Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
File: mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json)
Hash identifier: 3xhKkZbNk0yC43BS5NTTpwPVzRuZPTJO3yWcRuPd/1E=
Subject key identifier: B1:46:AC:88:A6:58:9A:E4:CB:C6:14:1F:24:3B:05:5C:4E:DD:BC:7D
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Certificate issuer: /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial: 0194BB97372194BC10C1CF90EA0DF309E614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
Manifest number: 0326
Signing time: Fri 31 Jan 2025 09:00:36 +0000
Manifest this update: Fri 31 Jan 2025 09:00:36 +0000
Manifest next update: Sat 01 Feb 2025 09:00:36 +0000
Files and hashes: 1: 6X834B5gcsNjXymrQMfROjTj6Pc.roa (hash: eUjrS9xR0GNckSwbqncq7fyluCC422BD9P+h/ci+z+8=)
2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: T0XqATsBN6qqqnpjQ+7S1Ip2/cqRZagOAris2uRFFQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:37:21:94:bc:10:c1:cf:90:ea:0d:f3:09:e6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Validity
Not Before: Jan 31 09:00:36 2025 GMT
Not After : Feb 1 09:00:36 2025 GMT
Subject: CN=b146ac88a6589ae4cbc6141f243b055c4eddbc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:84:d0:c0:99:e3:d2:ad:47:ed:27:6b:b5:
16:a0:27:43:a4:0b:e3:b9:ab:66:79:49:29:7f:4a:
0f:b0:0d:3a:b3:fd:34:d5:78:f7:9f:e9:6b:4d:01:
b2:96:75:ac:4a:a8:c7:a2:34:57:44:40:b1:8d:2d:
3c:7a:a1:04:69:a4:4a:7e:ec:79:1a:19:9b:17:c7:
e0:4b:63:fa:3d:c9:b9:ed:0f:d6:a2:06:e8:91:1f:
48:05:9b:28:f0:5c:28:02:e1:f0:cf:9a:aa:6a:f2:
09:0f:c9:ac:70:87:f6:ab:bb:fb:04:42:1d:ce:f2:
ff:9a:7e:ee:cc:9f:b6:71:b0:19:fc:e3:23:49:52:
36:95:39:20:2b:7d:d2:cc:2d:e1:a2:d3:59:02:e3:
ee:c4:47:42:5a:b5:56:56:92:2d:91:e0:99:e7:43:
a4:54:b4:42:16:1a:7f:f2:f0:34:77:76:50:b0:2a:
0f:e8:5d:89:ad:b2:93:17:bb:d4:c6:49:db:cd:85:
0f:e4:df:7e:db:87:5d:65:f4:6d:d7:37:a5:d3:13:
65:9a:4c:e9:de:25:41:9d:72:36:b3:a5:31:0e:0e:
f0:c5:a6:e1:83:b0:6c:b0:81:d2:ad:4d:42:ce:e3:
7f:0d:d6:a2:c3:7e:6a:60:9a:21:2d:9c:b8:c2:8c:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:46:AC:88:A6:58:9A:E4:CB:C6:14:1F:24:3B:05:5C:4E:DD:BC:7D
X509v3 Authority Key Identifier:
keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1b:f7:97:51:3c:5e:4d:b6:bf:81:41:3a:09:d7:79:28:bd:
0d:d4:00:61:a9:54:ca:03:f3:cf:dd:b8:aa:b4:95:95:84:9b:
c2:90:87:45:dd:fa:a0:cc:94:b9:47:1e:61:be:40:13:16:02:
97:8b:7c:86:28:dd:01:a2:ce:e1:6d:41:0e:81:14:3b:f2:82:
47:0d:81:f9:41:2a:6c:96:e7:59:9f:ce:f2:0e:82:36:8b:f0:
8b:af:86:ca:4e:48:d9:d1:be:a7:47:85:65:60:8a:36:8b:7c:
91:e2:d7:66:b4:11:95:f1:7f:01:12:81:0b:02:5b:e1:16:d4:
bf:4e:9f:e7:e5:e4:21:c5:49:c8:3b:85:a8:d0:37:92:2f:10:
e8:f3:5c:4a:4c:0d:db:5f:79:ec:3c:f6:30:6b:9f:08:80:3a:
da:fd:38:28:a2:51:40:90:be:22:a2:57:da:c8:5d:8f:18:8a:
35:ef:a1:e2:52:3e:ac:90:94:31:1c:df:cd:78:05:e1:b3:34:
f5:8b:1b:b2:54:63:f1:65:49:5a:43:28:70:32:f5:77:59:08:
ef:f9:a7:5d:29:ec:63:b0:b8:56:2c:a1:db:20:2a:ca:6d:7b:
7e:82:8e:40:df:20:04:f3:95:b4:e9:41:e3:bc:13:81:b9:e0:
ed:2b:72:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lzchlLwQwc+Q6g3zCeYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjNkMTA0MGMwNWYwOTlmYjRmZWRiNDk4YmI0YTE0ODMy
Nzk4ZmEwHhcNMjUwMTMxMDkwMDM2WhcNMjUwMjAxMDkwMDM2WjAzMTEwLwYDVQQD
EyhiMTQ2YWM4OGE2NTg5YWU0Y2JjNjE0MWYyNDNiMDU1YzRlZGRiYzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtueE0MCZ49KtR+0na7UWoCdDpAvj
uatmeUkpf0oPsA06s/001Xj3n+lrTQGylnWsSqjHojRXRECxjS08eqEEaaRKfux5
GhmbF8fgS2P6Pcm57Q/WogbokR9IBZso8FwoAuHwz5qqavIJD8mscIf2q7v7BEId
zvL/mn7uzJ+2cbAZ/OMjSVI2lTkgK33SzC3hotNZAuPuxEdCWrVWVpItkeCZ50Ok
VLRCFhp/8vA0d3ZQsCoP6F2JrbKTF7vUxknbzYUP5N9+24ddZfRt1zel0xNlmkzp
3iVBnXI2s6UxDg7wxabhg7BssIHSrU1CzuN/Ddaiw35qYJohLZy4wowBiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFGrIimWJrky8YUHyQ7BVxO3bx9MB8GA1UdIwQY
MBaAFJkj0QQMBfCZ+0/ttJi7ShSDJ5j6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80ZDA1Y2YtNjNiMC00NmFmLTllMmMt
MjA2ZTgyMzM2Y2RlLzEvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy80ZDA1Y2YtNjNiMC00NmFmLTllMmMtMjA2ZTgyMzM2Y2Rl
LzEvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRv3l1E8
Xk22v4FBOgnXeSi9DdQAYalUygPzz924qrSVlYSbwpCHRd36oMyUuUceYb5AExYC
l4t8hijdAaLO4W1BDoEUO/KCRw2B+UEqbJbnWZ/O8g6CNovwi6+Gyk5I2dG+p0eF
ZWCKNot8keLXZrQRlfF/ARKBCwJb4RbUv06f5+XkIcVJyDuFqNA3ki8Q6PNcSkwN
21957Dz2MGufCIA62v04KKJRQJC+IqJX2shdjxiKNe+h4lI+rJCUMRzfzXgF4bM0
9YsbslRj8WVJWkMocDL1d1kI7/mnXSnsY7C4Viyh2yAqym17foKOQN8gBPOVtOlB
47wTgbng7StyQQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:43 2025 by rpki-client on console-fra.rpki-client.org