Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
File: UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft (raw, json)
Hash identifier: tpbj/L8xfgv1e60yf+ab/YZulj9EBF/o0XpL90hsa7o=
Subject key identifier: 22:21:BD:1E:1D:51:D8:16:03:6B:ED:13:43:E6:8E:E1:F4:7F:3B:22
Authority key identifier: 52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
Certificate issuer: /CN=52702cdee043094ac2f33170125f94f7034da8f0
Certificate serial: 0194BC053A2151D3A340AA56EE26BD78E9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
Manifest number: 0DC5
Signing time: Fri 31 Jan 2025 11:00:46 +0000
Manifest this update: Fri 31 Jan 2025 11:00:46 +0000
Manifest next update: Sat 01 Feb 2025 11:00:46 +0000
Files and hashes: 1: UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl (hash: 9cR0fRqsKmSR2YfcDDT2KiR7Iv2vzcZAfK3Wz5Y0SHk=)
2: eZTqCsy1o9f-eq_FZSRPL4-aBD8.roa (hash: cQOdS5lB0S1LA9krJg3sdASUyUTn/NkoA0OQ3se0FuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:3a:21:51:d3:a3:40:aa:56:ee:26:bd:78:e9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52702cdee043094ac2f33170125f94f7034da8f0
Validity
Not Before: Jan 31 11:00:46 2025 GMT
Not After : Feb 1 11:00:46 2025 GMT
Subject: CN=2221bd1e1d51d816036bed1343e68ee1f47f3b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:3f:89:9f:05:25:5b:c5:cd:fb:64:be:f2:
bf:93:e8:36:c7:dd:79:b8:e8:65:3d:a8:da:df:6b:
8f:f2:fa:14:69:07:e0:e9:37:73:28:fc:98:3a:d5:
ec:19:a3:a1:38:5a:49:fd:f8:7c:65:6d:bf:64:9c:
bf:c3:21:cc:64:f5:2e:f5:e9:4b:c8:4f:11:5d:e3:
fc:dc:45:f1:24:bb:50:bb:46:d6:19:61:2a:48:20:
f2:5a:59:aa:a9:47:e8:0d:df:bc:65:39:23:41:e8:
b7:37:37:f8:b9:63:01:8d:7a:4b:c2:48:41:d5:de:
77:ad:2f:d8:40:f9:47:ec:8f:cb:e3:16:04:ef:d8:
c8:3c:7f:07:6b:a1:18:8f:9c:63:47:61:98:2f:93:
8d:42:e4:1c:68:07:16:27:26:08:13:61:09:0c:6c:
6c:b6:01:aa:06:77:39:c8:c4:ba:0b:ae:b9:61:a5:
15:90:0f:68:5c:d0:cb:93:7b:d6:ce:14:1b:f5:47:
fe:be:8c:6a:b7:61:ad:6f:39:1d:58:d3:03:a9:d1:
21:08:fb:da:55:f6:bd:9a:99:5e:31:36:b0:86:f4:
9a:4d:07:88:6f:24:ea:67:06:79:58:81:ca:e3:0a:
e6:a0:f3:0e:32:95:b5:8c:d6:d0:e0:7f:a8:0e:cf:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:21:BD:1E:1D:51:D8:16:03:6B:ED:13:43:E6:8E:E1:F4:7F:3B:22
X509v3 Authority Key Identifier:
keyid:52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b1:52:e1:97:a4:ff:0e:6d:78:7e:25:f7:63:cb:d2:bb:c2:
68:40:15:5a:81:70:de:20:d3:5f:27:bb:16:22:4e:f9:82:92:
ec:aa:24:33:f6:78:d7:b5:97:ef:f6:1c:22:db:73:ef:88:90:
fa:a9:43:4d:51:bb:f3:31:c8:64:79:d7:eb:a5:06:c0:cc:87:
a6:40:ab:e3:a0:98:7e:84:f7:47:3b:49:ba:b4:e4:f0:7b:40:
23:9d:28:c3:d0:fe:d0:c4:a2:32:42:1b:1d:eb:25:d9:8b:67:
c7:54:73:00:5d:dc:45:d7:bd:21:0b:f8:8f:4d:cd:eb:a5:78:
b6:07:06:12:21:77:de:07:72:05:78:ce:7e:e5:bc:e0:26:f4:
df:68:fc:dc:49:0e:6d:0e:6d:79:50:a8:59:15:83:7a:6e:72:
5e:eb:76:7b:1f:6d:0c:1b:f2:44:d0:f2:10:cb:c3:a7:a5:ab:
48:f6:9c:9e:a8:62:80:60:8f:66:fe:bb:b6:47:82:3e:2e:3f:
d7:54:ba:85:4f:18:75:9d:48:b8:0d:13:5b:9d:5e:3a:7d:94:
16:7c:21:6b:e7:03:1c:c6:61:7b:82:ce:cb:2a:d8:88:8c:8f:
91:e9:ff:ac:00:51:22:0f:5d:e9:38:75:af:f6:77:d1:18:db:
41:95:2b:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BTohUdOjQKpW7ia9eOnOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNzAyY2RlZTA0MzA5NGFjMmYzMzE3MDEyNWY5NGY3MDM0
ZGE4ZjAwHhcNMjUwMTMxMTEwMDQ2WhcNMjUwMjAxMTEwMDQ2WjAzMTEwLwYDVQQD
EygyMjIxYmQxZTFkNTFkODE2MDM2YmVkMTM0M2U2OGVlMWY0N2YzYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5s/iZ8FJVvFzftkvvK/k+g2x915
uOhlPaja32uP8voUaQfg6TdzKPyYOtXsGaOhOFpJ/fh8ZW2/ZJy/wyHMZPUu9elL
yE8RXeP83EXxJLtQu0bWGWEqSCDyWlmqqUfoDd+8ZTkjQei3Nzf4uWMBjXpLwkhB
1d53rS/YQPlH7I/L4xYE79jIPH8Ha6EYj5xjR2GYL5ONQuQcaAcWJyYIE2EJDGxs
tgGqBnc5yMS6C665YaUVkA9oXNDLk3vWzhQb9Uf+voxqt2GtbzkdWNMDqdEhCPva
Vfa9mpleMTawhvSaTQeIbyTqZwZ5WIHK4wrmoPMOMpW1jNbQ4H+oDs+U1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIhvR4dUdgWA2vtE0PmjuH0fzsiMB8GA1UdIwQY
MBaAFFJwLN7gQwlKwvMxcBJflPcDTajwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kOGM4NWUtNDE5OC00ODY5LWI5Y2Qt
ZTI4MGI2NTAxNzA0LzEvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kOGM4NWUtNDE5OC00ODY5LWI5Y2QtZTI4MGI2NTAxNzA0
LzEvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLFS4Zek
/w5teH4l92PL0rvCaEAVWoFw3iDTXye7FiJO+YKS7KokM/Z417WX7/YcIttz74iQ
+qlDTVG78zHIZHnX66UGwMyHpkCr46CYfoT3RztJurTk8HtAI50ow9D+0MSiMkIb
Hesl2Ytnx1RzAF3cRde9IQv4j03N66V4tgcGEiF33gdyBXjOfuW84Cb032j83EkO
bQ5teVCoWRWDem5yXut2ex9tDBvyRNDyEMvDp6WrSPacnqhigGCPZv67tkeCPi4/
11S6hU8YdZ1IuA0TW51eOn2UFnwha+cDHMZhe4LOyyrYiIyPken/rABRIg9d6Th1
r/Z30RjbQZUr9Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:24 2025 by rpki-client on console-fra.rpki-client.org