Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: rlFg0n5p7LSND/O8eO/bZE9ItyI7JwgxfTJaVsm79ag=
Subject key identifier: 6A:27:2A:AB:05:2A:31:BB:A9:E7:7E:E3:DF:06:A0:29:BD:56:1F:A3
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 0194BB2975C51761CD5459057BBA8B6A9590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 0BCA
Signing time: Fri 31 Jan 2025 07:00:43 +0000
Manifest this update: Fri 31 Jan 2025 07:00:43 +0000
Manifest next update: Sat 01 Feb 2025 07:00:43 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: E+JRwQvuocg+5sNsLHpd3epsD2XFGgIBPwrfjTeLBoY=)
2: 39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa (hash: yuPdwUCFZLhlTho5KUzDTwTUnjWxu1cEHPF0b38FGK8=)
3: AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa (hash: eCVsXCjLEvLJa9+iW+ysDbya4Y+X231ugmswa/aHdwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:75:c5:17:61:cd:54:59:05:7b:ba:8b:6a:95:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Jan 31 07:00:43 2025 GMT
Not After : Feb 1 07:00:43 2025 GMT
Subject: CN=6a272aab052a31bba9e77ee3df06a029bd561fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:43:fb:a4:d5:d6:0c:09:fd:e5:1f:e5:3a:
9c:bc:cf:68:3f:80:b9:67:44:a3:f1:5e:f4:2c:69:
12:36:2d:24:67:00:4c:c6:a8:37:19:b8:d7:0c:6e:
b6:19:03:7f:33:3c:9f:20:9f:a1:69:8d:3a:99:c1:
b3:23:a1:ad:ad:f5:85:08:f1:1f:0c:8f:16:e7:e7:
d6:b6:18:5b:33:49:6d:a5:09:34:12:5b:ba:fe:5c:
ad:aa:20:14:2f:e4:f6:e1:26:6c:54:71:a0:1f:ed:
1c:58:63:72:25:1f:68:b6:0a:2d:ae:fb:d8:cb:1a:
eb:d7:d4:78:f3:c6:33:81:ed:e9:dd:2c:69:1a:33:
a3:77:83:65:fe:15:d9:1b:94:0e:66:f0:44:80:e4:
f0:c7:cf:2b:6d:94:99:d0:95:32:6d:24:ae:c5:e0:
48:e3:38:38:1a:77:4f:28:fd:39:6f:47:37:59:ed:
42:43:e6:b6:f6:4d:02:c8:68:33:47:ca:44:17:34:
72:a2:21:87:d8:dd:b8:10:cc:c8:02:25:b9:d6:47:
b8:c6:7f:8d:f4:1f:b0:ab:aa:b8:94:c5:e4:26:a3:
47:cc:f5:84:39:1c:33:9d:9f:c1:80:c4:31:8d:ae:
a7:32:ce:64:e5:24:08:11:6f:ed:ef:c5:70:68:9e:
7e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:27:2A:AB:05:2A:31:BB:A9:E7:7E:E3:DF:06:A0:29:BD:56:1F:A3
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:51:dd:1b:fb:88:dd:c7:d8:13:5c:6a:94:80:6e:15:63:63:
7d:db:99:7e:f6:3a:25:2b:07:9d:03:36:15:35:f6:f3:ec:a9:
cf:f2:53:b2:49:b8:95:f4:9a:73:74:42:ea:f6:c2:66:86:11:
70:d9:7a:1e:71:ef:81:10:9f:d1:64:5c:6c:7e:ad:3b:f3:e1:
f5:86:f3:fc:b9:c5:94:a7:f6:d0:90:f1:c8:7f:cd:89:6c:a6:
bb:c6:28:24:c6:6a:eb:bd:72:6e:ea:81:a3:cc:68:d1:f2:c0:
c0:14:dc:03:2d:19:04:1e:52:b8:68:6d:a1:92:07:90:5c:65:
00:59:26:19:88:c8:74:67:1c:e9:56:49:d7:5c:51:d8:81:6c:
83:fb:0c:3f:f8:94:49:ce:3f:2f:f0:72:4d:3c:d3:24:a4:75:
70:69:1d:c0:f7:56:9a:d0:f1:c7:92:ed:f9:df:d7:77:d4:63:
de:6e:c0:92:bb:8e:12:98:01:f2:82:61:18:07:90:54:2a:54:
1d:c1:21:34:c6:b4:dd:94:35:bd:53:dc:c5:4c:ff:e8:4e:46:
a6:fa:ae:be:93:73:b5:37:f1:dc:aa:00:b1:22:20:3e:ba:bf:
c9:28:1d:03:44:a1:f4:c4:12:db:16:a4:4f:15:94:23:98:01:
a7:85:24:65
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS7KXXFF2HNVFkFe7qLapWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTMxZDJlZWViNjdhOTM3ZTJlODdkNzZhZDlmOWQxN2Nk
YTk3ZjAwHhcNMjUwMTMxMDcwMDQzWhcNMjUwMjAxMDcwMDQzWjAzMTEwLwYDVQQD
Eyg2YTI3MmFhYjA1MmEzMWJiYTllNzdlZTNkZjA2YTAyOWJkNTYxZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OpD+6TV1gwJ/eUf5TqcvM9oP4C5
Z0Sj8V70LGkSNi0kZwBMxqg3GbjXDG62GQN/MzyfIJ+haY06mcGzI6GtrfWFCPEf
DI8W5+fWthhbM0ltpQk0Elu6/lytqiAUL+T24SZsVHGgH+0cWGNyJR9otgotrvvY
yxrr19R488Yzge3p3SxpGjOjd4Nl/hXZG5QOZvBEgOTwx88rbZSZ0JUybSSuxeBI
4zg4GndPKP05b0c3We1CQ+a29k0CyGgzR8pEFzRyoiGH2N24EMzIAiW51ke4xn+N
9B+wq6q4lMXkJqNHzPWEORwznZ/BgMQxja6nMs5k5SQIEW/t78VwaJ5+XQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGonKqsFKjG7qed+498GoCm9Vh+jMB8GA1UdIwQY
MBaAFPijHS7utnqTfi6H12rZ+dF82pfwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LTWRMdTYyZXBOLUxvZlhhdG41MFh6YWxfQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODg2NjQ2LWZmYWEtNDAwZS04ZGY2
LTU5NWYyMTAwMTY2Yi8xLzEtS01kTHU2MmVwTi1Mb2ZYYXRuNTBYemFsX0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdiLzg4NjY0Ni1mZmFhLTQwMGUtOGRmNi01OTVmMjEwMDE2
NmIvMS8xLUtNZEx1NjJlcE4tTG9mWGF0bjUwWHphbF9BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlHd
G/uI3cfYE1xqlIBuFWNjfduZfvY6JSsHnQM2FTX28+ypz/JTskm4lfSac3RC6vbC
ZoYRcNl6HnHvgRCf0WRcbH6tO/Ph9Ybz/LnFlKf20JDxyH/NiWymu8YoJMZq671y
buqBo8xo0fLAwBTcAy0ZBB5SuGhtoZIHkFxlAFkmGYjIdGcc6VZJ11xR2IFsg/sM
P/iUSc4/L/ByTTzTJKR1cGkdwPdWmtDxx5Lt+d/Xd9Rj3m7AkruOEpgB8oJhGAeQ
VCpUHcEhNMa03ZQ1vVPcxUz/6E5GpvquvpNztTfx3KoAsSIgPrq/ySgdA0Sh9MQS
2xakTxWUI5gBp4UkZQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:28 2025 by rpki-client on console-fra.rpki-client.org