Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
File: 7LYS4fa02D-KXVUs87YO3SO_6fQ.mft (raw, json)
Hash identifier: jkP6bANG413uiRqPR+/soMD5zSSWy00PTLjrvwuclC8=
Subject key identifier: 42:FC:8E:D6:8C:F4:A6:30:6A:76:B9:60:8A:72:EE:64:4B:DB:34:D4
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Certificate issuer: /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial: 0194BB299013FB440F811099C6F9ADBBDECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
Manifest number: 1388
Signing time: Fri 31 Jan 2025 07:00:50 +0000
Manifest this update: Fri 31 Jan 2025 07:00:50 +0000
Manifest next update: Sat 01 Feb 2025 07:00:50 +0000
Files and hashes: 1: 7LYS4fa02D-KXVUs87YO3SO_6fQ.crl (hash: Lh+DCTckFbIdQiRTCvm2qOJZJA1bNiOQal+zvNoDu/8=)
2: aG5rAcUPlfAS33bppi3npjnJwhs.roa (hash: zJztqNoDduT6a/19sVXNq9OoLdpe05NzflFeIp+fVjM=)
3: rkeCi7bAOmm8jNM4SPUix4rpKGY.roa (hash: mpdXZon8vvR8j0E2gSl7AGKnGzRDJd6WpjcomYnKKnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:90:13:fb:44:0f:81:10:99:c6:f9:ad:bb:de:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Validity
Not Before: Jan 31 07:00:50 2025 GMT
Not After : Feb 1 07:00:50 2025 GMT
Subject: CN=42fc8ed68cf4a6306a76b9608a72ee644bdb34d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:c0:00:ea:75:6e:ae:0f:5f:21:ea:78:18:
12:89:c5:2b:f7:7f:36:6a:1d:68:85:54:d8:55:a9:
22:58:22:dc:ef:a2:2a:68:e0:c6:62:2f:a5:04:a5:
37:97:6b:33:0d:0a:14:7d:61:b0:41:d8:ac:24:e2:
8b:23:e0:7a:cc:47:76:b9:e3:b5:cb:dc:15:ac:34:
a8:70:72:05:37:73:dc:55:9b:3e:5d:06:2b:be:6b:
b9:d6:21:3e:a7:13:16:fd:f5:0e:05:d9:f5:94:6a:
28:b6:7b:ff:65:0e:28:cb:80:47:7c:b4:eb:0a:db:
af:a3:b1:5a:93:bb:69:a7:c2:7b:61:6d:94:64:f7:
ee:35:e5:a7:38:d6:93:24:e7:80:ba:8d:30:05:fd:
a3:cb:64:1d:2f:d6:8c:31:2b:64:f3:74:fd:bc:cd:
25:ab:df:5b:13:89:1f:f5:2d:93:e7:05:e3:d4:b6:
2c:c4:10:da:4b:06:7a:f3:7f:e0:b2:9f:ef:86:6e:
59:3c:f8:ef:ca:05:44:5a:f8:c6:44:4b:f0:65:e1:
10:70:a0:4f:d9:83:94:42:7b:6a:86:5a:22:19:cf:
96:3c:55:5b:68:50:ec:54:3a:cf:75:b3:05:70:b1:
1a:f5:6d:1b:80:cc:79:ad:a8:f2:76:27:9b:cb:42:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FC:8E:D6:8C:F4:A6:30:6A:76:B9:60:8A:72:EE:64:4B:DB:34:D4
X509v3 Authority Key Identifier:
keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2a:d7:7f:d3:16:08:d9:65:9a:8d:e6:65:4c:5b:04:2a:e0:
c9:15:68:1a:4e:0b:6f:4e:73:3c:a8:cf:a0:07:41:a0:3e:3a:
