Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
File: yCIG9QbIJusQV-XCabNxDjiraWw.mft (raw, json)
Hash identifier: qRTj4AMwqhwoTDP8y1mXBokBtBrBzUruCgNzYU6KqFk=
Subject key identifier: 5F:54:41:D8:C6:6E:B2:0C:7D:34:EE:85:31:2F:8A:59:33:FB:EA:A8
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 0194BB5FEE618299581954BAE0108036B635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 08:00:13 +0000
Manifest this update: Fri 31 Jan 2025 08:00:13 +0000
Manifest next update: Sat 01 Feb 2025 08:00:13 +0000
Files and hashes: 1: J64w76zXIm6hBV_NCpHfs00xQ5M.roa (hash: tW24A+133JMJcQQWR3X2EMPjynjBMoPzLLODpQzP0s0=)
2: yCIG9QbIJusQV-XCabNxDjiraWw.crl (hash: dy+4oJhfezHEvSCvgq9i0la2jZBkVIj4nDYFTtUZbFw=)
3: zs6ZXDVhulOywUO2T8QRP9BjX5c.roa (hash: mDD3P3Ub10TzUpELhZJa1aGQdkKfYd5Nh93FhhJJLs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:ee:61:82:99:58:19:54:ba:e0:10:80:36:b6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Jan 31 08:00:13 2025 GMT
Not After : Feb 1 08:00:13 2025 GMT
Subject: CN=5f5441d8c66eb20c7d34ee85312f8a5933fbeaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:d9:d7:a2:dd:e6:fc:0f:fd:8d:92:67:3d:
3f:ea:50:60:f9:0f:e4:1a:3d:79:a6:d3:f6:e7:53:
56:4b:78:4b:3d:e6:86:99:b4:d4:b5:70:13:9b:41:
67:cb:93:85:2b:da:32:fe:07:73:a5:1c:23:db:43:
5a:e0:d8:b0:65:26:d3:da:ed:a1:16:6b:dc:38:64:
9f:63:95:6a:8f:ff:6f:47:c8:ee:61:e8:f0:ca:1b:
f1:d8:cf:76:64:c3:60:46:5a:6f:16:7c:eb:17:97:
2b:fc:3a:2d:0c:2c:d2:e3:ae:bb:ff:dd:6f:8c:6d:
c8:b8:9c:bd:33:41:b7:d8:e2:cf:16:64:12:76:9b:
8d:a1:9a:a8:ac:7a:6d:a6:ec:28:f2:d9:bf:13:97:
ea:44:55:54:a7:5c:74:f6:92:9b:10:0e:b0:62:ce:
48:f5:96:a1:d2:73:c2:55:98:9f:ce:eb:80:b8:94:
7a:db:e6:16:b6:a6:db:b7:c8:a6:a8:40:5d:78:bc:
da:89:b8:70:59:fe:bb:df:1d:a5:c2:5f:6e:5e:c1:
48:38:87:b1:a9:2c:9c:46:87:bd:66:c8:24:df:1b:
52:1e:20:ba:2b:38:a5:b0:30:30:75:ec:55:40:25:
e8:a9:bb:a4:a6:23:f5:34:a8:81:a6:85:28:48:e9:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:54:41:D8:C6:6E:B2:0C:7D:34:EE:85:31:2F:8A:59:33:FB:EA:A8
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b5:56:12:2c:0b:ef:5a:67:5b:b8:35:f1:82:98:9e:ec:78:
4a:6e:d7:4c:7e:1e:31:bb:25:56:d7:fa:fd:a9:75:50:a5:b7:
75:7f:bd:ad:ab:dd:4c:3e:4e:de:36:02:91:8c:19:e2:9b:ca:
ad:0d:89:70:00:f3:98:f1:4d:4d:89:8a:69:2b:83:4b:6e:f3:
