Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier: IuqWObgEtLeTD8vWitmoR5yJTgYTGKBO3T/cvwCNcJE=
Subject key identifier: 42:EA:7F:5F:7E:97:C0:17:3A:96:EF:F6:3C:D2:FA:B4:8C:FC:E1:C2
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 0194BB97059CB310E4DEAB297DEE41A0C9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number: 10D9
Signing time: Fri 31 Jan 2025 09:00:24 +0000
Manifest this update: Fri 31 Jan 2025 09:00:24 +0000
Manifest next update: Sat 01 Feb 2025 09:00:24 +0000
Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: OZMV9zsrpSQXfpkZXJVCDExe+3e4s8JlApb35Isxucc=)
2: xpTjGvaDmrE51vBsvZPkhJnSBAA.roa (hash: zPC2S238OrSTlovYBC2pTJz8g2QgXZ75DzJUT+2Pm+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:05:9c:b3:10:e4:de:ab:29:7d:ee:41:a0:c9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Jan 31 09:00:24 2025 GMT
Not After : Feb 1 09:00:24 2025 GMT
Subject: CN=42ea7f5f7e97c0173a96eff63cd2fab48cfce1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fb:62:45:7c:a4:fd:b9:d7:18:ba:48:dd:7c:
ce:ab:38:96:bd:34:b7:10:30:93:2b:08:00:31:23:
21:dd:09:9a:25:7f:21:c0:92:e3:38:1c:16:71:d4:
4b:31:fd:80:b9:cc:37:3b:78:92:6b:41:c7:23:2c:
df:18:a2:d8:d0:02:d6:19:ab:9b:43:b8:c5:79:96:
00:70:81:4a:9a:24:23:a7:39:bf:6a:a3:4a:c3:47:
65:db:04:4b:e9:56:0d:fa:8f:c7:0b:65:bb:51:28:
0c:4f:22:3b:53:e7:58:9d:c0:53:2d:80:c7:30:cb:
84:04:ab:3a:ab:0f:77:af:a2:1b:df:cd:77:1e:7d:
25:9d:7e:7c:bf:49:a1:34:3e:71:f4:63:cf:ae:8c:
9f:c9:76:2a:0d:ca:93:e0:eb:56:3f:c1:a3:19:fd:
ce:59:8e:b8:59:a7:02:ac:ee:6b:9d:05:bd:4c:74:
0a:bc:9f:d2:7e:75:64:c8:86:71:95:ba:81:bb:2b:
07:7a:52:81:31:3a:0e:4f:ad:15:80:79:d6:36:3a:
96:4f:60:96:30:37:ee:e6:14:0f:3b:08:17:81:14:
42:90:b7:8e:7f:d4:a9:a6:07:b3:d3:0d:aa:e0:b8:
ae:2b:ca:67:32:73:9d:0d:f5:81:cc:7c:57:f5:19:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EA:7F:5F:7E:97:C0:17:3A:96:EF:F6:3C:D2:FA:B4:8C:FC:E1:C2
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:01:e5:c7:0b:19:1f:6e:03:9e:11:dc:8b:bc:7c:92:0f:c2:
bf:64:47:f3:d0:41:2b:b8:f5:0d:29:25:6a:4a:0d:2e:c9:82:
30:56:8e:e2:9f:8a:ab:b4:a8:35:00:eb:a0:24:c1:2a:38:ac:
3c:26:4e:27:af:ff:41:d5:bd:fd:a0:96:29:43:e8:e5:ba:e6:
d8:dd:20:9f:89:b1:4d:8d:7f:c0:23:4c:27:49:72:25:bc:f4:
ea:fb:ff:52:f8:30:33:42:1b:59:48:47:5c:73:22:9d:e1:14:
3e:85:32:44:0d:c0:20:12:9e:6e:1e:35:d2:7a:5b:e1:62:a9:
49:a4:20:18:25:66:cf:a6:21:8a:02:d3:f8:7f:75:25:56:50:
2e:92:07:9b:a5:57:06:b9:bb:79:40:c4:6f:5e:36:85:21:0a:
90:5e:c9:b6:b5:8f:ad:4e:79:21:94:1f:d3:ae:a3:ab:75:d6:
13:d5:b8:28:f5:19:d2:1f:e5:94:c9:b2:f2:f9:60:a3:de:9a:
17:01:6d:e4:7f:21:56:99:99:35:05:01:f4:5e:41:cd:b5:11:
96:72:c8:cf:6b:b5:f4:0a:86:df:82:fb:49:5b:f7:71:05:48:
6b:e3:5d:c0:f9:a6:75:f9:cc:92:19:fb:13:77:74:49:22:b7:
74:9a:b7:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lwWcsxDk3qspfe5BoMnCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNzc1MzhkZWMyZWZjZDJmMTFjYzYzNzE5N2QxZDlhNmZk
YWU5ZDkwHhcNMjUwMTMxMDkwMDI0WhcNMjUwMjAxMDkwMDI0WjAzMTEwLwYDVQQD
Eyg0MmVhN2Y1ZjdlOTdjMDE3M2E5NmVmZjYzY2QyZmFiNDhjZmNlMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vtiRXyk/bnXGLpI3XzOqziWvTS3
EDCTKwgAMSMh3QmaJX8hwJLjOBwWcdRLMf2Aucw3O3iSa0HHIyzfGKLY0ALWGaub
Q7jFeZYAcIFKmiQjpzm/aqNKw0dl2wRL6VYN+o/HC2W7USgMTyI7U+dYncBTLYDH
MMuEBKs6qw93r6Ib3813Hn0lnX58v0mhND5x9GPProyfyXYqDcqT4OtWP8GjGf3O
WY64WacCrO5rnQW9THQKvJ/SfnVkyIZxlbqBuysHelKBMToOT60VgHnWNjqWT2CW
MDfu5hQPOwgXgRRCkLeOf9Sppgez0w2q4LiuK8pnMnOdDfWBzHxX9Rmk2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELqf19+l8AXOpbv9jzS+rSM/OHCMB8GA1UdIwQY
MBaAFOJ3U43sLvzS8RzGNxl9HZpv2unZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWIt
ODJlZTJkMmI0Mjg5LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWItODJlZTJkMmI0Mjg5
LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQHlxwsZ
H24DnhHci7x8kg/Cv2RH89BBK7j1DSklakoNLsmCMFaO4p+Kq7SoNQDroCTBKjis
PCZOJ6//QdW9/aCWKUPo5brm2N0gn4mxTY1/wCNMJ0lyJbz06vv/UvgwM0IbWUhH
XHMineEUPoUyRA3AIBKebh410npb4WKpSaQgGCVmz6YhigLT+H91JVZQLpIHm6VX
Brm7eUDEb142hSEKkF7JtrWPrU55IZQf066jq3XWE9W4KPUZ0h/llMmy8vlgo96a
FwFt5H8hVpmZNQUB9F5BzbURlnLIz2u19AqG34L7SVv3cQVIa+NdwPmmdfnMkhn7
E3d0SSK3dJq3AQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:57 2025 by rpki-client on console-fra.rpki-client.org