Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
File: r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json)
Hash identifier: 7+HrDfG/4804liRuXfdbdJbeb0yqpCmBefkEv90M1qs=
Subject key identifier: 4B:5F:44:C1:BA:49:15:B8:8A:7E:3B:7F:F1:01:94:AD:D5:BB:81:DB
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 0194BB604CDC188170BCF0D3F8FA47F7F0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
Manifest number: 1119
Signing time: Fri 31 Jan 2025 08:00:38 +0000
Manifest this update: Fri 31 Jan 2025 08:00:38 +0000
Manifest next update: Sat 01 Feb 2025 08:00:38 +0000
Files and hashes: 1: 5sSVXjXvJmErWd1wKwIQK6a_mpc.roa (hash: Gd8tIJeuQDrvoiYueaVU9NtycnUD3d9hfBsHWs7XkBs=)
2: 9CxZ9k_t9hMo55L6uAnbiDEpetU.roa (hash: tBRk1oTOlBeUNCjuxG7yQre7lmz4lVGM1tEKGpkI/Jw=)
3: AAe3vljOuGvSTlsJqoO9Wu7Oq1w.roa (hash: IQO0MooKWp9Cz+PJ2FkCg771QrVH8K5fHfuexh0B0Rk=)
4: JblHAdnkz7IDRO8QmH2JMOjzkyQ.roa (hash: cGLKYT8Hxzs+cEgf3xDHHQtQS0b8iQ7h7LNM/8+n3pU=)
5: YdvdhoRpy_JXRjRWmkCEQY06GUI.roa (hash: TbsRq0lwWgkwqZTblVQ4eG6aMqkkSiOMP5tHnWR2zXI=)
6: ZFFTSBF1NQ53TJQyiivhv4BruEg.roa (hash: esbw11uLHSDej7o2u5hst3yF9WrjTIkF3AwgO1jVCEY=)
7: cAvPgJnDexIKpiHvGayqSS9-kC8.roa (hash: 4W7cnhuEBxCD2cWqtC/raaWqxEh9cF8vkDRXNWnz3ZE=)
8: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: DENfmbF7jz3gKA/gMRFoOUFTrdBOpDp0ENa0oAA2+Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:4c:dc:18:81:70:bc:f0:d3:f8:fa:47:f7:f0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 31 08:00:38 2025 GMT
Not After : Feb 1 08:00:38 2025 GMT
Subject: CN=4b5f44c1ba4915b88a7e3b7ff10194add5bb81db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:32:7e:b4:30:1a:99:5b:c3:e3:56:20:1a:
26:96:8a:58:8a:6d:23:2e:f2:69:48:7d:f2:14:9c:
97:68:fc:3d:22:46:fc:0a:f6:da:2a:0b:7b:5f:69:
24:2d:3b:4b:31:6c:87:91:39:cd:af:cf:06:05:5d:
be:2b:c0:87:62:14:33:7e:fb:a3:ad:4a:b1:35:2e:
40:33:2e:94:a9:43:aa:3d:e4:39:aa:53:18:9a:4c:
77:d4:c9:25:4d:2a:74:b6:e3:0e:9d:e2:e9:95:36:
d3:e7:de:78:92:5c:ab:76:5f:16:80:c3:11:fe:9a:
53:b0:2c:46:1f:ce:49:12:f8:05:d0:d7:45:84:4c:
08:bd:f1:52:59:04:73:c7:19:56:71:11:17:01:bf:
d5:59:a3:d8:7b:87:fe:a7:a8:7e:f8:8a:16:27:60:
00:ff:4b:55:01:a5:48:cd:33:a0:c9:31:b5:d2:e9:
81:81:6a:ce:13:8d:3b:3a:7a:8b:52:ff:0b:19:81:
e7:7e:29:7c:a8:43:b9:74:81:cf:17:34:61:a5:41:
29:ee:da:58:6a:bb:fb:b1:7b:64:6c:d9:7b:16:d6:
7b:94:18:f9:b6:62:68:c2:57:02:5d:7a:fe:13:17:
29:98:b0:d1:06:ee:6b:fe:53:0c:50:3d:47:63:46:
27:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:44:C1:BA:49:15:B8:8A:7E:3B:7F:F1:01:94:AD:D5:BB:81:DB
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:27:ed:fa:c1:5d:6f:84:46:b0:cf:b5:a1:e4:8d:ac:3b:0a:
c1:22:c3:be:e3:6e:41:3f:d0:58:73:c3:7a:b6:63:e9:20:63:
c8:76:7d:8e:7f:c9:a3:93:26:dd:8e:79:19:55:a3:3f:aa:2a:
ff:ad:5d:c9:1c:9d:25:af:cc:50:5c:e0:7b:de:44:4a:c4:b2:
58:57:ad:e2:c2:b5:c2:9c:40:ab:5e:6a:b1:2d:f1:46:e3:05:
e6:a9:15:41:4e:c0:d9:45:a7:7b:ef:6e:9b:fb:a7:16:8c:8c:
ce:62:04:40:75:b1:a8:c5:66:92:23:ff:f1:22:01:ce:db:8f:
30:c1:39:40:79:ab:e8:ed:27:44:69:d2:40:d5:c9:42:9c:54:
f5:98:8c:3f:16:f6:8a:24:3b:34:b8:f3:f5:b4:2d:a7:a3:60:
49:4e:d9:c8:11:a1:67:31:91:2c:ff:91:5a:64:c2:31:1f:70:
c5:38:65:d8:42:00:5c:04:c5:31:d3:bc:af:36:b6:3d:19:54:
9a:06:dc:7c:39:d0:89:b1:98:d1:4a:4f:0a:2e:98:b9:cc:10:
44:40:0b:0d:60:61:de:46:ee:0e:80:5e:ac:f7:2f:c6:3f:34:
81:e7:e6:75:69:64:e3:f1:bb:6e:a4:35:f9:89:f5:7c:f2:19:
45:29:a0:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YEzcGIFwvPDT+PpH9/D+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk
ZmQ5YTgwHhcNMjUwMTMxMDgwMDM4WhcNMjUwMjAxMDgwMDM4WjAzMTEwLwYDVQQD
Eyg0YjVmNDRjMWJhNDkxNWI4OGE3ZTNiN2ZmMTAxOTRhZGQ1YmI4MWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ygyfrQwGplbw+NWIBomlopYim0j
LvJpSH3yFJyXaPw9Ikb8CvbaKgt7X2kkLTtLMWyHkTnNr88GBV2+K8CHYhQzfvuj
rUqxNS5AMy6UqUOqPeQ5qlMYmkx31MklTSp0tuMOneLplTbT5954klyrdl8WgMMR
/ppTsCxGH85JEvgF0NdFhEwIvfFSWQRzxxlWcREXAb/VWaPYe4f+p6h++IoWJ2AA
/0tVAaVIzTOgyTG10umBgWrOE407OnqLUv8LGYHnfil8qEO5dIHPFzRhpUEp7tpY
arv7sXtkbNl7FtZ7lBj5tmJowlcCXXr+ExcpmLDRBu5r/lMMUD1HY0YnZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtfRMG6SRW4in47f/EBlK3Vu4HbMB8GA1UdIwQY
MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt
MThkMWE0MDZhYWVkLzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk
LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbift+sFd
b4RGsM+1oeSNrDsKwSLDvuNuQT/QWHPDerZj6SBjyHZ9jn/Jo5Mm3Y55GVWjP6oq
/61dyRydJa/MUFzge95ESsSyWFet4sK1wpxAq15qsS3xRuMF5qkVQU7A2UWne+9u
m/unFoyMzmIEQHWxqMVmkiP/8SIBztuPMME5QHmr6O0nRGnSQNXJQpxU9ZiMPxb2
iiQ7NLjz9bQtp6NgSU7ZyBGhZzGRLP+RWmTCMR9wxThl2EIAXATFMdO8rza2PRlU
mgbcfDnQibGY0UpPCi6YucwQREALDWBh3kbuDoBerPcvxj80gefmdWlk4/G7bqQ1
+Yn1fPIZRSmglQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:04 2025 by rpki-client on console-fra.rpki-client.org