Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
File: Mw5kD51jupQ6l7PcENTGhEpdPcE.mft (raw, json)
Hash identifier: MukypS5YLIbZ6w9K1Y7NImVy2757ydXcGTaMxIqSBwo=
Subject key identifier: C6:0C:52:6D:5C:81:C8:CA:77:77:BB:65:AD:2E:76:4C:5E:A7:B0:A5
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Certificate issuer: /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial: 0194BABB7FA5AC22007C8C3EFF076DA2FE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 05:00:37 +0000
Manifest this update: Fri 31 Jan 2025 05:00:37 +0000
Manifest next update: Sat 01 Feb 2025 05:00:37 +0000
Files and hashes: 1: 1-Jd_qc8apOR4p6laQN0XEPGV69E.roa (hash: GOoNb/QIaZMGL6bF2qxv1TbNPoQ9D5q5E8h1u/bWgGs=)
2: Mw5kD51jupQ6l7PcENTGhEpdPcE.crl (hash: 5mFLMvxSnmqcvMs2xGoqRN7Z6h7CnzM3Qj9f3H+0OM0=)
3: mHYNXLzzWgHgWDnXKZl-4Vzir0c.roa (hash: li78OcXCZpUgKLA0YsVNzvnIFn5UmiFLcC5dihhrvhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:7f:a5:ac:22:00:7c:8c:3e:ff:07:6d:a2:fe:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Validity
Not Before: Jan 31 05:00:37 2025 GMT
Not After : Feb 1 05:00:37 2025 GMT
Subject: CN=c60c526d5c81c8ca7777bb65ad2e764c5ea7b0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ea:49:b4:19:81:ce:56:9b:0b:31:20:0d:98:
bb:61:ff:59:d0:ef:1c:e0:e5:ac:5a:6f:db:0f:7f:
16:61:9c:da:47:cb:83:80:cc:b7:60:9f:0d:96:3b:
8c:3f:96:5d:44:23:26:9c:34:df:ac:d0:d8:8f:85:
5c:90:02:98:1c:65:2a:34:ad:45:d3:ed:1f:ca:d4:
0a:8f:df:19:7e:df:8d:2c:93:e5:85:ea:71:91:fc:
76:74:23:8c:59:b6:60:9d:8b:cc:66:47:c3:2e:c1:
6b:20:6d:11:6b:2b:2f:45:7d:6e:ab:b4:57:5c:ac:
89:67:92:4a:5a:86:c7:53:55:80:60:8a:94:9f:2f:
40:04:c4:4d:21:5b:e8:66:15:16:3d:bf:0d:87:bd:
67:c3:4c:37:00:1c:73:7d:e8:2b:2e:5a:53:b1:f2:
7b:b8:d0:9c:31:81:74:da:30:1d:76:85:e5:ff:23:
cb:31:f1:36:16:63:72:1f:45:ad:d6:e4:ca:45:57:
77:e1:a5:6d:0d:fc:2c:9d:a8:19:03:b8:91:ae:7c:
bf:35:d7:e1:68:b7:45:a1:cb:48:91:0a:d4:7c:6d:
c8:86:e9:77:3a:c0:df:5b:06:c1:24:b2:37:95:f1:
08:34:ce:1d:c1:06:6e:b3:44:08:23:8b:9f:04:43:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0C:52:6D:5C:81:C8:CA:77:77:BB:65:AD:2E:76:4C:5E:A7:B0:A5
X509v3 Authority Key Identifier:
keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:36:6f:e7:c3:a2:80:eb:ee:16:e7:49:76:fa:d1:71:8f:8e:
7a:66:74:2a:40:be:31:29:cd:96:3d:45:65:28:e6:ff:6c:fa:
ba:e1:bb:b7:d5:6e:8c:ab:bf:0d:3d:f5:d4:1e:36:eb:80:69:
