Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier: d8UB59npbNEmwLsm4Use32WNXq4zHs1luIyzBEftrSU=
Subject key identifier: 87:63:5D:70:0D:AC:E7:D6:29:CF:9D:CF:CB:68:F5:C2:99:A1:46:FF
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 0194BB9760B3A423213BC4A81B2206712705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number: 0F89
Signing time: Fri 31 Jan 2025 09:00:47 +0000
Manifest this update: Fri 31 Jan 2025 09:00:47 +0000
Manifest next update: Sat 01 Feb 2025 09:00:47 +0000
Files and hashes: 1: 3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa (hash: TnQIP8m/z9TeUL6T1o3LFStwx3OkwZWYEkGyH7pKVzQ=)
2: C6G26s2_9rDhMVp1kQhNB3w99vU.roa (hash: /Sx9ARb2KrLY9zv7k7Qpt7h2hX4KWumGuc1xaBNSC/E=)
3: IeIheuUZIrSao3cwITZ9a7Vr14M.roa (hash: D6ff1htYAOrTrHoE1npjdhSz9xEaYGaeMk7OAb0vWUY=)
4: OToS6J8sZcb-NOk0SLebRPhhIy8.roa (hash: hJi47h64zp0y7tuydNdIF9Tsj0N17DTgxMy6IbUz6LM=)
5: TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa (hash: olUxSsNWWfOkaH/tshrZT1VhUO7Fs87MPQLfSyoOypI=)
6: g25IGTKfPYjST4HNSDfCkGR8U-U.roa (hash: shszXMRp8pWU+jn/kDMsa59h70gxIvBt7/Q+QM/PucQ=)
7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: jyZzk4UgU+8iuXdXcuOyxOmVl3aqbmGvDl4laBJIdFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:60:b3:a4:23:21:3b:c4:a8:1b:22:06:71:27:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Jan 31 09:00:47 2025 GMT
Not After : Feb 1 09:00:47 2025 GMT
Subject: CN=87635d700dace7d629cf9dcfcb68f5c299a146ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:ce:c1:44:10:3c:46:bc:cc:d8:cf:e1:9a:
b4:a2:8c:17:65:97:db:dc:a8:f1:a4:6b:18:c1:f8:
89:3e:e7:7c:a7:19:cb:01:f9:7e:8b:36:11:f9:8a:
18:a1:a6:84:0c:c0:64:16:2c:71:b3:1e:09:3d:8c:
e6:d6:77:ff:b7:5c:08:5d:25:52:af:cc:70:6e:5f:
46:0e:b6:b8:e6:8b:84:e3:59:bd:90:22:68:20:f8:
d0:10:78:41:86:b1:3f:2d:42:0b:87:86:16:47:b5:
71:11:b5:3c:d3:b3:d5:a1:4e:8e:04:6e:e2:ef:e1:
84:25:bf:e7:3b:28:60:c5:ea:dd:09:33:f6:96:97:
65:50:bd:0d:1e:47:f4:19:39:d9:0e:94:df:18:e7:
d3:59:a4:73:7b:66:dc:7f:50:ec:e1:81:d7:24:4d:
43:8e:b8:ef:3d:25:16:8d:aa:8d:a6:78:17:cc:c6:
3c:63:1e:69:31:68:43:2e:d1:97:aa:87:79:87:82:
30:08:84:ae:63:46:ac:55:37:f4:67:01:bc:43:e5:
d4:df:fe:a5:44:a4:06:c1:c6:1e:34:b5:41:62:c7:
50:13:10:63:00:70:d6:5c:05:54:27:2b:85:81:fc:
