Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: gEnN3qb8u0I5Z+dHGqlyLL2CVbNtf/UP/n7huc9ZvIM=
Subject key identifier: EA:1D:07:A1:61:E9:39:D5:80:27:FB:0B:97:79:79:32:C3:C6:42:E6
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 0194BB2949F3E60F173DCF81E7BB4F2044A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 139A
Signing time: Fri 31 Jan 2025 07:00:32 +0000
Manifest this update: Fri 31 Jan 2025 07:00:32 +0000
Manifest next update: Sat 01 Feb 2025 07:00:32 +0000
Files and hashes: 1: 1-QyBzd9rm5Adz5T66hemt4mqchM.roa (hash: k/ZsToVQPkWNF1ny2kDjlSwa0MAW61u333/62OgvXkw=)
2: 6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa (hash: 8Th0uf+/JgP3nER+mq+GyZV+pOLau4+PNBq3EnvOyaA=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: xoBQSy9zvkz/yPs4hfGRQo+cfz9+iBBWjch2ZDqwMR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:49:f3:e6:0f:17:3d:cf:81:e7:bb:4f:20:44:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Jan 31 07:00:32 2025 GMT
Not After : Feb 1 07:00:32 2025 GMT
Subject: CN=ea1d07a161e939d58027fb0b97797932c3c642e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:04:03:3c:05:13:1c:14:82:a1:5e:e7:7a:
45:22:c9:f3:cc:46:c4:e3:14:72:63:d1:97:b6:8c:
d5:85:9e:ca:0d:c9:e6:55:a7:7e:2a:4f:09:54:9a:
24:6c:f4:6d:62:d8:36:c2:8a:08:10:b2:01:f3:48:
e7:8e:a1:8a:7a:a2:38:a4:04:b8:5f:a1:24:d9:8d:
97:61:f1:1d:99:a0:e8:57:f6:9b:db:e1:4c:9d:63:
9e:a3:da:7d:a5:1d:97:f9:09:ea:9b:19:87:90:2e:
7e:e7:42:5e:a7:3f:90:da:3d:b5:eb:5f:9b:b1:e0:
e7:99:9e:1a:ff:2e:09:22:e8:a2:bd:ec:06:2c:f0:
65:26:e1:c6:df:ca:31:bd:57:b9:18:1f:12:22:ca:
2b:24:03:bf:a3:49:e5:fc:6e:90:fa:1f:22:5e:1d:
38:9b:d6:e9:a3:ed:a0:26:46:aa:e3:3d:10:02:00:
93:60:6f:21:c4:1b:8d:ba:cf:3f:5f:f2:20:c6:6c:
1a:4b:91:3d:d9:ec:08:66:36:7b:b5:4a:42:b9:67:
76:3f:75:84:15:25:90:39:37:57:c9:00:40:4c:2c:
c2:a8:f2:46:c9:4b:97:b5:c0:c5:c0:a2:9e:9d:73:
a5:f0:83:72:4d:82:1a:c8:50:20:23:ba:5d:d4:1d:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1D:07:A1:61:E9:39:D5:80:27:FB:0B:97:79:79:32:C3:C6:42:E6
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:77:86:55:29:c0:b3:fc:17:ab:c8:6b:24:a9:5c:ec:2b:34:
0c:09:ef:85:c9:24:cb:bd:82:60:d4:ae:a3:b1:70:e0:65:b6:
72:30:47:e6:e4:ca:84:60:a7:1c:f6:b6:5e:9f:49:18:85:f7:
be:4c:41:2d:4a:c0:e5:34:bd:e1:47:53:35:86:26:6c:d1:e1:
7f:70:ca:36:a3:17:25:ac:49:4c:f4:52:35:6f:24:b5:3c:d6:
25:2d:ca:99:89:a7:b7:11:ca:2d:16:7e:0b:ac:e2:85:32:14:
fc:b2:b9:d5:e2:4c:27:0b:ab:e3:0c:c2:8b:e2:68:b2:04:55:
dc:d7:e2:4d:d3:d2:19:33:ab:b2:93:68:47:06:18:8c:cb:18:
93:e9:13:37:e4:2d:2b:f9:8d:a7:dc:3b:f5:7a:ea:08:37:0a:
e5:cd:8e:20:9e:0e:a3:f4:2f:78:b2:58:1a:27:ba:cc:0d:e0:
61:61:47:ef:f9:92:bf:29:f8:84:08:7e:c9:47:7c:ff:a6:48:
d9:2d:a2:a7:a6:d0:26:4a:0f:a2:5a:19:a2:b2:b2:07:01:78:
e2:f4:b2:30:39:3c:ef:82:b3:ec:f8:e4:ef:54:70:85:78:9b:
76:ec:4c:77:6d:65:78:8a:d4:7c:69:ec:d0:d6:f8:52:05:ee:
2b:21:f2:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KUnz5g8XPc+B57tPIESlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTRhNGU2NTU4YmFiODlkMzZlM2JhMjFjOTVlMmFmZGQ2
OGZiZWEwHhcNMjUwMTMxMDcwMDMyWhcNMjUwMjAxMDcwMDMyWjAzMTEwLwYDVQQD
EyhlYTFkMDdhMTYxZTkzOWQ1ODAyN2ZiMGI5Nzc5NzkzMmMzYzY0MmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiAEAzwFExwUgqFe53pFIsnzzEbE
4xRyY9GXtozVhZ7KDcnmVad+Kk8JVJokbPRtYtg2wooIELIB80jnjqGKeqI4pAS4
X6Ek2Y2XYfEdmaDoV/ab2+FMnWOeo9p9pR2X+QnqmxmHkC5+50Jepz+Q2j2161+b
seDnmZ4a/y4JIuiivewGLPBlJuHG38oxvVe5GB8SIsorJAO/o0nl/G6Q+h8iXh04
m9bpo+2gJkaq4z0QAgCTYG8hxBuNus8/X/IgxmwaS5E92ewIZjZ7tUpCuWd2P3WE
FSWQOTdXyQBATCzCqPJGyUuXtcDFwKKenXOl8INyTYIayFAgI7pd1B3pLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOodB6Fh6TnVgCf7C5d5eTLDxkLmMB8GA1UdIwQY
MBaAFF8UpOZVi6uJ0247ohyV4q/daPvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQt
ZGE4MWYwOGY2MDAxLzEvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQtZGE4MWYwOGY2MDAx
LzEvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHeGVSnA
s/wXq8hrJKlc7Cs0DAnvhckky72CYNSuo7Fw4GW2cjBH5uTKhGCnHPa2Xp9JGIX3
vkxBLUrA5TS94UdTNYYmbNHhf3DKNqMXJaxJTPRSNW8ktTzWJS3KmYmntxHKLRZ+
C6zihTIU/LK51eJMJwur4wzCi+JosgRV3NfiTdPSGTOrspNoRwYYjMsYk+kTN+Qt
K/mNp9w79XrqCDcK5c2OIJ4Oo/QveLJYGie6zA3gYWFH7/mSvyn4hAh+yUd8/6ZI
2S2ip6bQJkoPoloZorKyBwF44vSyMDk874Kz7Pjk71RwhXibduxMd21leIrUfGns
0Nb4UgXuKyHydQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:30 2025 by rpki-client on console-fra.rpki-client.org