Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier: lgePerbnGxZkvfeTb6Z6LAXHg7cXfjLtlEdPObDNIfU=
Subject key identifier: 03:3D:3F:79:2D:01:18:30:3E:DB:23:8B:93:3E:93:C2:59:87:F2:50
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 0194BA8434B9994A2286C71FCF52B817DBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number: 0142
Signing time: Fri 31 Jan 2025 04:00:13 +0000
Manifest this update: Fri 31 Jan 2025 04:00:13 +0000
Manifest next update: Sat 01 Feb 2025 04:00:13 +0000
Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: FzUKr2hWVYYLHrsC5qmegUYzZwhNr+dW0HT/0Ni5EEc=)
2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:34:b9:99:4a:22:86:c7:1f:cf:52:b8:17:db:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: Jan 31 04:00:13 2025 GMT
Not After : Feb 1 04:00:13 2025 GMT
Subject: CN=033d3f792d0118303edb238b933e93c25987f250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:20:47:ab:7f:a4:f9:a1:fd:80:9f:c5:cd:
f0:78:0b:78:b4:d5:00:52:c7:3e:f6:61:65:0d:1d:
02:f3:27:2e:c0:74:3d:16:b8:6e:47:10:79:c8:1e:
cb:a1:56:bb:c8:ad:20:19:97:57:f5:70:39:6c:2a:
f1:cf:e2:85:d8:ee:c6:ed:d2:21:fd:26:ac:44:55:
d6:43:b1:65:f8:37:61:8d:4a:2a:ab:06:92:03:d2:
a9:04:71:c2:8d:ef:69:8e:e5:f7:31:03:0b:72:a3:
ad:e4:f4:94:75:6e:db:bc:7f:b4:8d:08:4c:bc:c7:
bd:c8:6a:10:f9:07:bc:6b:8d:8d:c5:af:ae:1d:79:
6c:84:9a:f9:45:77:10:f9:0e:0f:cd:5f:9f:7e:8b:
2e:2d:2e:d7:d8:09:ca:24:84:91:60:4d:50:86:3b:
19:71:fc:0f:4f:de:00:96:32:42:06:45:e3:2a:96:
c7:62:42:9b:f5:43:8b:74:03:ee:4e:51:e9:57:00:
b7:b8:63:c9:4d:36:2e:8d:20:8b:e1:37:ea:9b:d1:
3a:06:af:11:d7:bb:0e:79:e1:de:2e:b6:bb:b1:55:
55:e0:b2:26:c0:45:9e:fe:c3:24:3f:f9:8e:00:54:
74:48:bf:67:1f:2c:8d:61:f3:9a:02:3b:89:cf:a4:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3D:3F:79:2D:01:18:30:3E:DB:23:8B:93:3E:93:C2:59:87:F2:50
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9a:c1:36:1a:c2:45:e4:22:d4:cb:03:a2:7e:82:72:5b:2c:
b4:a5:07:dc:a7:07:7e:ba:07:27:ab:fe:de:70:a1:8a:4b:c0:
8b:e3:fa:51:6c:c5:5f:27:da:7a:7b:03:09:51:4c:30:55:d7:
b6:3f:07:15:25:d4:9a:72:24:a4:8f:9e:46:07:69:49:48:30:
bc:8e:09:c0:01:31:28:2e:f4:6f:e3:91:06:b3:4b:04:d0:d9:
4f:7d:14:b2:68:5a:63:8e:e7:01:a7:ce:53:57:be:33:c5:62:
ee:37:f8:a3:38:99:35:4d:3b:4a:c4:7d:db:bf:e7:8b:97:55:
f1:ca:d5:2b:08:cc:27:d6:10:9e:48:6e:6a:22:9e:77:98:da:
80:fd:3b:bd:ad:39:af:a0:85:94:8e:e7:c8:d4:ae:4f:38:98:
b9:79:d7:4a:21:3b:26:1a:83:b4:89:d5:21:a2:46:59:97:29:
bf:e2:ce:5d:0c:a1:49:db:0c:5e:33:50:d0:b9:ab:93:67:65:
54:10:c0:77:ad:c8:2b:91:7d:a9:b9:46:12:af:15:b1:b8:19:
8e:3b:d5:ac:a3:e6:2a:62:7f:d0:bd:89:03:85:03:53:d8:a0:
89:c6:5a:d1:19:e1:3a:61:4f:20:1d:16:57:a8:c5:9a:66:b7:
bd:fc:5d:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hDS5mUoihscfz1K4F9v1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGNiYTRiNDMzMDRiNTFjNGJkZGZiZDQzMzE3ODJhZDkx
MTAyY2EwHhcNMjUwMTMxMDQwMDEzWhcNMjUwMjAxMDQwMDEzWjAzMTEwLwYDVQQD
EygwMzNkM2Y3OTJkMDExODMwM2VkYjIzOGI5MzNlOTNjMjU5ODdmMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EYgR6t/pPmh/YCfxc3weAt4tNUA
Usc+9mFlDR0C8ycuwHQ9FrhuRxB5yB7LoVa7yK0gGZdX9XA5bCrxz+KF2O7G7dIh
/SasRFXWQ7Fl+DdhjUoqqwaSA9KpBHHCje9pjuX3MQMLcqOt5PSUdW7bvH+0jQhM
vMe9yGoQ+Qe8a42Nxa+uHXlshJr5RXcQ+Q4PzV+ffosuLS7X2AnKJISRYE1QhjsZ
cfwPT94AljJCBkXjKpbHYkKb9UOLdAPuTlHpVwC3uGPJTTYujSCL4Tfqm9E6Bq8R
17sOeeHeLra7sVVV4LImwEWe/sMkP/mOAFR0SL9nHyyNYfOaAjuJz6QqIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAM9P3ktARgwPtsji5M+k8JZh/JQMB8GA1UdIwQY
MBaAFJMMuktDMEtRxL3fvUMxeCrZEQLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWIt
ZWVkYjE2OThjMjFhLzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWItZWVkYjE2OThjMjFh
LzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJrBNhrC
ReQi1MsDon6CclsstKUH3KcHfroHJ6v+3nChikvAi+P6UWzFXyfaensDCVFMMFXX
tj8HFSXUmnIkpI+eRgdpSUgwvI4JwAExKC70b+ORBrNLBNDZT30UsmhaY47nAafO
U1e+M8Vi7jf4oziZNU07SsR927/ni5dV8crVKwjMJ9YQnkhuaiKed5jagP07va05
r6CFlI7nyNSuTziYuXnXSiE7JhqDtInVIaJGWZcpv+LOXQyhSdsMXjNQ0Lmrk2dl
VBDAd63IK5F9qblGEq8VsbgZjjvVrKPmKmJ/0L2JA4UDU9igicZa0RnhOmFPIB0W
V6jFmma3vfxdnw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:03 2025 by rpki-client on console-fra.rpki-client.org