Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
File: ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json)
Hash identifier: 4jwQB3GIC3K9dGpjE8uot7aPtc3+PRJ1TGizgUZHCrA=
Subject key identifier: D5:49:E4:1A:A2:6D:CC:70:C8:0B:37:06:ED:01:1C:71:11:41:36:A4
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial: 0194BB5FD957CA95EFA7F9BE425C46B3552B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
Manifest number: 0BE0
Signing time: Fri 31 Jan 2025 08:00:08 +0000
Manifest this update: Fri 31 Jan 2025 08:00:08 +0000
Manifest next update: Sat 01 Feb 2025 08:00:08 +0000
Files and hashes: 1: SPkSmU2cuYPaslq98jH650uCm8U.roa (hash: 3l9S6s2Phg4ZgQxgg2kV0SAhmKBDDFr+VpsMCOZHDtE=)
2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: Xs9lmsAJSIBXByTNtMvUe8G/sVfVmYYOmaQqd9TdHSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:d9:57:ca:95:ef:a7:f9:be:42:5c:46:b3:55:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Validity
Not Before: Jan 31 08:00:08 2025 GMT
Not After : Feb 1 08:00:08 2025 GMT
Subject: CN=d549e41aa26dcc70c80b3706ed011c71114136a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f8:f4:da:5f:cc:57:7d:f5:4e:1d:be:aa:00:
87:c1:92:ef:e0:2a:cc:39:d1:76:05:3a:15:b7:f0:
5c:4d:53:a7:20:7f:04:ed:b4:23:c2:af:0d:a9:25:
17:b2:22:57:e4:9d:cf:35:de:79:c0:ce:c8:c4:3d:
05:27:25:2a:a5:16:0e:50:60:5b:88:e5:fa:3b:ac:
63:bb:b0:8a:2c:97:b4:fd:89:0c:0e:cd:ae:ff:3e:
0c:ac:6a:05:4f:24:82:72:58:cd:e1:b4:66:c9:9e:
13:05:2c:ae:6b:02:14:02:4f:c7:83:3e:3f:13:4c:
10:95:d9:39:35:32:85:97:05:05:65:40:97:21:6a:
f2:9a:3f:b0:4a:fc:fe:ab:45:8a:0f:d0:85:fc:87:
75:b6:c2:42:c9:a7:31:25:5a:bb:d8:b0:ef:07:05:
9f:03:c2:ff:f3:6d:a3:ef:4d:e8:5d:ac:57:91:10:
b6:49:89:8e:6a:56:af:c2:31:d3:35:fb:9f:61:dc:
35:5c:bb:a6:0a:2e:a6:e6:3f:ae:36:64:f7:8a:e6:
44:98:d3:31:bb:b5:47:9f:0e:4b:bc:57:44:0b:e6:
ff:0f:87:8a:07:ea:86:bb:9c:20:82:51:0b:a4:5b:
f2:59:57:9f:23:2c:cb:4c:ba:9e:77:9b:ad:46:9e:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:49:E4:1A:A2:6D:CC:70:C8:0B:37:06:ED:01:1C:71:11:41:36:A4
X509v3 Authority Key Identifier:
keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9a:73:02:40:32:61:d5:e9:c3:e1:fc:ec:43:df:8c:15:b8:
31:2b:64:a3:8d:4f:47:65:77:d7:7b:57:3d:6e:9c:8b:20:4a:
c4:e3:5d:90:1d:a6:d8:a0:fc:62:c0:46:da:c8:2d:d9:bc:b2:
19:32:98:b2:2f:69:c3:4e:bf:70:fa:77:f9:94:6f:06:d3:8c:
49:cc:5d:77:ec:e2:cd:01:91:59:75:0a:90:67:a6:0d:d1:ee:
db:8a:d4:3d:3e:e3:0d:0e:0b:71:68:3a:2a:30:3c:8e:76:d0:
a1:32:b8:10:e8:d3:ee:0d:32:7c:ee:7b:10:1c:38:ae:4c:b5:
ec:95:9c:67:dc:cf:62:d9:30:cb:b5:07:2a:23:c6:c4:79:c2:
bc:b4:4f:2a:04:f1:2a:fb:43:c8:89:74:28:bc:49:d2:0d:75:
f1:21:0b:87:d0:5d:35:af:3a:ab:cf:09:e4:f9:7f:24:41:44:
52:53:60:78:0f:7d:2f:a6:aa:02:23:e3:c9:7c:22:37:5a:f3:
11:73:6f:b1:ba:4c:0b:5b:c4:04:b0:4b:44:0b:fe:b5:38:6b:
eb:75:1b:96:66:49:e1:f4:5e:07:bf:af:ad:18:b6:df:58:15:
a5:a3:d2:a3:46:ba:6f:11:5a:03:6f:58:52:79:ea:1b:48:75:
9a:10:4b:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X9lXypXvp/m+QlxGs1UrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMDhlMTY4Nzg3NDRiODhiODQyMDNlZWZlMmQ3N2E4N2Rh
YjkwYjEwHhcNMjUwMTMxMDgwMDA4WhcNMjUwMjAxMDgwMDA4WjAzMTEwLwYDVQQD
EyhkNTQ5ZTQxYWEyNmRjYzcwYzgwYjM3MDZlZDAxMWM3MTExNDEzNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvj02l/MV331Th2+qgCHwZLv4CrM
OdF2BToVt/BcTVOnIH8E7bQjwq8NqSUXsiJX5J3PNd55wM7IxD0FJyUqpRYOUGBb
iOX6O6xju7CKLJe0/YkMDs2u/z4MrGoFTySCcljN4bRmyZ4TBSyuawIUAk/Hgz4/
E0wQldk5NTKFlwUFZUCXIWrymj+wSvz+q0WKD9CF/Id1tsJCyacxJVq72LDvBwWf
A8L/822j703oXaxXkRC2SYmOalavwjHTNfufYdw1XLumCi6m5j+uNmT3iuZEmNMx
u7VHnw5LvFdEC+b/D4eKB+qGu5wgglELpFvyWVefIyzLTLqed5utRp5iDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVJ5BqibcxwyAs3Bu0BHHERQTakMB8GA1UdIwQY
MBaAFHsI4Wh4dEuIuEID7v4td6h9q5CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDIt
YTE4YzA2ZWM1MmU4LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDItYTE4YzA2ZWM1MmU4
LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJpzAkAy
YdXpw+H87EPfjBW4MStko41PR2V313tXPW6ciyBKxONdkB2m2KD8YsBG2sgt2byy
GTKYsi9pw06/cPp3+ZRvBtOMScxdd+zizQGRWXUKkGemDdHu24rUPT7jDQ4LcWg6
KjA8jnbQoTK4EOjT7g0yfO57EBw4rky17JWcZ9zPYtkwy7UHKiPGxHnCvLRPKgTx
KvtDyIl0KLxJ0g118SELh9BdNa86q88J5Pl/JEFEUlNgeA99L6aqAiPjyXwiN1rz
EXNvsbpMC1vEBLBLRAv+tThr63UblmZJ4fReB7+vrRi231gVpaPSo0a6bxFaA29Y
UnnqG0h1mhBL9Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:37 2025 by rpki-client on console-fra.rpki-client.org