d5:ce:4a:16:55:41:8f:f3:86:1e:72:32:68:f3:d9:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:63:5D:70:0D:AC:E7:D6:29:CF:9D:CF:CB:68:F5:C2:99:A1:46:FF
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:65:ca:a3:66:c5:f5:56:13:15:28:12:24:e0:88:c3:52:fc:
0b:bc:23:14:60:78:3c:40:07:97:2a:94:8a:2d:d6:34:70:2e:
d1:8d:7d:4d:74:1e:61:34:d4:3e:6d:ba:18:5d:5d:2c:8b:25:
b1:1a:93:c5:74:4d:e2:df:42:c6:e5:c2:cb:bc:51:88:69:5f:
65:d6:d3:23:4d:91:72:f3:b3:c9:7d:f7:af:1a:6f:4c:8d:7c:
92:c6:25:28:ef:bc:cd:c8:bf:ae:1a:0b:f9:e5:22:50:c5:b3:
41:97:b0:70:ae:de:69:21:b7:1c:c6:7e:c1:c6:31:fe:09:ec:
ee:76:2d:81:d6:ff:b6:86:c3:a6:e0:d2:f4:e9:aa:74:3c:fa:
28:1d:03:28:39:71:74:8f:69:fb:bc:a5:d7:12:c2:55:a6:4f:
fa:70:97:c3:44:b2:12:1d:c7:a5:26:1d:af:c1:d9:29:2d:0a:
e4:c9:58:83:03:01:99:93:d7:e4:ae:fb:2c:44:d0:ed:45:04:
89:e2:1c:a0:8e:b7:88:d5:b4:9a:e8:c7:53:0b:eb:23:6d:6b:
92:fc:41:3b:c9:2c:fa:5f:0c:1d:82:18:99:ae:b0:ea:ef:5e:
ca:a9:68:a6:61:ab:97:c8:c8:5e:b5:d2:48:93:f3:64:ab:5d:
96:81:0c:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7l2CzpCMhO8SoGyIGcScFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj
NDE1ZDUwHhcNMjUwMTMxMDkwMDQ3WhcNMjUwMjAxMDkwMDQ3WjAzMTEwLwYDVQQD
Eyg4NzYzNWQ3MDBkYWNlN2Q2MjljZjlkY2ZjYjY4ZjVjMjk5YTE0NmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRPOwUQQPEa8zNjP4Zq0oowXZZfb
3KjxpGsYwfiJPud8pxnLAfl+izYR+YoYoaaEDMBkFixxsx4JPYzm1nf/t1wIXSVS
r8xwbl9GDra45ouE41m9kCJoIPjQEHhBhrE/LUILh4YWR7VxEbU807PVoU6OBG7i
7+GEJb/nOyhgxerdCTP2lpdlUL0NHkf0GTnZDpTfGOfTWaRze2bcf1Ds4YHXJE1D
jrjvPSUWjaqNpngXzMY8Yx5pMWhDLtGXqod5h4IwCISuY0asVTf0ZwG8Q+XU3/6l
RKQGwcYeNLVBYsdQExBjAHDWXAVUJyuFgfzVzkoWVUGP84YecjJo89kpGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdjXXANrOfWKc+dz8to9cKZoUb/MB8GA1UdIwQY
MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt
OGZkMzk0YjUzNTdjLzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj
LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmXKo2bF
9VYTFSgSJOCIw1L8C7wjFGB4PEAHlyqUii3WNHAu0Y19TXQeYTTUPm26GF1dLIsl
sRqTxXRN4t9CxuXCy7xRiGlfZdbTI02RcvOzyX33rxpvTI18ksYlKO+8zci/rhoL
+eUiUMWzQZewcK7eaSG3HMZ+wcYx/gns7nYtgdb/tobDpuDS9OmqdDz6KB0DKDlx
dI9p+7yl1xLCVaZP+nCXw0SyEh3HpSYdr8HZKS0K5MlYgwMBmZPX5K77LETQ7UUE
ieIcoI63iNW0mujHUwvrI21rkvxBO8ks+l8MHYIYma6w6u9eyqlopmGrl8jIXrXS
SJPzZKtdloEMaA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:34 2025 by rpki-client on console-fra.rpki-client.org