Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
File: fdw2QUyZG_qNkvYCflMINwsitqY.mft (raw, json)
Hash identifier: 3Aeb+OP+3ZyxZedo0DUpLUAgyjtcT0gEvFAJZxIffcM=
Subject key identifier: EF:BC:24:53:4B:00:00:72:13:A2:D5:78:09:1D:D5:07:C4:07:6E:A8
Authority key identifier: 7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
Certificate issuer: /CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Certificate serial: 0194BB6043BB264DD3009E8FC877023182F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
Manifest number: 0580
Signing time: Fri 31 Jan 2025 08:00:35 +0000
Manifest this update: Fri 31 Jan 2025 08:00:35 +0000
Manifest next update: Sat 01 Feb 2025 08:00:35 +0000
Files and hashes: 1: fIi6Y7TMQAIgGM-S2BYF-rhLP0U.roa (hash: frVihHDK+8j5US3CUXtBypHsqdv++cToSbTh8ao+mTk=)
2: fdw2QUyZG_qNkvYCflMINwsitqY.crl (hash: 4wkOZB628876KXQQANDOChMLIhhkHhY1TIh7JRpkWhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:43:bb:26:4d:d3:00:9e:8f:c8:77:02:31:82:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Validity
Not Before: Jan 31 08:00:35 2025 GMT
Not After : Feb 1 08:00:35 2025 GMT
Subject: CN=efbc24534b00007213a2d578091dd507c4076ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:8a:bf:6c:f9:a6:fa:52:d5:48:09:26:56:
24:59:5a:01:b8:f2:83:dd:a4:bd:fa:3c:dc:f1:b4:
7a:bc:f3:0e:ca:ab:ec:70:4c:88:09:6b:d4:a7:3b:
07:bb:d8:d4:c6:84:33:9e:02:df:7e:1a:03:f0:d6:
bf:e9:26:56:e2:b0:4c:99:7f:53:87:2f:51:5e:4f:
71:82:79:cf:a6:9e:6d:e8:1c:d8:06:50:3d:42:1d:
f5:c5:53:c1:92:93:5d:f6:ed:0f:c7:8d:a9:19:4a:
f4:fb:31:5f:f4:71:00:4a:17:a1:ab:c6:cb:59:d7:
08:2f:a4:d5:2c:0b:b5:41:7a:a2:4a:0f:2e:e4:77:
74:5c:4e:e4:de:12:02:8c:20:d1:4d:60:56:05:7b:
e9:25:0a:b3:6f:ff:f1:e3:b3:6c:f3:da:00:1b:72:
fc:11:7a:a3:0c:fc:a6:83:4a:a4:c2:9b:b2:61:c8:
d6:3f:58:07:0c:45:95:78:d6:fe:99:ab:c1:20:20:
cc:f9:77:7a:aa:f8:8b:f0:21:a6:02:65:67:31:52:
9b:4a:95:70:5d:e9:7b:b3:06:1d:1f:53:48:76:b5:
4d:1c:16:74:a2:df:68:ac:d8:b8:e6:80:ae:82:19:
77:50:8d:2e:92:e5:25:86:ab:95:09:15:2f:99:e2:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BC:24:53:4B:00:00:72:13:A2:D5:78:09:1D:D5:07:C4:07:6E:A8
X509v3 Authority Key Identifier:
keyid:7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:63:ba:f7:4e:ab:e8:e2:9e:cb:ff:ec:4a:30:d0:53:84:6b:
9e:14:aa:f9:eb:5a:8e:06:61:b4:ca:a6:24:e2:8f:bd:5e:c1:
d8:80:34:a9:a7:eb:42:2d:6a:0a:3b:ec:e7:45:5d:72:64:6a:
