Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: CWHEYLHp95jiTrSGFRj2GZVcFUxoIZeXStPPLqGHEbU=
Subject key identifier: 4C:CE:4D:55:EF:E6:B4:75:F2:16:94:81:68:D9:E2:BF:F5:97:FE:55
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 0194BA84876B959762F6A3AF7C9E9A197451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 0215
Signing time: Fri 31 Jan 2025 04:00:35 +0000
Manifest this update: Fri 31 Jan 2025 04:00:35 +0000
Manifest next update: Sat 01 Feb 2025 04:00:35 +0000
Files and hashes: 1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: 3SPJCi+FN0M5JZeMSE0/csGYN45ITxG3EJb4+vz+8hs=)
2: UyMSzhYCoyIv-Z-RWQ0FyyqBdmg.roa (hash: 2A2ajEPDxijC/XTi8wtmJY4/n4ZoZiwiXE/zRByiGqY=)
3: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:87:6b:95:97:62:f6:a3:af:7c:9e:9a:19:74:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Jan 31 04:00:35 2025 GMT
Not After : Feb 1 04:00:35 2025 GMT
Subject: CN=4cce4d55efe6b475f216948168d9e2bff597fe55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:30:a7:5f:21:81:2a:6a:4a:9f:9b:90:c8:
e8:16:ff:d4:ab:74:a4:91:ed:1f:fc:c1:ed:0e:d4:
81:58:ee:af:77:36:d1:83:6c:75:24:e5:bd:0d:5e:
57:84:b7:37:13:0f:d3:77:39:4e:cb:85:99:1d:8a:
bb:05:ad:1d:0f:74:7c:ca:a6:b5:8e:75:69:0f:53:
cd:c6:48:be:dc:87:e7:8b:3c:c0:45:9a:e5:fa:c7:
ba:68:e2:5d:25:5a:da:ad:f8:4e:90:26:58:f4:4d:
f2:ad:05:6e:69:0c:dc:f6:25:e6:72:d6:c4:fb:2f:
fb:35:80:83:6f:85:63:0b:ee:95:5b:eb:2e:9f:aa:
51:c6:28:ed:e2:77:6e:2c:c6:2d:b1:95:47:16:c4:
fd:c6:e8:2c:e0:2b:7b:ef:2a:d1:a7:7f:ec:36:be:
59:48:c8:f8:e1:db:d6:30:7b:21:62:1c:18:20:e8:
15:87:a2:87:9d:68:c2:9f:f9:f9:1f:55:4c:85:32:
cd:e1:da:70:fe:01:99:2c:80:fd:96:99:b1:65:5f:
17:d4:51:77:31:bd:ae:24:75:02:e5:11:ab:a2:b8:
0a:79:32:42:6d:72:33:15:3a:27:c5:89:1f:45:f2:
9d:37:63:46:7a:2c:be:07:5d:49:59:95:a9:ce:f0:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CE:4D:55:EF:E6:B4:75:F2:16:94:81:68:D9:E2:BF:F5:97:FE:55
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:df:c2:88:9e:b9:49:4f:6b:0b:37:65:3d:76:4a:6d:1d:ae:
87:80:de:79:43:ca:6d:40:de:c1:a9:e4:ea:33:9b:ae:b2:bf:
d8:60:36:c0:d7:0f:cd:7a:f0:be:63:fb:2b:41:64:eb:4a:ec:
d9:e1:9d:18:98:8b:61:2d:a0:05:71:e5:51:0e:8b:00:ed:42:
61:be:06:95:e3:cf:25:4e:73:a9:ec:0b:f0:98:e3:7b:ee:a6:
77:dd:c3:4d:bb:d2:db:76:83:da:af:2a:7b:e8:b8:8d:71:b0:
5b:66:45:24:1d:03:e8:96:9e:ae:70:39:59:ed:fa:e5:b3:87:
d4:98:7b:7e:58:38:09:ae:bf:79:74:e7:38:ac:9b:45:9b:41:
03:f8:20:0c:d2:41:ac:50:8b:e5:2c:c4:75:0a:1d:b1:75:e2:
a8:71:20:1a:5b:f5:8c:5f:4d:90:5e:f3:dc:3b:0a:79:77:c4:
de:53:35:0f:39:a9:9a:c7:d9:0e:84:48:23:cd:5b:40:50:c7:
29:6b:16:94:70:1a:89:0d:54:d6:9e:01:77:49:d8:1b:d7:6d:
cb:2a:b1:98:5c:2a:75:4c:38:1d:31:d4:58:6f:ce:7e:42:53:
78:be:83:91:d7:0c:87:e2:04:17:bd:df:4b:19:54:4a:a2:af:
f7:b8:9a:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hIdrlZdi9qOvfJ6aGXRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzY0ZmNlZGQ2OTEzNTc3MzNjZDVjY2Q3MDI5ZGI4ZTYx
ZDFlM2EwHhcNMjUwMTMxMDQwMDM1WhcNMjUwMjAxMDQwMDM1WjAzMTEwLwYDVQQD
Eyg0Y2NlNGQ1NWVmZTZiNDc1ZjIxNjk0ODE2OGQ5ZTJiZmY1OTdmZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Uwp18hgSpqSp+bkMjoFv/Uq3Sk
ke0f/MHtDtSBWO6vdzbRg2x1JOW9DV5XhLc3Ew/TdzlOy4WZHYq7Ba0dD3R8yqa1
jnVpD1PNxki+3IfnizzARZrl+se6aOJdJVrarfhOkCZY9E3yrQVuaQzc9iXmctbE
+y/7NYCDb4VjC+6VW+sun6pRxijt4nduLMYtsZVHFsT9xugs4Ct77yrRp3/sNr5Z
SMj44dvWMHshYhwYIOgVh6KHnWjCn/n5H1VMhTLN4dpw/gGZLID9lpmxZV8X1FF3
Mb2uJHUC5RGrorgKeTJCbXIzFTonxYkfRfKdN2NGeiy+B11JWZWpzvActwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzOTVXv5rR18haUgWjZ4r/1l/5VMB8GA1UdIwQY
MBaAFAM2T87daRNXczzVzNcCnbjmHR46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEt
YWJmMGI1OTQ2NDZmLzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEtYWJmMGI1OTQ2NDZm
LzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlt/CiJ65
SU9rCzdlPXZKbR2uh4DeeUPKbUDewank6jObrrK/2GA2wNcPzXrwvmP7K0Fk60rs
2eGdGJiLYS2gBXHlUQ6LAO1CYb4GlePPJU5zqewL8Jjje+6md93DTbvS23aD2q8q
e+i4jXGwW2ZFJB0D6JaernA5We365bOH1Jh7flg4Ca6/eXTnOKybRZtBA/ggDNJB
rFCL5SzEdQodsXXiqHEgGlv1jF9NkF7z3DsKeXfE3lM1DzmpmsfZDoRII81bQFDH
KWsWlHAaiQ1U1p4Bd0nYG9dtyyqxmFwqdUw4HTHUWG/OfkJTeL6DkdcMh+IEF73f
SxlUSqKv97iaew==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:25 2025 by rpki-client on console-fra.rpki-client.org