f5:19:e3:54:d8:1e:8d:6a:41:cb:e1:e4:12:d6:e9:2f:07:3a:
c9:ab:da:3e:8e:dd:72:88:30:c3:78:90:eb:0f:fd:d4:c6:42:
cd:3a:eb:84:76:0f:a5:1d:d6:61:60:b6:00:7e:89:c9:84:52:
5d:e6:74:62:1d:86:0e:6e:c9:5c:88:fd:a4:ad:0a:9a:ee:8b:
c7:4b:67:71:64:5a:d3:ae:76:4e:ca:97:88:62:e2:05:28:4b:
68:4b:a3:09:9e:f8:c1:44:6e:4e:b3:3a:b5:0a:37:ff:55:cc:
85:e3:19:8e:72:5e:d5:ec:e3:5c:e8:f4:82:6a:d1:3b:91:65:
05:18:fa:f7:e6:01:c7:cb:d3:03:10:fd:96:88:db:b4:84:b0:
b5:cd:5c:ad:6d:a6:89:43:75:61:64:79:d9:e0:0c:24:bb:6f:
e6:3d:cd:7f:18:38:6d:e0:31:80:61:46:08:72:da:5f:b2:55:
43:fe:f6:24:fc:80:4f:ee:6e:33:40:13:55:fd:fd:b4:4c:2a:
05:b4:ff:36:bc:b2:59:4f:4b:5e:19:e9:a3:6b:c1:66:cd:2d:
43:4f:62:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KZAT+0QPgRCZxvmtu97NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjYxMmUxZjZiNGQ4M2Y4YTVkNTUyY2YzYjYwZWRkMjNi
ZmU5ZjQwHhcNMjUwMTMxMDcwMDUwWhcNMjUwMjAxMDcwMDUwWjAzMTEwLwYDVQQD
Eyg0MmZjOGVkNjhjZjRhNjMwNmE3NmI5NjA4YTcyZWU2NDRiZGIzNGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXbAAOp1bq4PXyHqeBgSicUr9382
ah1ohVTYVakiWCLc76IqaODGYi+lBKU3l2szDQoUfWGwQdisJOKLI+B6zEd2ueO1
y9wVrDSocHIFN3PcVZs+XQYrvmu51iE+pxMW/fUOBdn1lGootnv/ZQ4oy4BHfLTr
Ctuvo7Fak7tpp8J7YW2UZPfuNeWnONaTJOeAuo0wBf2jy2QdL9aMMStk83T9vM0l
q99bE4kf9S2T5wXj1LYsxBDaSwZ683/gsp/vhm5ZPPjvygVEWvjGREvwZeEQcKBP
2YOUQntqhloiGc+WPFVbaFDsVDrPdbMFcLEa9W0bgMx5rajydieby0LC+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL8jtaM9KYwana5YIpy7mRL2zTUMB8GA1UdIwQY
MBaAFOy2EuH2tNg/il1VLPO2Dt0jv+n0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xZUzRmYTAyRC1LWFZVczg3WU8zU09fNmZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81Y2Q4ODQtNzlmNS00ODNkLTkwNGEt
OTZmZTE5MTFkMGIzLzEvN0xZUzRmYTAyRC1LWFZVczg3WU8zU09fNmZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81Y2Q4ODQtNzlmNS00ODNkLTkwNGEtOTZmZTE5MTFkMGIz
LzEvN0xZUzRmYTAyRC1LWFZVczg3WU8zU09fNmZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMirXf9MW
CNllmo3mZUxbBCrgyRVoGk4Lb05zPKjPoAdBoD469RnjVNgejWpBy+HkEtbpLwc6
yavaPo7dcogww3iQ6w/91MZCzTrrhHYPpR3WYWC2AH6JyYRSXeZ0Yh2GDm7JXIj9
pK0Kmu6Lx0tncWRa0652TsqXiGLiBShLaEujCZ74wURuTrM6tQo3/1XMheMZjnJe
1ezjXOj0gmrRO5FlBRj69+YBx8vTAxD9lojbtISwtc1crW2miUN1YWR52eAMJLtv
5j3Nfxg4beAxgGFGCHLaX7JVQ/72JPyAT+5uM0ATVf39tEwqBbT/NryyWU9LXhnp
o2vBZs0tQ09ipQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:04 2025 by rpki-client on console-fra.rpki-client.org