWTMaqkEbBGeVZHXWCnDME8KEMWAegnZfTBSkIJP/c0R
0Hh7MqzLLyadn/HLVYdJWAT3W5HXmdv9fzOfZ6Uv6Ag10EJQwaizX//auVGnkdhE
dyS8IU9QdB2IC2YBGvMx6wdPO5ekBjLcTOvc5MPHAvUVGfdtjlgFBtce0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4YeudgZBy2Ldd2OrAWmFxYLGuJMB8GA1UdIwQY
MBaAFMvyO+ERXwIqomnZzqQ5u4tJIwfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NjMxM2YtZWM0ZS00YzFjLWIzODgt
YmUzMjUyYWM0OTgwLzEveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81NjMxM2YtZWM0ZS00YzFjLWIzODgtYmUzMjUyYWM0OTgw
LzEveV9JNzRSRmZBaXFpYWRuT3BEbTdpMGtqQi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmzLV7Wl
CjM6lib825ovBhc0DeStsMB2wNo/Ut1qyxcVz4jqI8wU/99hoiWll4i2PZ1AQYBA
m3sKnKEjIe6Q0IhkwLZRCW32ap5fweITLjn5yRsKthbdi6tdfhCAdf3xHbprMBac
w2GEGVCfqKsNsjrYtN/FFMroPHNSu3alkSnqM8dKTJMI/LRb4AYNTxPQyz6XvE4P
ccUU51rrCxstzWzCTOm2j7E1TFKAVFuNtny+H7gJCrTd/658DLgqPhBzuJGlemgw
7ztL0vxVzjKfCHzzvErgEIvJGRRSEQtBKG12a8vrm3RT9Gu61T++Yh2QalBamtao
BcmEXvBjdNLwMA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:25 2025 by rpki-client on console-fra.rpki-client.org