Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier: l5wPbw58LZwjOWUeE2VYZLjmVX9ZcH8xxMU3Mdu4NFo=
Subject key identifier: 01:29:AB:1D:49:FF:D9:34:BA:DA:43:52:B5:B6:CE:FC:7E:1D:C0:37
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial: 0194BABB736D0B52608A7BB4B0BEB36C57A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number: 0BB8
Signing time: Fri 31 Jan 2025 05:00:34 +0000
Manifest this update: Fri 31 Jan 2025 05:00:34 +0000
Manifest next update: Sat 01 Feb 2025 05:00:34 +0000
Files and hashes: 1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=)
2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: pYMErN+vwh5Wnmh3jvNAewZsYonJBzYmtZnkc0pnjtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:73:6d:0b:52:60:8a:7b:b4:b0:be:b3:6c:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Validity
Not Before: Jan 31 05:00:34 2025 GMT
Not After : Feb 1 05:00:34 2025 GMT
Subject: CN=0129ab1d49ffd934bada4352b5b6cefc7e1dc037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:64:d7:8a:75:ea:b3:56:d7:b3:c9:72:67:
0c:ab:cb:5a:27:7f:5b:88:99:5c:26:f2:ca:fd:fb:
30:7d:89:62:80:bc:18:e6:16:9b:c4:85:4e:4f:1b:
7f:ff:40:49:9e:db:55:c0:49:8a:87:90:e8:d8:fb:
77:50:d7:e6:4c:39:ec:67:6c:25:69:63:31:09:69:
9a:b9:f3:8e:dc:c3:33:59:a2:eb:02:1e:f2:95:06:
3d:f1:65:14:fc:c2:c0:eb:c4:b7:61:ed:05:8f:ab:
fd:61:50:58:d4:aa:37:58:f8:e9:de:81:0b:bb:82:
a1:27:98:e1:8f:b7:a2:af:65:8c:32:60:d9:e9:3a:
98:d6:a0:e0:c4:38:a4:56:76:13:78:88:bc:14:97:
06:a9:7d:24:63:85:ad:47:9d:56:87:0c:c7:dd:95:
d2:73:df:b5:27:aa:a8:ab:fa:19:54:50:a1:1b:d9:
4b:45:61:0e:f9:cd:a1:21:2f:e1:57:56:7e:a0:c8:
a8:ed:77:73:c1:9e:01:36:32:51:d2:a6:25:29:66:
09:dd:ca:3c:e3:16:07:cf:a1:79:ad:5f:d0:48:b0:
2c:af:39:a0:b6:a8:43:ec:68:ec:af:23:7f:f5:6f:
bc:8b:07:79:11:de:38:5b:20:25:9c:49:16:12:fc:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:29:AB:1D:49:FF:D9:34:BA:DA:43:52:B5:B6:CE:FC:7E:1D:C0:37
X509v3 Authority Key Identifier:
keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:20:41:8e:1c:37:f2:83:3a:ac:ab:2f:6e:52:68:02:20:fc:
5b:65:17:cc:93:dd:d3:8a:48:25:62:86:7d:9a:cb:d3:83:00:
cb:49:84:d6:e9:c9:3e:d9:54:bf:88:f2:75:f2:2c:3f:6a:c2:
0d:32:2d:20:5a:cc:45:e8:a6:4a:e7:06:be:3d:85:55:79:6d:
2b:02:41:fc:09:37:d1:eb:19:a1:e4:8b:35:a6:29:6f:84:3a:
6a:fb:bc:15:cc:bf:29:69:14:72:c2:e4:46:1b:cf:77:0f:a6:
aa:2f:9b:1a:ed:49:c7:3e:d5:e3:fe:8b:e6:0b:73:2e:e3:c8:
94:f1:14:6a:b7:a7:43:52:8a:51:a5:35:ee:7d:e6:9c:27:4d:
00:f8:48:c5:64:f3:c2:fd:80:dd:36:07:1f:13:a3:b4:d6:29:
35:35:14:a8:f8:a7:1f:f9:3f:15:a5:64:34:ae:79:b9:10:49:
77:6e:18:d7:bd:a4:46:4c:a4:1b:40:5a:05:8a:ed:eb:92:fc:
0d:6d:10:ce:12:dd:6b:fb:8d:d5:f3:d5:13:a3:f5:8e:ff:14:
dd:d3:12:51:8b:35:9b:f2:d4:be:16:4e:e1:2a:8f:73:64:37:
68:6f:07:9c:78:c4:9a:3d:a9:bd:d6:76:5b:43:17:e6:1a:2c:
79:13:25:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u3NtC1Jginu0sL6zbFegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzAyYTI3M2FiNGVmMjVhOGVhOTFhNGEzNzc5YmNmN2Qx
ZGU1OWIwHhcNMjUwMTMxMDUwMDM0WhcNMjUwMjAxMDUwMDM0WjAzMTEwLwYDVQQD
EygwMTI5YWIxZDQ5ZmZkOTM0YmFkYTQzNTJiNWI2Y2VmYzdlMWRjMDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08Jk14p16rNW17PJcmcMq8taJ39b
iJlcJvLK/fswfYligLwY5habxIVOTxt//0BJnttVwEmKh5Do2Pt3UNfmTDnsZ2wl
aWMxCWmaufOO3MMzWaLrAh7ylQY98WUU/MLA68S3Ye0Fj6v9YVBY1Ko3WPjp3oEL
u4KhJ5jhj7eir2WMMmDZ6TqY1qDgxDikVnYTeIi8FJcGqX0kY4WtR51WhwzH3ZXS
c9+1J6qoq/oZVFChG9lLRWEO+c2hIS/hV1Z+oMio7XdzwZ4BNjJR0qYlKWYJ3co8
4xYHz6F5rV/QSLAsrzmgtqhD7GjsryN/9W+8iwd5Ed44WyAlnEkWEvxKMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEpqx1J/9k0utpDUrW2zvx+HcA3MB8GA1UdIwQY
MBaAFMswKic6tO8lqOqRpKN3m899HeWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmIt
ODAwOGQxZTdjMzhjLzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmItODAwOGQxZTdjMzhj
LzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCBBjhw3
8oM6rKsvblJoAiD8W2UXzJPd04pIJWKGfZrL04MAy0mE1unJPtlUv4jydfIsP2rC
DTItIFrMReimSucGvj2FVXltKwJB/Ak30esZoeSLNaYpb4Q6avu8Fcy/KWkUcsLk
RhvPdw+mqi+bGu1Jxz7V4/6L5gtzLuPIlPEUarenQ1KKUaU17n3mnCdNAPhIxWTz
wv2A3TYHHxOjtNYpNTUUqPinH/k/FaVkNK55uRBJd24Y172kRkykG0BaBYrt65L8
DW0QzhLda/uN1fPVE6P1jv8U3dMSUYs1m/LUvhZO4SqPc2Q3aG8HnHjEmj2pvdZ2
W0MX5hoseRMlGQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:28 2025 by rpki-client on console-fra.rpki-client.org