Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: wqzsUFGX/QNEk/YqT11SpU2rcV53cdM1swRnukiIMYA=
Subject key identifier: 05:A0:60:B1:F0:DD:3F:26:B2:24:5D:21:24:C7:AA:44:22:91:F4:F0
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 0194BA847E2CE48DFDB1274170FEEE88A6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 0F1B
Signing time: Fri 31 Jan 2025 04:00:32 +0000
Manifest this update: Fri 31 Jan 2025 04:00:32 +0000
Manifest next update: Sat 01 Feb 2025 04:00:32 +0000
Files and hashes: 1: MPC24ig7GybvQGJQS-GC0wxWNWk.roa (hash: qOm3yyWDXF7wdNeDgGEdzc6Ua0rCER7AIaOxZKXE29E=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: 2lLSU6DADcgw098oF1yHIbSDc0bi3kjLMNA9III0lYg=)
3: hsXOS728ssx8bAD81ls-MhEMYHY.roa (hash: WicCvVpq6yjNVb8B4LAK2/Mh2on49kT2FPzZdWAqLP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:7e:2c:e4:8d:fd:b1:27:41:70:fe:ee:88:a6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Jan 31 04:00:32 2025 GMT
Not After : Feb 1 04:00:32 2025 GMT
Subject: CN=05a060b1f0dd3f26b2245d2124c7aa442291f4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:f7:ab:63:ff:67:3c:37:fb:ed:86:2e:81:
ee:09:b8:58:b6:90:c4:c0:22:60:af:30:9f:9d:8e:
ec:af:e1:23:de:6f:4c:a4:8d:c8:2e:1b:11:fd:9f:
19:a0:48:fa:56:6f:f2:9d:eb:69:f4:c0:e6:aa:15:
d3:4f:59:ee:bc:74:ef:82:7b:5e:fc:af:9a:38:86:
58:44:be:59:88:99:66:08:9f:b5:4b:95:bc:86:3c:
cb:52:03:8b:58:ee:da:f5:db:94:ce:f6:6a:13:31:
d9:41:85:fc:d1:5e:5e:b7:b5:a0:88:6d:80:57:22:
8e:e6:85:5a:f9:3a:dd:8a:1c:54:55:88:69:9a:10:
47:e0:d6:7c:bd:59:bf:c1:d2:0c:87:82:d5:32:ef:
e4:e2:70:cd:ea:d4:09:58:1e:a2:cc:c7:d1:7b:c0:
fb:a7:c0:9c:39:49:cb:f8:26:b4:43:7c:71:58:b7:
c8:6c:47:5a:98:4b:e7:d8:3d:a4:a9:bb:b8:b6:1d:
72:34:66:7c:7c:70:1b:8b:4d:ff:04:87:62:ae:86:
f3:4d:7e:24:1a:5b:51:b4:8d:67:35:a0:39:cc:37:
d5:4e:4e:ff:21:1e:88:6b:46:f8:b2:eb:7e:d9:fa:
d8:8e:a7:32:d0:db:c0:f4:de:4b:52:95:1e:81:99:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A0:60:B1:F0:DD:3F:26:B2:24:5D:21:24:C7:AA:44:22:91:F4:F0
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:42:81:ed:e9:a7:85:9d:e3:5f:09:2c:ad:eb:22:d5:bd:56:
e6:8e:15:f1:be:f2:a5:82:0e:41:2d:92:97:8a:3d:1e:57:5c:
89:c9:31:43:e4:3b:7d:af:d5:81:25:89:10:7e:1e:e3:a2:23:
b5:d5:f6:b4:2b:7e:fb:91:6e:8a:15:e4:dc:c6:1e:61:25:1b:
0b:cb:2b:45:df:e3:93:1c:be:2e:21:b7:00:85:f6:9e:f3:ac:
7c:3b:6b:be:76:3f:4f:1c:d9:26:c2:c0:95:eb:4a:bb:40:99:
7d:70:f7:d7:32:f7:fc:43:f0:da:10:0e:01:df:b8:fe:e7:32:
3d:9e:48:97:17:11:50:43:c8:15:a5:78:4a:c3:bc:f8:31:b3:
5f:86:3c:4d:39:a4:34:9c:23:be:e3:54:2d:24:83:e0:7f:f4:
92:72:ce:ba:79:06:1a:60:4a:aa:2a:69:ad:48:3e:a0:f6:36:
03:89:7d:fc:f0:98:3b:c5:14:c1:8c:d5:2d:b3:82:77:31:d9:
7a:2c:3c:74:a0:10:a4:67:4a:35:1a:ac:60:e5:f5:87:1f:ad:
cc:1b:6e:03:63:69:6d:bc:08:a6:00:f0:f6:47:db:a3:ba:42:
e8:f4:55:5a:c2:1c:84:98:0a:78:34:b4:59:b1:06:29:25:ec:
1b:6b:1d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hH4s5I39sSdBcP7uiKauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzNhY2Y5MjlhMjIzMzhmMmIzODAxODBjYzg1MmRiNDc3
OWFhZDAwHhcNMjUwMTMxMDQwMDMyWhcNMjUwMjAxMDQwMDMyWjAzMTEwLwYDVQQD
EygwNWEwNjBiMWYwZGQzZjI2YjIyNDVkMjEyNGM3YWE0NDIyOTFmNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15r3q2P/Zzw3++2GLoHuCbhYtpDE
wCJgrzCfnY7sr+Ej3m9MpI3ILhsR/Z8ZoEj6Vm/ynetp9MDmqhXTT1nuvHTvgnte
/K+aOIZYRL5ZiJlmCJ+1S5W8hjzLUgOLWO7a9duUzvZqEzHZQYX80V5et7WgiG2A
VyKO5oVa+TrdihxUVYhpmhBH4NZ8vVm/wdIMh4LVMu/k4nDN6tQJWB6izMfRe8D7
p8CcOUnL+Ca0Q3xxWLfIbEdamEvn2D2kqbu4th1yNGZ8fHAbi03/BIdirobzTX4k
GltRtI1nNaA5zDfVTk7/IR6Ia0b4sut+2frYjqcy0NvA9N5LUpUegZknQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWgYLHw3T8msiRdISTHqkQikfTwMB8GA1UdIwQY
MBaAFGfDrPkpoiM48rOAGAzIUttHearQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUt
Y2FjYThiODBjOTFjLzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUtY2FjYThiODBjOTFj
LzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUKB7emn
hZ3jXwksresi1b1W5o4V8b7ypYIOQS2Sl4o9HldcickxQ+Q7fa/VgSWJEH4e46Ij
tdX2tCt++5FuihXk3MYeYSUbC8srRd/jkxy+LiG3AIX2nvOsfDtrvnY/TxzZJsLA
letKu0CZfXD31zL3/EPw2hAOAd+4/ucyPZ5IlxcRUEPIFaV4SsO8+DGzX4Y8TTmk
NJwjvuNULSSD4H/0knLOunkGGmBKqipprUg+oPY2A4l9/PCYO8UUwYzVLbOCdzHZ
eiw8dKAQpGdKNRqsYOX1hx+tzBtuA2NpbbwIpgDw9kfbo7pC6PRVWsIchJgKeDS0
WbEGKSXsG2sdkA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:38 2025 by rpki-client on console-fra.rpki-client.org