Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json)
Hash identifier: DSr4iIroEaizLoGH3z1d/hRX5t8l+osgYK00bhFRyeM=
Subject key identifier: 0F:47:D6:B9:46:0F:25:E7:A6:0B:17:2B:4F:64:EB:BB:58:B5:91:62
Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b
Certificate serial: 0194BB973EF2B33C1C04CFD8C365533AAB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
Manifest number: 129F
Signing time: Fri 31 Jan 2025 09:00:38 +0000
Manifest this update: Fri 31 Jan 2025 09:00:38 +0000
Manifest next update: Sat 01 Feb 2025 09:00:38 +0000
Files and hashes: 1: 1-p_3utwZJLFIY_hjsgzsQwTLbiI.roa (hash: zpk9gNBEbgG53UDNDLXhMv6FzOCjxm3OmxU6M/IVco8=)
2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: jXUyxZsU0J4EsGyuncAn0zc29TUIGuHd7nvAIUH5A6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:3e:f2:b3:3c:1c:04:cf:d8:c3:65:53:3a:ab:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b
Validity
Not Before: Jan 31 09:00:38 2025 GMT
Not After : Feb 1 09:00:38 2025 GMT
Subject: CN=0f47d6b9460f25e7a60b172b4f64ebbb58b59162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:95:92:65:b6:5d:c8:0f:1f:95:65:1c:39:
32:a2:db:93:16:1c:86:b1:e1:f0:a6:ef:d1:53:b7:
3b:a8:65:98:f0:68:f3:df:43:8b:b4:ed:31:d6:35:
c0:80:88:61:df:f7:98:49:f0:d3:53:a9:ee:a5:f4:
45:0e:b7:66:34:9f:0b:0e:69:27:26:d4:e3:0a:9d:
88:a6:22:bf:79:97:7b:fe:b2:3d:96:03:5f:4a:0c:
76:95:21:aa:5b:51:2e:f4:9f:93:49:ed:12:bc:44:
89:fb:d9:cc:52:47:53:45:09:7b:fa:4e:63:88:58:
0d:45:14:85:3c:10:63:64:db:b5:92:4c:5c:be:61:
c8:eb:06:35:69:53:d9:7d:2c:a3:b7:c1:cf:72:f6:
6f:2d:85:16:db:b5:b5:77:10:61:ea:e6:0e:2d:88:
22:d8:de:3e:42:8f:95:84:b0:4c:1a:c0:6d:b7:ab:
16:01:dd:b2:42:62:b5:1d:a9:3c:17:06:ce:10:bc:
c7:7e:2d:1f:69:cc:30:fd:e6:5b:57:d2:df:cd:a3:
59:36:8f:b9:c8:43:73:4f:a0:de:a9:7d:d6:73:04:
f1:80:c5:ca:d1:d5:d9:7b:7a:c2:db:61:8b:a8:16:
b6:1c:5f:6a:36:e4:df:79:7e:8a:74:79:43:71:bf:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:47:D6:B9:46:0F:25:E7:A6:0B:17:2B:4F:64:EB:BB:58:B5:91:62
X509v3 Authority Key Identifier:
keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2a:2e:ea:e0:80:4d:5b:fd:85:fb:a9:93:59:b4:3d:46:5c:
ca:72:74:37:98:e2:bc:15:9a:ba:03:55:21:d6:a5:c3:0e:da:
cd:c8:4c:13:90:1d:fb:1c:b8:3b:69:f8:36:72:e3:e2:30:45:
ab:5b:82:79:26:f6:d9:ea:f2:37:04:ed:b0:d0:e8:19:a5:88:
36:08:c5:82:44:4a:be:9f:8f:08:ef:0f:d9:75:a2:0c:55:27:
ff:d1:82:20:2e:c6:f1:de:cf:0e:1a:4c:eb:56:15:ff:fd:29:
0d:b0:19:6f:fe:69:4f:fe:17:64:ea:49:f6:25:11:9b:71:64:
83:e5:45:3d:9b:31:aa:81:6c:38:a4:7a:c7:c1:80:95:57:a5:
78:eb:95:66:24:e5:74:26:65:70:17:7b:9d:69:8d:db:1d:d5:
cd:81:85:c5:f6:5f:68:ec:89:f4:97:65:09:2f:64:e5:92:55:
3c:d6:8b:43:d6:c7:a2:9e:f3:18:3b:50:85:09:b7:d3:d1:14:
cf:70:30:58:30:c4:75:09:4c:0f:86:d8:56:ca:9d:7b:38:44:
d7:34:c5:3c:bf:a6:2a:9d:5a:c0:18:9f:cd:94:35:b1:15:a6:
18:99:ee:b6:eb:40:cc:56:84:f9:76:9b:8c:b6:af:c7:fe:98:
45:48:3f:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lz7yszwcBM/Yw2VTOqsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODc5MDJjZTdhNmEzMzRhNGUwZGI3M2U3MjE5ODkwMTVk
NjQ4OWIwHhcNMjUwMTMxMDkwMDM4WhcNMjUwMjAxMDkwMDM4WjAzMTEwLwYDVQQD
EygwZjQ3ZDZiOTQ2MGYyNWU3YTYwYjE3MmI0ZjY0ZWJiYjU4YjU5MTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+WVkmW2XcgPH5VlHDkyotuTFhyG
seHwpu/RU7c7qGWY8Gjz30OLtO0x1jXAgIhh3/eYSfDTU6nupfRFDrdmNJ8LDmkn
JtTjCp2IpiK/eZd7/rI9lgNfSgx2lSGqW1Eu9J+TSe0SvESJ+9nMUkdTRQl7+k5j
iFgNRRSFPBBjZNu1kkxcvmHI6wY1aVPZfSyjt8HPcvZvLYUW27W1dxBh6uYOLYgi
2N4+Qo+VhLBMGsBtt6sWAd2yQmK1Hak8FwbOELzHfi0facww/eZbV9LfzaNZNo+5
yENzT6DeqX3WcwTxgMXK0dXZe3rC22GLqBa2HF9qNuTfeX6KdHlDcb+mZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9H1rlGDyXnpgsXK09k67tYtZFiMB8GA1UdIwQY
MBaAFHWHkCznpqM0pODbc+chmJAV1kibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAt
ZjkyMDE5Mzc1YmM4LzEvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAtZjkyMDE5Mzc1YmM4
LzEvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCou6uCA
TVv9hfupk1m0PUZcynJ0N5jivBWaugNVIdalww7azchME5Ad+xy4O2n4NnLj4jBF
q1uCeSb22eryNwTtsNDoGaWINgjFgkRKvp+PCO8P2XWiDFUn/9GCIC7G8d7PDhpM
61YV//0pDbAZb/5pT/4XZOpJ9iURm3Fkg+VFPZsxqoFsOKR6x8GAlVeleOuVZiTl
dCZlcBd7nWmN2x3VzYGFxfZfaOyJ9JdlCS9k5ZJVPNaLQ9bHop7zGDtQhQm309EU
z3AwWDDEdQlMD4bYVsqdezhE1zTFPL+mKp1awBifzZQ1sRWmGJnututAzFaE+Xab
jLavx/6YRUg/1g==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:26 2025 by rpki-client on console-fra.rpki-client.org