7e:9e:ef:02:41:eb:87:22:cb:56:81:cf:c4:3c:52:24:b4:6b:
b5:e8:43:e8:9e:84:b1:a2:da:02:dd:67:09:60:c5:c4:9c:2a:
ff:40:eb:54:dd:bf:83:d2:3e:cf:37:3b:a2:83:bd:95:5f:c4:
eb:97:2d:bc:0e:fc:35:f3:47:bd:a3:72:ea:01:92:b7:5b:bd:
b5:af:e9:9b:48:fa:57:82:d4:7c:b3:ed:3a:e6:d0:88:65:58:
a5:d0:b0:27:bc:aa:23:ca:95:b4:62:66:4c:4c:86:89:c8:e0:
ea:6d:0b:5d:6a:96:92:00:81:97:5c:0a:08:69:75:91:74:96:
81:04:a4:38:11:b7:64:cb:93:30:cf:00:84:25:82:de:06:db:
ce:37:fb:d7:5b:da:5d:1f:b6:28:f2:ab:77:3f:f6:07:32:e2:
c1:3c:eb:67:60:56:4b:f3:ad:27:db:5c:a6:48:40:83:9c:af:
b6:05:50:11:00:dd:43:a5:08:68:bc:c1:d4:11:3c:f8:15:fb:
d1:2c:9b:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YEO7Jk3TAJ6PyHcCMYLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGMzNjQxNGM5OTFiZmE4ZDkyZjYwMjdlNTMwODM3MGIy
MmI2YTYwHhcNMjUwMTMxMDgwMDM1WhcNMjUwMjAxMDgwMDM1WjAzMTEwLwYDVQQD
EyhlZmJjMjQ1MzRiMDAwMDcyMTNhMmQ1NzgwOTFkZDUwN2M0MDc2ZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyaKv2z5pvpS1UgJJlYkWVoBuPKD
3aS9+jzc8bR6vPMOyqvscEyICWvUpzsHu9jUxoQzngLffhoD8Na/6SZW4rBMmX9T
hy9RXk9xgnnPpp5t6BzYBlA9Qh31xVPBkpNd9u0Px42pGUr0+zFf9HEAShehq8bL
WdcIL6TVLAu1QXqiSg8u5Hd0XE7k3hICjCDRTWBWBXvpJQqzb//x47Ns89oAG3L8
EXqjDPymg0qkwpuyYcjWP1gHDEWVeNb+mavBICDM+Xd6qviL8CGmAmVnMVKbSpVw
Xel7swYdH1NIdrVNHBZ0ot9orNi45oCughl3UI0ukuUlhquVCRUvmeJnTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+8JFNLAAByE6LVeAkd1QfEB26oMB8GA1UdIwQY
MBaAFH3cNkFMmRv6jZL2An5TCDcLIramMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmR3MlFVeVpHX3FOa3ZZQ2ZsTUlOd3NpdHFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hYWNkY2MtYWExNy00MmY4LTlhZGUt
N2MzNzlhNTUxYzEyLzEvZmR3MlFVeVpHX3FOa3ZZQ2ZsTUlOd3NpdHFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9hYWNkY2MtYWExNy00MmY4LTlhZGUtN2MzNzlhNTUxYzEy
LzEvZmR3MlFVeVpHX3FOa3ZZQ2ZsTUlOd3NpdHFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGO6906r
6OKey//sSjDQU4RrnhSq+etajgZhtMqmJOKPvV7B2IA0qafrQi1qCjvs50VdcmRq
fp7vAkHrhyLLVoHPxDxSJLRrtehD6J6EsaLaAt1nCWDFxJwq/0DrVN2/g9I+zzc7
ooO9lV/E65ctvA78NfNHvaNy6gGSt1u9ta/pm0j6V4LUfLPtOubQiGVYpdCwJ7yq
I8qVtGJmTEyGicjg6m0LXWqWkgCBl1wKCGl1kXSWgQSkOBG3ZMuTMM8AhCWC3gbb
zjf711vaXR+2KPKrdz/2BzLiwTzrZ2BWS/OtJ9tcpkhAg5yvtgVQEQDdQ6UIaLzB
1BE8+BX70SybwQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:07 2025 by rpki-client on console-fra.rpki-client.org