3b:d8:b9:58:03:c9:2e:35:e6:64:96:3d:66:15:fc:9b:b8:f8:
bd:b3:6b:dc:3b:5d:eb:47:4d:45:7c:cb:29:22:89:da:29:0e:
1a:76:ec:fd:25:3c:73:05:cc:c1:93:61:15:fc:1b:45:28:14:
f0:c2:38:75:27:56:85:45:46:7f:cc:b4:54:23:7a:b3:c3:1a:
f3:fe:2b:61:69:91:d8:4f:8e:5a:1d:80:23:a3:d2:a0:d1:ac:
19:44:dd:6c:55:b9:fc:67:ff:da:17:7c:55:62:f0:24:0a:66:
27:1d:b4:1b:25:f5:0f:a7:ef:96:64:4d:86:9c:7c:d6:e2:08:
fc:fc:58:af:84:0d:af:51:10:78:d0:3f:00:2e:1f:2a:04:e7:
9f:26:3f:23:75:e2:cb:cb:06:3c:6f:60:0f:ad:51:2f:d1:07:
cc:22:f8:d0:90:52:72:47:71:61:93:28:ab:b6:33:6b:8f:cf:
10:c9:c4:00:49:cc:41:c0:fa:09:d6:6e:cd:09:e1:b4:57:20:
8c:31:59:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u3+lrCIAfIw+/wdtov4BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMGU2NDBmOWQ2M2JhOTQzYTk3YjNkYzEwZDRjNjg0NGE1
ZDNkYzEwHhcNMjUwMTMxMDUwMDM3WhcNMjUwMjAxMDUwMDM3WjAzMTEwLwYDVQQD
EyhjNjBjNTI2ZDVjODFjOGNhNzc3N2JiNjVhZDJlNzY0YzVlYTdiMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6epJtBmBzlabCzEgDZi7Yf9Z0O8c
4OWsWm/bD38WYZzaR8uDgMy3YJ8NljuMP5ZdRCMmnDTfrNDYj4VckAKYHGUqNK1F
0+0fytQKj98Zft+NLJPlhepxkfx2dCOMWbZgnYvMZkfDLsFrIG0RaysvRX1uq7RX
XKyJZ5JKWobHU1WAYIqUny9ABMRNIVvoZhUWPb8Nh71nw0w3ABxzfegrLlpTsfJ7
uNCcMYF02jAddoXl/yPLMfE2FmNyH0Wt1uTKRVd34aVtDfwsnagZA7iRrny/Ndfh
aLdFoctIkQrUfG3Ihul3OsDfWwbBJLI3lfEINM4dwQZus0QII4ufBEN+hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYMUm1cgcjKd3e7Za0udkxep7ClMB8GA1UdIwQY
MBaAFDMOZA+dY7qUOpez3BDUxoRKXT3BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXc1a0Q1MWp1cFE2bDdQY0VOVEdoRXBkUGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzE4ZTQtNTNiNy00N2JiLWEzMzYt
NWExNzcxOWQ0NDllLzEvTXc1a0Q1MWp1cFE2bDdQY0VOVEdoRXBkUGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lNzE4ZTQtNTNiNy00N2JiLWEzMzYtNWExNzcxOWQ0NDll
LzEvTXc1a0Q1MWp1cFE2bDdQY0VOVEdoRXBkUGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjZv58Oi
gOvuFudJdvrRcY+OemZ0KkC+MSnNlj1FZSjm/2z6uuG7t9VujKu/DT311B4264Bp
O9i5WAPJLjXmZJY9ZhX8m7j4vbNr3Dtd60dNRXzLKSKJ2ikOGnbs/SU8cwXMwZNh
FfwbRSgU8MI4dSdWhUVGf8y0VCN6s8Ma8/4rYWmR2E+OWh2AI6PSoNGsGUTdbFW5
/Gf/2hd8VWLwJApmJx20GyX1D6fvlmRNhpx81uII/PxYr4QNr1EQeNA/AC4fKgTn
nyY/I3Xiy8sGPG9gD61RL9EHzCL40JBSckdxYZMoq7Yza4/PEMnEAEnMQcD6CdZu
zQnhtFcgjDFZiQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:18 2025 by rpki-client on console-fra.rpki-client.org