Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
File: exExjUvdPsWUM4bnAdfQK9aDAK0.mft (raw, json)
Hash identifier: MqHvKy+4YuDrnUUzsvi3mHmb4Go+oZROvx0okhegJag=
Subject key identifier: 0B:BA:AB:05:67:F7:75:AC:74:E0:FA:EF:F7:EE:DE:25:9B:DF:F9:97
Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Certificate serial: 0194BA847DB0DDF648584002FB1C16598032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
Manifest number: 01D6
Signing time: Fri 31 Jan 2025 04:00:32 +0000
Manifest this update: Fri 31 Jan 2025 04:00:32 +0000
Manifest next update: Sat 01 Feb 2025 04:00:32 +0000
Files and hashes: 1: exExjUvdPsWUM4bnAdfQK9aDAK0.crl (hash: GBNvTwABaAHpMIRLTISHFB5n707ludUCW/GN2wZlFhA=)
2: ldyV_EpqT2oKvf1QJeErhcsDNrU.roa (hash: 5odg+3w026oemslVSdfJUXV6ifzJkymRShy49z+o09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:7d:b0:dd:f6:48:58:40:02:fb:1c:16:59:80:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Validity
Not Before: Jan 31 04:00:32 2025 GMT
Not After : Feb 1 04:00:32 2025 GMT
Subject: CN=0bbaab0567f775ac74e0faeff7eede259bdff997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:84:85:6e:45:99:45:3c:d0:00:4b:ff:54:
79:61:c2:fa:49:78:38:11:f9:8d:4a:fd:e7:91:f8:
0d:0b:a6:a1:3f:a5:85:8c:0b:eb:e0:80:5e:c0:68:
32:61:d3:4a:ab:2d:a3:00:e4:83:35:ad:82:af:b4:
01:af:dc:ab:73:3a:e8:5a:1a:ec:4b:c2:6d:83:04:
2e:19:ec:b6:6f:2c:48:bd:2c:02:be:e5:9f:47:65:
f3:41:58:4f:ea:81:7a:c2:33:9e:1a:ce:ee:d8:c8:
f1:e9:e2:23:63:e4:dc:ab:03:be:a7:ee:90:a7:ff:
c8:8f:3a:21:ba:82:52:4d:e3:e8:3e:53:68:5c:38:
1b:0e:4e:95:48:7c:2e:41:b9:01:12:cc:3f:43:90:
e8:24:82:28:f2:64:30:4d:85:04:a8:86:4d:c6:df:
bb:c9:73:9f:f3:8b:6e:f0:5b:69:fe:a9:fa:d5:54:
d1:81:3e:c5:82:ae:b1:0f:83:89:b8:6d:bb:79:0c:
53:22:ef:aa:85:1b:69:69:a3:dd:51:fa:16:a4:4e:
3d:76:83:ac:2d:a3:9a:d1:e5:66:10:fb:1e:4d:6f:
11:e6:3a:29:e9:80:96:4f:3b:d6:39:75:7b:e0:35:
fb:16:a2:1e:af:e1:3b:6d:db:82:15:32:52:cb:b4:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BA:AB:05:67:F7:75:AC:74:E0:FA:EF:F7:EE:DE:25:9B:DF:F9:97
X509v3 Authority Key Identifier:
keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:30:a2:ea:57:86:d4:cf:c4:85:27:8b:d5:79:b7:36:c4:c3:
aa:65:09:f6:52:05:93:d4:05:6e:fd:23:71:91:dc:e5:17:e0:
76:d1:0a:3d:f5:ec:1c:20:26:0e:16:94:a3:d4:3b:ce:65:de:
1e:ee:75:73:03:97:2d:7d:e1:3f:21:2c:e2:8b:45:cd:df:00:
b5:5b:c0:58:1b:a7:d9:cf:73:81:45:d2:76:14:88:45:cb:79:
88:cb:e4:c9:40:4f:7c:e5:04:82:01:bd:cf:63:30:80:aa:4c:
a6:c1:37:62:8c:dc:1f:57:b8:fb:a8:d1:64:7e:c0:94:78:82:
ff:ba:c1:f5:97:d6:cf:83:8e:b8:db:64:f0:e2:e2:3c:d3:22:
cb:7f:a2:d3:73:23:62:aa:24:d5:1b:c6:69:65:26:28:b3:09:
44:5b:15:e5:5d:f2:7c:fc:ce:0c:c1:c6:9c:46:b2:b4:77:b6:
05:01:45:87:28:5c:61:e2:7d:7a:5b:ee:66:94:59:c6:64:e6:
16:65:dc:29:55:7e:14:d6:12:23:7a:65:80:81:c1:48:17:81:
9c:02:be:f7:80:a9:40:65:4e:6c:13:59:d6:1c:66:8b:72:66:
76:c8:a9:6f:2c:84:73:2d:9a:ca:a9:5e:2f:b1:d1:9f:98:8b:
7f:3c:7e:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hH2w3fZIWEAC+xwWWYAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMTEzMThkNGJkZDNlYzU5NDMzODZlNzAxZDdkMDJiZDY4
MzAwYWQwHhcNMjUwMTMxMDQwMDMyWhcNMjUwMjAxMDQwMDMyWjAzMTEwLwYDVQQD
EygwYmJhYWIwNTY3Zjc3NWFjNzRlMGZhZWZmN2VlZGUyNTliZGZmOTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2SEhW5FmUU80ABL/1R5YcL6SXg4
EfmNSv3nkfgNC6ahP6WFjAvr4IBewGgyYdNKqy2jAOSDNa2Cr7QBr9yrczroWhrs
S8JtgwQuGey2byxIvSwCvuWfR2XzQVhP6oF6wjOeGs7u2Mjx6eIjY+TcqwO+p+6Q
p//IjzohuoJSTePoPlNoXDgbDk6VSHwuQbkBEsw/Q5DoJIIo8mQwTYUEqIZNxt+7
yXOf84tu8Ftp/qn61VTRgT7Fgq6xD4OJuG27eQxTIu+qhRtpaaPdUfoWpE49doOs
LaOa0eVmEPseTW8R5jop6YCWTzvWOXV74DX7FqIer+E7bduCFTJSy7T6wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAu6qwVn93WsdOD67/fu3iWb3/mXMB8GA1UdIwQY
MBaAFHsRMY1L3T7FlDOG5wHX0CvWgwCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYt
ODhlYzU3OWY4OGNhLzEvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYtODhlYzU3OWY4OGNh
LzEvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzCi6leG
1M/EhSeL1Xm3NsTDqmUJ9lIFk9QFbv0jcZHc5RfgdtEKPfXsHCAmDhaUo9Q7zmXe
Hu51cwOXLX3hPyEs4otFzd8AtVvAWBun2c9zgUXSdhSIRct5iMvkyUBPfOUEggG9
z2MwgKpMpsE3YozcH1e4+6jRZH7AlHiC/7rB9ZfWz4OOuNtk8OLiPNMiy3+i03Mj
Yqok1RvGaWUmKLMJRFsV5V3yfPzODMHGnEaytHe2BQFFhyhcYeJ9elvuZpRZxmTm
FmXcKVV+FNYSI3plgIHBSBeBnAK+94CpQGVObBNZ1hxmi3JmdsipbyyEcy2ayqle
L7HRn5iLfzx+FQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:44 2025 by rpki-client on console-fra.rpki-client.org