Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: Llmstg5mmQGumCZleU/tNlOljmCBV3A64qQsIX9vAOI=
Subject key identifier: 5C:45:1E:87:5D:66:5D:42:5C:7D:3E:C2:F8:DB:D8:D1:3B:FD:EB:87
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 0194BABB792326D0B6575A65D356463C4679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 0E6C
Signing time: Fri 31 Jan 2025 05:00:35 +0000
Manifest this update: Fri 31 Jan 2025 05:00:35 +0000
Manifest next update: Sat 01 Feb 2025 05:00:35 +0000
Files and hashes: 1: WCwlNGrnqXg0s07Q732U-2ylHg4.roa (hash: JC3pVBoWwnSgFg4cCXzdGvV9c4AWdX+y7n3AH9a1Lis=)
2: gxWWshLVL78MLbUOGS_UTSmDxeY.roa (hash: G/YwVFA1eLZG30BPIX1DOxGfW057e/H/rKZfMewGrbc=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: DFrq9JxCYghuFvXJs3JuZL7ROZ10iivuM+ykLXLXzMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:79:23:26:d0:b6:57:5a:65:d3:56:46:3c:46:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Jan 31 05:00:35 2025 GMT
Not After : Feb 1 05:00:35 2025 GMT
Subject: CN=5c451e875d665d425c7d3ec2f8dbd8d13bfdeb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:7d:2b:41:cc:3c:ec:8c:71:d2:5b:1b:89:
46:02:34:48:cc:4d:73:f8:cb:5e:56:19:ec:fa:87:
29:c2:94:bf:12:44:ab:c6:7f:d9:2e:82:62:01:48:
09:18:d8:1b:82:ea:f4:f6:55:d8:fe:4f:22:6c:d6:
72:89:46:a7:09:74:0e:af:34:d5:e3:b0:5a:3b:db:
45:b2:c1:90:71:6d:50:eb:43:70:b1:f8:ce:2d:d0:
52:5f:56:7b:28:85:1e:e0:99:87:7a:44:03:bf:09:
79:06:8d:27:c4:cb:dd:f9:b8:10:e1:da:ea:22:d5:
84:3d:b7:ad:35:64:d9:3e:43:fb:da:8f:9d:84:8b:
3f:b6:cd:13:c2:84:2d:35:02:04:95:5a:33:96:5f:
65:90:4b:5a:f6:48:2d:6a:ff:0d:0f:d1:ea:35:4e:
a8:2b:c8:dc:7f:ad:54:72:42:45:37:28:b9:56:fa:
7d:5f:a3:23:ee:a7:04:8c:4d:c2:e4:ac:59:f6:d2:
a6:62:56:f7:34:bc:be:3b:d4:0c:44:56:3a:9f:4f:
2c:28:0d:46:43:01:e3:08:c9:e3:90:e5:49:4e:62:
7f:f1:a7:ee:71:d0:e3:d5:ce:6e:19:22:e8:cc:91:
2a:e1:ea:e0:bb:89:7c:47:01:4c:55:3a:56:01:6d:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:45:1E:87:5D:66:5D:42:5C:7D:3E:C2:F8:DB:D8:D1:3B:FD:EB:87
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ed:bd:2c:3d:ce:67:b1:6b:98:c0:54:dd:d2:c2:04:6b:17:
9d:17:87:a0:5a:8a:6c:39:2c:83:1a:a9:09:2b:17:7e:8d:a7:
a3:8a:36:56:cc:aa:69:35:a1:57:c7:e0:d3:41:92:0c:5b:83:
73:7a:18:5a:14:83:43:69:3c:f1:90:35:7e:59:e4:09:8f:7a:
09:46:77:f3:73:39:b4:d1:41:26:92:3b:39:88:9e:5a:ae:2c:
51:b5:27:74:ba:27:1f:69:07:49:eb:c4:70:11:33:9f:d1:c8:
ba:87:ea:03:4f:d7:b1:31:3a:d4:cc:44:3c:e2:bc:1a:d8:47:
3e:5e:dd:00:a3:f7:a3:2a:0e:38:a2:ff:60:30:dc:ef:de:e7:
28:f0:80:5d:c5:64:5e:2d:d4:bb:01:a8:f0:a9:4f:19:2c:12:
4e:04:c2:7c:3e:f3:54:32:7d:bc:0b:36:d9:3a:26:d1:11:dc:
91:72:f0:de:74:5f:ea:24:eb:18:b8:10:88:7b:84:9d:cc:bf:
66:a7:00:8b:b9:21:94:0f:90:f0:1e:88:3e:15:12:a4:ed:cb:
39:a9:a9:bd:5c:28:44:3a:98:ad:7e:8f:ed:53:e0:73:5d:df:
6f:f8:c6:d6:44:52:e5:3f:87:79:1c:df:32:9c:8e:b7:40:4e:
03:fe:e8:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u3kjJtC2V1pl01ZGPEZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh
MmQxMWIwHhcNMjUwMTMxMDUwMDM1WhcNMjUwMjAxMDUwMDM1WjAzMTEwLwYDVQQD
Eyg1YzQ1MWU4NzVkNjY1ZDQyNWM3ZDNlYzJmOGRiZDhkMTNiZmRlYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUV9K0HMPOyMcdJbG4lGAjRIzE1z
+MteVhns+ocpwpS/EkSrxn/ZLoJiAUgJGNgbgur09lXY/k8ibNZyiUanCXQOrzTV
47BaO9tFssGQcW1Q60NwsfjOLdBSX1Z7KIUe4JmHekQDvwl5Bo0nxMvd+bgQ4drq
ItWEPbetNWTZPkP72o+dhIs/ts0TwoQtNQIElVozll9lkEta9kgtav8ND9HqNU6o
K8jcf61UckJFNyi5Vvp9X6Mj7qcEjE3C5KxZ9tKmYlb3NLy+O9QMRFY6n08sKA1G
QwHjCMnjkOVJTmJ/8afucdDj1c5uGSLozJEq4ergu4l8RwFMVTpWAW28uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxFHoddZl1CXH0+wvjb2NE7/euHMB8GA1UdIwQY
MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct
MDA4NWEzNjVhMjVmLzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm
LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABe29LD3O
Z7FrmMBU3dLCBGsXnReHoFqKbDksgxqpCSsXfo2no4o2VsyqaTWhV8fg00GSDFuD
c3oYWhSDQ2k88ZA1flnkCY96CUZ383M5tNFBJpI7OYieWq4sUbUndLonH2kHSevE
cBEzn9HIuofqA0/XsTE61MxEPOK8GthHPl7dAKP3oyoOOKL/YDDc797nKPCAXcVk
Xi3UuwGo8KlPGSwSTgTCfD7zVDJ9vAs22Tom0RHckXLw3nRf6iTrGLgQiHuEncy/
ZqcAi7khlA+Q8B6IPhUSpO3LOampvVwoRDqYrX6P7VPgc13fb/jG1kRS5T+HeRzf
MpyOt0BOA/7o3Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:08 2025 by rpki-client on console-fra.rpki-client.org