53:57:d8:e9:75:f3:91:b9:b3:2e:d2:48:70:9e:49:72:54:9d:
06:49:9c:01:3a:67:8e:6f:11:4a:3d:9b:43:19:ce:6a:02:f1:
92:50:77:c4:3a:61:3c:83:b0:15:df:76:f0:40:fc:28:77:1b:
71:61:f1:03:0f:e6:a8:33:cf:2f:5f:b2:57:6f:20:6d:92:a2:
40:68:be:59:f5:44:64:99:f3:0c:0e:12:e5:84:5a:c0:ee:c3:
6d:81:f7:8a:b7:8e:3e:d3:63:ea:cb:e6:f6:ad:bb:33:d6:80:
ce:e4:52:9e:2f:05:e9:7f:50:41:5f:b0:fe:01:65:ab:0b:12:
a9:9b:ca:d2:fb:d9:5b:3f:2b:7c:82:86:84:70:28:ba:3f:5b:
25:83:d9:c0:ed:43:3f:60:5f:2d:82:5f:1a:a1:57:7b:d5:2b:
0f:64:f6:54:c3:02:11:c8:d9:a4:71:1f:69:5a:17:30:e9:8d:
8b:9c:03:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X+5hgplYGVS64BCANrY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MjIwNmY1MDZjODI2ZWIxMDU3ZTVjMjY5YjM3MTBlMzhh
YjY5NmMwHhcNMjUwMTMxMDgwMDEzWhcNMjUwMjAxMDgwMDEzWjAzMTEwLwYDVQQD
Eyg1ZjU0NDFkOGM2NmViMjBjN2QzNGVlODUzMTJmOGE1OTMzZmJlYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDfZ16Ld5vwP/Y2SZz0/6lBg+Q/k
Gj15ptP251NWS3hLPeaGmbTUtXATm0Fny5OFK9oy/gdzpRwj20Na4NiwZSbT2u2h
FmvcOGSfY5Vqj/9vR8juYejwyhvx2M92ZMNgRlpvFnzrF5cr/DotDCzS4667/91v
jG3IuJy9M0G32OLPFmQSdpuNoZqorHptpuwo8tm/E5fqRFVUp1x09pKbEA6wYs5I
9Zah0nPCVZifzuuAuJR62+YWtqbbt8imqEBdeLzaibhwWf673x2lwl9uXsFIOIex
qSycRoe9Zsgk3xtSHiC6KzilsDAwdexVQCXoqbukpiP1NKiBpoUoSOlF/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9UQdjGbrIMfTTuhTEvilkz++qoMB8GA1UdIwQY
MBaAFMgiBvUGyCbrEFflwmmzcQ44q2lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUNJRzlRYklKdXNRVi1YQ2FiTnhEamlyYVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yOWIwODItZDZkMS00MTQ3LWFmMWMt
NjFiMGM3ZmYyZTRlLzEveUNJRzlRYklKdXNRVi1YQ2FiTnhEamlyYVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yOWIwODItZDZkMS00MTQ3LWFmMWMtNjFiMGM3ZmYyZTRl
LzEveUNJRzlRYklKdXNRVi1YQ2FiTnhEamlyYVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7VWEiwL
71pnW7g18YKYnux4Sm7XTH4eMbslVtf6/al1UKW3dX+9ravdTD5O3jYCkYwZ4pvK
rQ2JcADzmPFNTYmKaSuDS27zU1fY6XXzkbmzLtJIcJ5JclSdBkmcATpnjm8RSj2b
QxnOagLxklB3xDphPIOwFd928ED8KHcbcWHxAw/mqDPPL1+yV28gbZKiQGi+WfVE
ZJnzDA4S5YRawO7DbYH3ireOPtNj6svm9q27M9aAzuRSni8F6X9QQV+w/gFlqwsS
qZvK0vvZWz8rfIKGhHAouj9bJYPZwO1DP2BfLYJfGqFXe9UrD2T2VMMCEcjZpHEf
aVoXMOmNi5wDcA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:58 2025 by rpki-client on console-fra.rpki-client.org