Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: oRTuh0ixwxUwXflQa4Vx8/IC9xXvc0Liff4T3mfPz4s=
Subject key identifier: 8D:5D:B4:91:02:CC:C3:73:AB:A7:48:D9:7E:96:7A:EB:A1:3D:E1:E2
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 0194BB6004CE582A174B114ABB1EDD3BC50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:19 +0000
Manifest this update: Fri 31 Jan 2025 08:00:19 +0000
Manifest next update: Sat 01 Feb 2025 08:00:19 +0000
Files and hashes: 1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: mxVvDwLqSJ17r8vW/E8rgd3OKQZ6i6bt1WV2xr60o+w=)
2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:04:ce:58:2a:17:4b:11:4a:bb:1e:dd:3b:c5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: Jan 31 08:00:19 2025 GMT
Not After : Feb 1 08:00:19 2025 GMT
Subject: CN=8d5db49102ccc373aba748d97e967aeba13de1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:7b:c3:fe:84:49:70:e6:49:f6:b4:80:52:
16:c5:f5:46:b8:8b:56:d8:35:75:94:8e:d9:a6:e0:
79:14:bb:91:1d:9f:78:95:a8:84:4c:35:1e:80:bb:
3d:4e:05:ec:b6:e7:9d:83:68:e8:0c:93:69:04:c9:
c4:9f:dc:9a:dc:44:8f:a0:c0:ed:db:cf:9e:62:e7:
0d:e6:a6:67:93:7d:e9:14:cf:fa:17:ce:b5:a3:c8:
aa:58:03:40:ea:f4:7a:85:71:ba:71:de:70:29:cb:
5b:4c:d9:cb:74:34:99:f1:da:72:1b:c3:f2:2e:3d:
4d:7d:8e:b9:06:4c:24:6b:06:4b:c3:d6:c5:4b:31:
c0:25:83:56:33:cd:2c:05:95:8c:96:15:b9:d1:3d:
31:f2:a9:2e:67:11:4f:71:75:95:8b:a7:9a:b0:16:
19:72:d6:11:9b:17:63:65:c5:5e:fa:43:ac:a2:0c:
4f:99:86:ac:7a:f4:b1:eb:16:7f:17:47:20:b3:6a:
9b:fb:13:26:bd:f0:c3:24:49:b6:d4:26:84:b2:84:
03:18:fc:9d:ad:af:f0:9c:5f:b0:eb:96:78:38:63:
e5:f4:4c:48:73:e5:a1:c3:0c:bb:35:a3:b2:1e:58:
74:7a:07:2a:38:bd:0b:95:99:53:05:ca:73:5f:fd:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5D:B4:91:02:CC:C3:73:AB:A7:48:D9:7E:96:7A:EB:A1:3D:E1:E2
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4d:12:8b:a4:03:c0:81:ea:81:24:f2:56:16:3f:62:d7:66:
37:c4:12:49:8a:2d:4b:e3:45:39:60:1e:bb:1d:30:d0:20:49:
55:db:b7:a2:c1:83:5b:6a:3b:ec:78:dd:95:c2:94:88:00:46:
62:9c:f6:35:c0:cf:f6:1a:40:f0:6e:e6:23:49:5f:10:c9:16:
c6:ec:25:2d:eb:5f:31:d4:ba:d1:09:2d:53:1e:98:1f:a3:9a:
01:cb:dd:74:70:05:e2:6c:38:aa:6d:69:98:80:c1:43:1b:23:
94:f6:db:33:e5:0c:f9:03:4b:e1:4b:c3:d8:99:d0:53:74:ae:
0b:39:97:d4:c2:93:ae:15:04:e3:24:e4:01:e9:6c:b6:5e:c8:
96:bd:c1:40:94:0f:96:f7:bf:38:93:6e:76:7e:33:cc:4e:ba:
74:ac:6d:71:db:12:fd:d9:8b:34:71:43:92:4d:34:9a:f3:ec:
a9:2a:4c:ee:5d:6b:41:45:aa:00:09:23:f5:a4:7b:aa:30:8f:
9a:93:86:f2:77:d5:11:09:46:c3:6e:b8:45:6f:bf:f1:af:70:
32:26:ef:f6:93:69:de:b9:29:6c:c5:72:ed:85:a1:25:90:46:
d4:a4:38:d3:27:49:38:37:54:f3:2f:be:ca:8c:10:cc:98:f1:
87:b4:a1:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YATOWCoXSxFKux7dO8UKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2RjNTk5NmM4MTc4YzBkZTJlYTIwNDk5ZWViZGVhZGU0
MDIzZWIwHhcNMjUwMTMxMDgwMDE5WhcNMjUwMjAxMDgwMDE5WjAzMTEwLwYDVQQD
Eyg4ZDVkYjQ5MTAyY2NjMzczYWJhNzQ4ZDk3ZTk2N2FlYmExM2RlMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ17w/6ESXDmSfa0gFIWxfVGuItW
2DV1lI7ZpuB5FLuRHZ94laiETDUegLs9TgXstuedg2joDJNpBMnEn9ya3ESPoMDt
28+eYucN5qZnk33pFM/6F861o8iqWANA6vR6hXG6cd5wKctbTNnLdDSZ8dpyG8Py
Lj1NfY65BkwkawZLw9bFSzHAJYNWM80sBZWMlhW50T0x8qkuZxFPcXWVi6easBYZ
ctYRmxdjZcVe+kOsogxPmYasevSx6xZ/F0cgs2qb+xMmvfDDJEm21CaEsoQDGPyd
ra/wnF+w65Z4OGPl9ExIc+Whwwy7NaOyHlh0egcqOL0LlZlTBcpzX/0PHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1dtJECzMNzq6dI2X6WeuuhPeHiMB8GA1UdIwQY
MBaAFPV9xZlsgXjA3i6iBJnuvereQCPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYt
YzdiMTBkNTA1Y2ZlLzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYtYzdiMTBkNTA1Y2Zl
LzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATk0Si6QD
wIHqgSTyVhY/YtdmN8QSSYotS+NFOWAeux0w0CBJVdu3osGDW2o77HjdlcKUiABG
Ypz2NcDP9hpA8G7mI0lfEMkWxuwlLetfMdS60QktUx6YH6OaAcvddHAF4mw4qm1p
mIDBQxsjlPbbM+UM+QNL4UvD2JnQU3SuCzmX1MKTrhUE4yTkAelstl7Ilr3BQJQP
lve/OJNudn4zzE66dKxtcdsS/dmLNHFDkk00mvPsqSpM7l1rQUWqAAkj9aR7qjCP
mpOG8nfVEQlGw264RW+/8a9wMibv9pNp3rkpbMVy7YWhJZBG1KQ40ydJODdU8y++
yowQzJjxh7ShUg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:35 2025 by rpki-client on console-fra.rpki-client.org