Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
File: u76WEtFEC8bHBOBGXw711spzl6Y.mft (raw, json)
Hash identifier: /nrqFcIEg2R8SCWTXufycjAGm93u14rwJk2ZtYWUq/I=
Subject key identifier: 62:D6:94:9B:69:9D:70:8E:6B:99:B3:51:63:D6:04:FE:39:84:79:2A
Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
Certificate issuer: /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Certificate serial: 0194BAF20BF7D9ED85CDD8C32A8781D10352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 06:00:12 +0000
Manifest this update: Fri 31 Jan 2025 06:00:12 +0000
Manifest next update: Sat 01 Feb 2025 06:00:12 +0000
Files and hashes: 1: D46VMQb05uTNgl5dbNVDFYzDjzE.roa (hash: V0B6OmfcULHphu50p4sAuyLvveC3GQAGdFvTao1f9Y8=)
2: u76WEtFEC8bHBOBGXw711spzl6Y.crl (hash: SpLex7L9NG/40ps1WNc0K3MWk1EcwjvZ1Kfg8ZD/j1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:0b:f7:d9:ed:85:cd:d8:c3:2a:87:81:d1:03:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Validity
Not Before: Jan 31 06:00:12 2025 GMT
Not After : Feb 1 06:00:12 2025 GMT
Subject: CN=62d6949b699d708e6b99b35163d604fe3984792a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:25:75:b3:bf:18:40:25:ac:af:79:c9:0b:
67:5c:5e:0c:9a:48:5c:ec:bc:b5:ff:00:1b:d5:1a:
f4:8b:52:8c:97:42:91:5b:9e:15:76:82:d1:0d:cc:
fc:38:81:9d:aa:7a:c4:c4:29:f1:7d:dc:4e:8c:14:
8c:74:1d:d6:41:d8:d9:63:96:de:62:d6:40:10:ee:
c8:6a:f1:dc:5e:d9:9f:be:49:b8:bd:87:4f:b8:8f:
b4:48:aa:8f:70:3f:8b:c8:a9:76:a8:ab:f5:cc:1a:
64:dc:08:cf:b7:d6:69:38:31:0e:59:39:ce:f5:a8:
42:92:c0:45:39:d8:72:b0:cf:49:b4:eb:81:77:ee:
00:fe:b7:25:14:17:35:ef:57:56:84:48:f8:d7:b0:
36:ec:52:a1:eb:12:b0:dc:bb:bd:e7:a9:6d:9e:c2:
d9:31:9d:36:0b:5c:99:ec:36:a2:16:b5:5f:e2:60:
83:97:c6:0e:38:85:7a:da:a5:7a:9a:9f:95:47:40:
e6:8b:72:cd:45:8e:68:8f:86:70:19:8a:0d:51:b3:
d7:1f:dc:04:f4:c2:a4:23:07:d3:9e:3a:57:3d:06:
35:2a:7f:a5:c7:ff:86:48:aa:cf:af:36:57:a0:07:
7d:c7:90:8c:fb:15:8a:8c:af:1c:f3:2c:6b:82:f2:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D6:94:9B:69:9D:70:8E:6B:99:B3:51:63:D6:04:FE:39:84:79:2A
X509v3 Authority Key Identifier:
keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c4:da:71:67:ea:5e:6c:24:ad:b6:f9:31:9c:bd:8b:cc:31:
7b:29:81:fa:4c:04:49:47:34:39:53:0b:e8:60:4f:e6:3e:98:
f1:a6:d8:d3:14:1c:d5:00:fe:47:21:05:01:ac:1b:d9:dd:3a:
b3:76:69:3e:bc:7e:29:0a:ec:7d:21:89:bd:f5:b9:a0:c4:14:
66:5c:d0:e5:20:f2:80:34:b7:2e:0c:41:b6:a9:78:bb:99:53:
82:82:89:77:8e:5c:9e:1d:f5:7a:46:25:a0:ea:d3:ae:4b:81:
67:95:e0:b3:51:49:0a:01:82:1a:71:b4:80:22:01:f5:1a:67:
2c:27:d5:9e:3b:bf:b3:39:0b:f3:53:d9:44:9e:ac:d3:0c:85:
ca:72:92:a7:0c:5c:7b:1f:98:a6:16:35:24:59:d4:bf:7c:63:
31:35:4a:59:ed:6c:72:c3:54:81:2b:8b:98:87:e8:15:48:6b:
30:89:f1:f3:58:9a:61:a8:1b:8a:c6:33:f2:34:3e:98:6e:bb:
ab:f4:5a:91:08:66:af:0f:c2:9a:7d:d8:c6:03:ee:b7:82:1c:
fc:53:f6:aa:25:da:81:d5:d8:ad:4b:a0:55:d2:e4:e1:0e:0a:
13:21:17:60:39:1f:67:25:24:1b:1b:68:d7:2b:f1:9b:70:07:
fa:f8:c4:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68gv32e2FzdjDKoeB0QNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmU5NjEyZDE0NDBiYzZjNzA0ZTA0NjVmMGVmNWQ2Y2E3
Mzk3YTYwHhcNMjUwMTMxMDYwMDEyWhcNMjUwMjAxMDYwMDEyWjAzMTEwLwYDVQQD
Eyg2MmQ2OTQ5YjY5OWQ3MDhlNmI5OWIzNTE2M2Q2MDRmZTM5ODQ3OTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyAldbO/GEAlrK95yQtnXF4Mmkhc
7Ly1/wAb1Rr0i1KMl0KRW54VdoLRDcz8OIGdqnrExCnxfdxOjBSMdB3WQdjZY5be
YtZAEO7IavHcXtmfvkm4vYdPuI+0SKqPcD+LyKl2qKv1zBpk3AjPt9ZpODEOWTnO
9ahCksBFOdhysM9JtOuBd+4A/rclFBc171dWhEj417A27FKh6xKw3Lu956ltnsLZ
MZ02C1yZ7DaiFrVf4mCDl8YOOIV62qV6mp+VR0Dmi3LNRY5oj4ZwGYoNUbPXH9wE
9MKkIwfTnjpXPQY1Kn+lx/+GSKrPrzZXoAd9x5CM+xWKjK8c8yxrgvKMUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLWlJtpnXCOa5mzUWPWBP45hHkqMB8GA1UdIwQY
MBaAFLu+lhLRRAvGxwTgRl8O9dbKc5emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9mMjY0MGEtNDZlNy00NjUwLTgzYzUt
Y2M1NWI4MTMwMmNmLzEvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9mMjY0MGEtNDZlNy00NjUwLTgzYzUtY2M1NWI4MTMwMmNm
LzEvdTc2V0V0RkVDOGJIQk9CR1h3NzExc3B6bDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8TacWfq
Xmwkrbb5MZy9i8wxeymB+kwESUc0OVML6GBP5j6Y8abY0xQc1QD+RyEFAawb2d06
s3ZpPrx+KQrsfSGJvfW5oMQUZlzQ5SDygDS3LgxBtql4u5lTgoKJd45cnh31ekYl
oOrTrkuBZ5Xgs1FJCgGCGnG0gCIB9RpnLCfVnju/szkL81PZRJ6s0wyFynKSpwxc
ex+YphY1JFnUv3xjMTVKWe1scsNUgSuLmIfoFUhrMInx81iaYagbisYz8jQ+mG67
q/RakQhmrw/Cmn3YxgPut4Ic/FP2qiXagdXYrUugVdLk4Q4KEyEXYDkfZyUkGxto
1yvxm3AH+vjEHQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:04 2025 by rpki-client on console-fra.rpki-client.org