Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: S9LlNOIye/lGIn5+M43YCJvvSwbChup2CKxMM90u4X0=
Subject key identifier: 15:01:7E:59:BE:87:54:A4:53:B9:C2:E5:43:DD:24:73:47:5A:FC:75
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 0194BC3BEC9CB455B3FC6FBC6E50C8C0FE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: +6UgiEPb9sZE6S7KzN0YF+H7HGPYIPcrDDHSIo6jmNY=)
2: fs0ZmJI91FgrAyS_qaO4SZnCnx4.roa (hash: ycybeagUIzrtezPLqz+FSenm/c5GMC1YyzGUnHiNwd0=)
3: jswQ5MS9x68GoZ0Y-qDOtNDQJpI.roa (hash: RvRrftZ+/LxLaZ6N2kHwAtDW2/FTXY0AOnQQBNDsQnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ec:9c:b4:55:b3:fc:6f:bc:6e:50:c8:c0:fe:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=15017e59be8754a453b9c2e543dd2473475afc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:4a:4c:2e:11:b5:f2:9e:01:3d:02:fb:d3:
21:00:41:f6:44:5f:33:e6:be:55:9b:0a:07:a1:36:
2f:7f:c5:25:0a:fb:35:19:e5:57:a0:76:5e:5d:80:
00:67:8e:4e:38:ca:b2:2d:73:82:9d:a6:90:68:da:
83:d0:5a:98:87:dd:6d:6f:ea:79:d9:8b:24:c1:cc:
0e:05:bb:7c:fe:8a:92:cc:1a:da:a8:a9:67:0e:14:
64:ef:d4:ac:14:af:d3:49:6f:8b:da:c6:21:5b:3d:
f3:35:95:a0:41:e6:01:d5:0f:05:bd:a9:37:6e:62:
9b:cc:ef:e3:ef:74:36:de:aa:80:50:66:d4:62:25:
37:29:ff:c1:c6:99:b1:ea:b4:f4:e3:a1:cb:a4:38:
bb:d6:2d:35:57:9d:77:6c:c7:3b:b9:1c:e5:51:e3:
bb:4b:a1:d6:02:e7:07:2c:d6:35:46:c0:df:f9:ea:
81:c9:94:d1:1e:0f:52:65:42:63:4c:4e:61:15:27:
38:58:ba:5f:61:c1:d0:10:9a:36:b4:b9:b7:39:86:
43:e1:ef:7f:f7:c0:40:8e:75:57:69:49:f2:d9:25:
99:d0:1f:ea:fd:00:12:db:52:fb:ed:c7:af:90:a2:
30:aa:d2:ae:fb:d9:ed:3a:3a:4f:e7:41:12:1d:ad:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:01:7E:59:BE:87:54:A4:53:B9:C2:E5:43:DD:24:73:47:5A:FC:75
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3b:f1:03:1a:2b:6e:76:cc:98:5f:88:8b:b6:f1:dc:4a:a0:
55:de:34:69:f2:63:89:64:c4:9c:c7:72:20:33:8f:45:2b:5f:
59:91:e0:5a:6c:34:d8:f7:9c:5e:04:d6:e0:27:09:1f:a2:57:
e1:9b:bd:30:44:68:40:02:98:12:9c:fb:5f:3f:9d:ea:ec:1c:
ec:19:fd:8b:97:85:8b:b1:68:78:88:ab:36:f5:0f:ee:0f:1a:
55:ed:b2:1e:a1:f8:a9:15:2c:d2:74:6a:31:95:fe:ea:1c:05:
ef:f7:ed:e8:e9:af:75:f0:c3:4c:84:2d:eb:b8:e2:0c:b9:d4:
15:d2:83:01:ce:85:28:df:bc:2a:a8:bd:77:d3:a9:86:bd:99:
6b:e7:e0:fe:80:d7:3e:46:70:90:0b:2e:72:1b:e4:16:59:5a:
e9:c1:5b:2e:6e:fb:c4:4e:f3:54:13:4d:bf:9e:b9:ab:ea:6e:
1f:19:45:62:a4:09:3e:91:21:2f:cd:9b:25:6e:9c:47:98:e4:
62:8f:ff:2a:5e:83:0c:ff:eb:9a:37:7f:ac:a2:3d:2b:06:e0:
5a:50:e5:0e:55:4b:e9:f3:9c:b0:f9:68:fe:71:64:93:15:4f:
ff:7c:19:18:c3:bd:68:ba:f8:79:03:cc:dc:4a:8b:a1:62:71:
fa:9d:ba:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+yctFWz/G+8blDIwP4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxM2I5NDA0YTBjNDMyMjNhZGRjOGVhMWIxMGFiNzRiNzc3
YTJhMDEwHhcNMjUwMTMxMTIwMDMxWhcNMjUwMjAxMTIwMDMxWjAzMTEwLwYDVQQD
EygxNTAxN2U1OWJlODc1NGE0NTNiOWMyZTU0M2RkMjQ3MzQ3NWFmYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBRKTC4RtfKeAT0C+9MhAEH2RF8z
5r5VmwoHoTYvf8UlCvs1GeVXoHZeXYAAZ45OOMqyLXOCnaaQaNqD0FqYh91tb+p5
2YskwcwOBbt8/oqSzBraqKlnDhRk79SsFK/TSW+L2sYhWz3zNZWgQeYB1Q8Fvak3
bmKbzO/j73Q23qqAUGbUYiU3Kf/Bxpmx6rT046HLpDi71i01V513bMc7uRzlUeO7
S6HWAucHLNY1RsDf+eqByZTRHg9SZUJjTE5hFSc4WLpfYcHQEJo2tLm3OYZD4e9/
98BAjnVXaUny2SWZ0B/q/QAS21L77cevkKIwqtKu+9ntOjpP50ESHa0WPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUBflm+h1SkU7nC5UPdJHNHWvx1MB8GA1UdIwQY
MBaAFHE7lASgxDIjrdyOobEKt0t3eioBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83ZWM3YTItODMxOC00NjJmLTk2NmUt
N2E1MzFkNDgzNzQ3LzEvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83ZWM3YTItODMxOC00NjJmLTk2NmUtN2E1MzFkNDgzNzQ3
LzEvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzvxAxor
bnbMmF+Ii7bx3EqgVd40afJjiWTEnMdyIDOPRStfWZHgWmw02PecXgTW4CcJH6JX
4Zu9MERoQAKYEpz7Xz+d6uwc7Bn9i5eFi7FoeIirNvUP7g8aVe2yHqH4qRUs0nRq
MZX+6hwF7/ft6OmvdfDDTIQt67jiDLnUFdKDAc6FKN+8Kqi9d9Ophr2Za+fg/oDX
PkZwkAsuchvkFlla6cFbLm77xE7zVBNNv565q+puHxlFYqQJPpEhL82bJW6cR5jk
Yo//Kl6DDP/rmjd/rKI9KwbgWlDlDlVL6fOcsPlo/nFkkxVP/3wZGMO9aLr4eQPM
3EqLoWJx+p26Kw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:38 2025 by rpki-client on console-fra.rpki-client.org