Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier: J/jV/BV0P6Tq2V3Ke5U7ZFuKQgFGlAZD4FrDGgNocHA=
Subject key identifier: 0D:A6:FD:40:ED:D5:A1:CB:D7:59:D0:82:8C:41:B5:F1:27:73:E1:BF
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial: 0194BAF27D9E018FDA3C4FD53DC7A5C15FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number: 0857
Signing time: Fri 31 Jan 2025 06:00:41 +0000
Manifest this update: Fri 31 Jan 2025 06:00:41 +0000
Manifest next update: Sat 01 Feb 2025 06:00:41 +0000
Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: nNKRI73AqZNmL61p445U3irIRuFxiv5EtGmUIt5wlS0=)
2: MK6Wt26ubZnx8uPGofYFajPlEuM.roa (hash: pNoc6zxMnN0pQF1kB42eiM3UzngOuAJOl2Ggh4EWIBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:7d:9e:01:8f:da:3c:4f:d5:3d:c7:a5:c1:5f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Validity
Not Before: Jan 31 06:00:41 2025 GMT
Not After : Feb 1 06:00:41 2025 GMT
Subject: CN=0da6fd40edd5a1cbd759d0828c41b5f12773e1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:f8:aa:58:ba:3b:95:76:de:33:30:9b:72:
53:37:7e:be:4d:48:d8:00:2a:3c:a6:75:9d:dd:78:
9d:62:2e:40:d5:a8:f1:0e:94:11:c4:d6:09:83:16:
d0:bc:c6:b2:f2:f1:c8:01:ce:b2:3f:20:78:34:a7:
89:72:2e:db:5d:8a:7f:55:3a:9f:bc:d2:00:ab:de:
09:4d:e8:f7:95:fb:3d:54:08:7b:9f:55:da:25:2a:
f6:18:70:5d:d4:1d:10:97:d5:c1:0d:e5:a6:a1:a7:
ed:36:7d:83:27:78:12:31:e0:e2:21:e9:da:c2:bf:
ba:c3:c3:1e:ea:82:86:d0:2e:07:b8:4b:c3:08:d3:
6f:6b:6a:8d:3d:47:0d:10:ac:bf:f8:7a:d1:1c:26:
db:8d:1d:de:18:03:0f:58:29:f1:cb:4c:6a:ac:ae:
6a:c1:21:ff:d4:0e:e4:13:be:f5:aa:f3:12:00:39:
6c:05:f0:dd:b4:23:05:3d:8b:94:d2:da:fb:cd:91:
cf:ae:ef:30:6d:bf:d3:4f:a8:bc:7f:73:49:20:97:
66:29:6b:5b:53:4c:62:93:58:c3:4c:83:b8:73:1e:
44:a1:86:4b:ff:18:c5:ae:38:b2:06:fe:2c:81:6b:
11:0d:06:53:6d:19:cc:6d:0c:72:9e:f8:ab:00:8f:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A6:FD:40:ED:D5:A1:CB:D7:59:D0:82:8C:41:B5:F1:27:73:E1:BF
X509v3 Authority Key Identifier:
keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3e:fc:30:fb:89:f9:42:d1:62:88:d1:8e:62:2e:b1:6a:29:
c8:9d:ba:ff:5d:cd:6c:73:fa:20:df:4b:bf:cf:9b:a7:a0:ea:
f6:d7:97:85:ac:7e:e8:68:01:84:1b:be:fe:0b:79:f5:31:74:
49:a1:4c:cc:18:95:6b:48:e6:76:11:eb:12:44:01:f4:f3:c5:
da:cc:37:df:f7:b3:c8:24:e3:ab:9c:48:cd:8f:12:53:90:71:
c9:c3:a0:f7:58:22:27:40:29:c2:07:c0:46:55:d8:3e:b8:8a:
bd:7f:51:71:8f:a6:f8:36:7d:4b:e6:f3:66:cc:51:d5:e9:14:
67:0a:c9:0a:4d:7f:cc:0c:c8:3b:15:1a:32:24:a1:67:4e:b5:
ad:bb:79:a1:ac:15:eb:8c:7f:f3:ca:a2:5d:1a:4d:1e:0f:66:
fb:b8:21:d3:b4:3d:20:da:35:c2:7c:89:fb:3c:75:f4:a7:fd:
9b:94:55:aa:fe:34:b5:6e:f8:0c:72:7d:4c:f0:45:c7:08:95:
e7:fd:8d:61:34:06:61:c6:a1:ad:72:3c:5e:00:8c:da:ce:42:
65:c5:9d:26:26:20:04:be:92:0d:3c:c6:27:e5:3d:6f:81:b0:
c9:b4:e1:07:a7:a3:10:fc:ff:0c:b6:5b:c0:ff:33:5b:18:38:
e9:a0:66:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68n2eAY/aPE/VPcelwV+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTY5YTEzY2I3YzM3MThiZDM3MTc3MTI2MjhlN2FiMWIz
M2IwYTUwHhcNMjUwMTMxMDYwMDQxWhcNMjUwMjAxMDYwMDQxWjAzMTEwLwYDVQQD
EygwZGE2ZmQ0MGVkZDVhMWNiZDc1OWQwODI4YzQxYjVmMTI3NzNlMWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWH4qli6O5V23jMwm3JTN36+TUjY
ACo8pnWd3XidYi5A1ajxDpQRxNYJgxbQvMay8vHIAc6yPyB4NKeJci7bXYp/VTqf
vNIAq94JTej3lfs9VAh7n1XaJSr2GHBd1B0Ql9XBDeWmoaftNn2DJ3gSMeDiIena
wr+6w8Me6oKG0C4HuEvDCNNva2qNPUcNEKy/+HrRHCbbjR3eGAMPWCnxy0xqrK5q
wSH/1A7kE771qvMSADlsBfDdtCMFPYuU0tr7zZHPru8wbb/TT6i8f3NJIJdmKWtb
U0xik1jDTIO4cx5EoYZL/xjFrjiyBv4sgWsRDQZTbRnMbQxynvirAI+CwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2m/UDt1aHL11nQgoxBtfEnc+G/MB8GA1UdIwQY
MBaAFAOWmhPLfDcYvTcXcSYo56sbM7ClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVhYUU4dDhOeGk5TnhkeEppam5xeHN6c0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jMTI5YWItNzlhNy00YmMwLTlhM2It
NDFlZmVhY2U3YTcxLzEvQTVhYUU4dDhOeGk5TnhkeEppam5xeHN6c0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jMTI5YWItNzlhNy00YmMwLTlhM2ItNDFlZmVhY2U3YTcx
LzEvQTVhYUU4dDhOeGk5TnhkeEppam5xeHN6c0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGD78MPuJ
+ULRYojRjmIusWopyJ26/13NbHP6IN9Lv8+bp6Dq9teXhax+6GgBhBu+/gt59TF0
SaFMzBiVa0jmdhHrEkQB9PPF2sw33/ezyCTjq5xIzY8SU5BxycOg91giJ0ApwgfA
RlXYPriKvX9RcY+m+DZ9S+bzZsxR1ekUZwrJCk1/zAzIOxUaMiShZ061rbt5oawV
64x/88qiXRpNHg9m+7gh07Q9INo1wnyJ+zx19Kf9m5RVqv40tW74DHJ9TPBFxwiV
5/2NYTQGYcahrXI8XgCM2s5CZcWdJiYgBL6SDTzGJ+U9b4GwybThB6ejEPz/DLZb
wP8zWxg46aBmVg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:59 2025 by rpki-client on console-fra.rpki-client.org