Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier: L3XVMII+Cs25xs2jAXsrooOxQFPBTFOqYLHfseGhxvM=
Subject key identifier: 50:28:51:B6:DA:5C:DC:C6:73:E0:D5:19:24:FE:5B:01:02:AA:92:18
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 0194BABB447DA6446EC2FC8CBC67020D88D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 05:00:22 +0000
Manifest this update: Fri 31 Jan 2025 05:00:22 +0000
Manifest next update: Sat 01 Feb 2025 05:00:22 +0000
Files and hashes: 1: DUHPPbMiJZ5g5-MVvzd1BoFThPs.roa (hash: jYJfj32NL3hL8Amv7vFPn8VdtIOctCQTglUuBNZ6asM=)
2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: /PTr4AYVhzOGB/oj6sFNMD+ziX9QWMmCtAKOQbeazwM=)
3: v7cahpSyhHNf-9u3vX0WVgp6xg4.roa (hash: An2ilVmevKfJ9Krr3t4y0gOa1n+BDhvcN3VZHuTlMls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:44:7d:a6:44:6e:c2:fc:8c:bc:67:02:0d:88:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Jan 31 05:00:22 2025 GMT
Not After : Feb 1 05:00:22 2025 GMT
Subject: CN=502851b6da5cdcc673e0d51924fe5b0102aa9218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8b:c0:20:c1:df:bd:76:4b:4d:99:b8:37:54:
70:4c:fe:81:ca:dc:23:1f:1e:cd:57:4a:53:f3:73:
cd:93:ab:6c:c0:4c:dd:40:b7:08:24:5f:cd:fa:ff:
79:19:02:30:27:db:bf:ed:ae:53:83:52:9c:e2:09:
fb:e1:5e:74:47:2d:17:aa:fb:0c:dc:e2:bf:16:c3:
f0:78:18:ad:ce:14:c4:17:82:a8:64:bd:76:8a:23:
ea:0f:55:fe:07:09:f7:6d:41:e5:9d:08:ad:75:71:
82:a3:18:11:2a:78:6e:08:44:a5:ba:81:d1:c5:f6:
d0:50:4c:18:73:03:64:99:8a:a8:8f:fc:22:41:f0:
26:10:fb:5f:33:ac:fc:95:c6:17:12:77:f9:97:30:
12:cf:d0:1a:1d:b0:c5:fc:b6:d6:ed:af:18:fc:03:
f1:97:42:f9:2a:33:b8:c6:6b:0e:cf:2a:e6:7e:d1:
f4:56:73:7f:dc:e1:3a:27:77:ea:fa:1d:3c:a7:82:
df:57:3a:3b:c2:e5:43:a0:8a:6b:77:a8:33:04:14:
f8:6a:40:d9:c6:dc:a9:33:12:e5:d5:ee:3f:94:74:
31:57:9f:d4:fc:6c:06:32:8d:a1:e1:01:01:34:7e:
85:f2:db:24:58:19:f8:91:89:ce:83:e6:ee:85:34:
72:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:28:51:B6:DA:5C:DC:C6:73:E0:D5:19:24:FE:5B:01:02:AA:92:18
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:09:d8:e8:00:63:88:1c:db:92:71:15:7b:1e:cf:26:6b:0c:
1f:f2:ca:68:22:c1:70:06:c5:a2:97:db:27:61:ab:1d:09:7e:
6e:71:50:88:a0:db:d5:52:13:ac:95:43:a6:29:bf:73:0c:e5:
12:6e:cb:6c:0c:f0:de:2e:68:59:f9:89:3b:82:c9:c9:92:6b:
b1:61:00:51:9d:f9:30:84:ce:0e:e4:ef:cb:1b:25:7a:16:3c:
bd:83:da:e9:3a:23:0a:21:66:24:db:f1:75:ed:13:1e:9f:6c:
7b:8e:ff:96:08:9d:f0:98:dd:48:46:08:9e:41:be:6c:4d:bc:
a7:a5:0d:18:25:5d:4c:93:bd:44:bf:5f:46:91:3a:1d:f2:58:
92:26:08:3d:e6:da:07:98:3d:7f:72:32:74:9a:42:bf:ba:0e:
1a:6c:b0:62:84:52:0f:56:2c:32:5c:9e:6b:24:7a:56:3e:4f:
05:96:76:43:83:dc:4e:e2:53:bf:8d:6d:42:c8:af:3b:13:b5:
00:3c:2c:c6:34:7f:8b:33:8c:a8:2a:f2:fb:24:83:c1:e8:54:
3e:bd:ea:ca:e1:d3:83:d4:ff:7b:6b:6b:0c:06:a4:3b:f3:34:
1a:b2:e0:8a:cc:c3:fc:7e:99:bb:07:bf:f1:1d:e2:0f:e8:0b:
06:e5:82:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u0R9pkRuwvyMvGcCDYjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NzVmMTg1ODIzZGJjNmE4MmQxMDViM2NhMTYwNzdkYjU3
MjkzNzcwHhcNMjUwMTMxMDUwMDIyWhcNMjUwMjAxMDUwMDIyWjAzMTEwLwYDVQQD
Eyg1MDI4NTFiNmRhNWNkY2M2NzNlMGQ1MTkyNGZlNWIwMTAyYWE5MjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ovAIMHfvXZLTZm4N1RwTP6Bytwj
Hx7NV0pT83PNk6tswEzdQLcIJF/N+v95GQIwJ9u/7a5Tg1Kc4gn74V50Ry0XqvsM
3OK/FsPweBitzhTEF4KoZL12iiPqD1X+Bwn3bUHlnQitdXGCoxgRKnhuCESluoHR
xfbQUEwYcwNkmYqoj/wiQfAmEPtfM6z8lcYXEnf5lzASz9AaHbDF/LbW7a8Y/APx
l0L5KjO4xmsOzyrmftH0VnN/3OE6J3fq+h08p4LfVzo7wuVDoIprd6gzBBT4akDZ
xtypMxLl1e4/lHQxV5/U/GwGMo2h4QEBNH6F8tskWBn4kYnOg+buhTRypwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAoUbbaXNzGc+DVGST+WwECqpIYMB8GA1UdIwQY
MBaAFCh18YWCPbxqgtEFs8oWB321cpN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDct
OTRlNWQ0OWNjNjI4LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDctOTRlNWQ0OWNjNjI4
LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwnY6ABj
iBzbknEVex7PJmsMH/LKaCLBcAbFopfbJ2GrHQl+bnFQiKDb1VITrJVDpim/cwzl
Em7LbAzw3i5oWfmJO4LJyZJrsWEAUZ35MITODuTvyxslehY8vYPa6TojCiFmJNvx
de0THp9se47/lgid8JjdSEYInkG+bE28p6UNGCVdTJO9RL9fRpE6HfJYkiYIPeba
B5g9f3IydJpCv7oOGmywYoRSD1YsMlyeayR6Vj5PBZZ2Q4PcTuJTv41tQsivOxO1
ADwsxjR/izOMqCry+ySDwehUPr3qyuHTg9T/e2trDAakO/M0GrLgiszD/H6Zuwe/
8R3iD+gLBuWCIA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:20 2025 by rpki-client on console-fra.rpki-client.org