Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
File: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft (raw, json)
Hash identifier: eLbFRw4pK5KRZYla9KN9bfo7LXSHyQNL3wk7FUKGAjE=
Subject key identifier: B5:78:67:8C:2D:2A:4D:3D:8D:94:22:FB:91:3B:11:86:3C:CE:4C:76
Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
Certificate issuer: /CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Certificate serial: 0194BB970E847C12B4C229D608108749F209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 09:00:26 +0000
Manifest this update: Fri 31 Jan 2025 09:00:26 +0000
Manifest next update: Sat 01 Feb 2025 09:00:26 +0000
Files and hashes: 1: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl (hash: IRvevnRW6assSqYDZKS0AVEGpzuxLOLxF8AEgncpG0c=)
2: iZXergsmx3c-YFSPwK1duaC7zXE.roa (hash: ux75uK3r8KWiMZRMZNyHuR7X45YAulKv87yeHOUi7Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:0e:84:7c:12:b4:c2:29:d6:08:10:87:49:f2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Validity
Not Before: Jan 31 09:00:26 2025 GMT
Not After : Feb 1 09:00:26 2025 GMT
Subject: CN=b578678c2d2a4d3d8d9422fb913b11863cce4c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:e4:2e:8d:12:5c:4a:cf:da:6d:a6:8b:ba:
cb:bb:9b:06:b6:ab:7d:e0:1b:8d:7e:e3:04:a5:74:
6f:bd:bf:ce:d9:c9:b6:eb:d0:1a:05:9a:70:99:9e:
3d:1a:17:08:1b:da:f1:e6:fd:22:59:30:ad:cc:a7:
f6:7a:5c:f9:fc:96:fc:49:c1:64:92:96:c5:27:53:
d2:56:7b:d1:91:67:a5:e2:01:37:0c:b0:8c:02:68:
13:ee:25:a1:86:70:b4:62:d8:ea:07:c2:b7:1c:e3:
0e:db:27:01:d2:b6:3a:4d:c5:c1:ab:98:bb:fa:6f:
48:3f:78:b3:3c:e2:2d:8f:b2:c2:ff:77:76:12:16:
9f:e0:59:6c:da:1d:a5:2d:ad:3b:fe:9b:f6:92:a2:
a5:c3:90:5e:93:f2:58:81:b8:20:4a:be:be:af:4c:
cd:73:c4:94:d4:90:91:45:08:92:a7:21:1f:5b:23:
5a:b3:13:c6:0a:51:a4:00:af:66:cf:58:c8:f6:ef:
ca:2f:48:a3:72:02:01:28:cf:28:3f:5a:2f:16:dc:
e1:a2:2d:fe:ca:0f:49:22:da:cd:d0:ed:26:c7:17:
ef:57:a7:b9:87:df:ad:61:68:c5:75:ff:e3:45:90:
5d:6f:fe:4c:8f:ea:f4:1d:4c:89:bb:e4:d5:3b:02:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:78:67:8C:2D:2A:4D:3D:8D:94:22:FB:91:3B:11:86:3C:CE:4C:76
X509v3 Authority Key Identifier:
keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0c:15:e0:3c:2d:68:4a:09:d1:0c:6d:1f:5f:56:85:56:1b:
fc:e9:1a:64:f2:02:a5:06:7b:17:00:e3:13:9d:5a:b0:cc:7d:
0f:11:0c:e7:9a:7a:c8:e4:28:0a:5e:a6:5a:00:52:1f:a7:bd:
1c:d3:ee:15:28:81:3d:b7:09:18:8c:a9:93:70:72:00:33:69:
bc:15:bf:80:8d:31:61:ad:2d:e9:03:a8:f6:ff:d4:47:53:36:
8b:c7:af:bf:b2:b6:b7:14:2f:83:2b:2d:b2:43:ad:cc:3d:cd:
f5:fe:26:40:73:2b:6d:3f:7d:7a:a7:86:ad:aa:df:63:c8:28:
7a:7b:0b:2f:e5:1c:95:bb:13:4f:df:92:0e:48:a2:1c:29:a0:
75:0c:8c:eb:07:28:79:6e:f5:f5:12:4b:a6:40:da:48:c8:3c:
00:8b:b5:48:d9:40:1e:c0:02:0b:22:c5:bc:b5:f3:ca:c9:78:
77:93:d8:38:00:d6:ac:c5:a2:6a:8d:14:47:15:f4:bd:5c:73:
0a:dd:bf:c2:24:c5:31:63:b3:bf:a3:ca:46:d0:c0:1b:6c:9e:
b7:f9:cc:87:11:11:29:68:cf:5e:58:b2:82:b8:c4:7b:76:ba:
d1:ba:fa:97:c9:38:61:59:9d:67:b4:b1:36:4e:4a:a3:a8:d3:
df:67:b6:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lw6EfBK0winWCBCHSfIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZDQxMjk1M2FjMDZhN2M1MmNiMjY3OTZmODgwNmIxYmI4
NTk2MTcwHhcNMjUwMTMxMDkwMDI2WhcNMjUwMjAxMDkwMDI2WjAzMTEwLwYDVQQD
EyhiNTc4Njc4YzJkMmE0ZDNkOGQ5NDIyZmI5MTNiMTE4NjNjY2U0Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAvkLo0SXErP2m2mi7rLu5sGtqt9
4BuNfuMEpXRvvb/O2cm269AaBZpwmZ49GhcIG9rx5v0iWTCtzKf2elz5/Jb8ScFk
kpbFJ1PSVnvRkWel4gE3DLCMAmgT7iWhhnC0YtjqB8K3HOMO2ycB0rY6TcXBq5i7
+m9IP3izPOItj7LC/3d2Ehaf4Fls2h2lLa07/pv2kqKlw5Bek/JYgbggSr6+r0zN
c8SU1JCRRQiSpyEfWyNasxPGClGkAK9mz1jI9u/KL0ijcgIBKM8oP1ovFtzhoi3+
yg9JItrN0O0mxxfvV6e5h9+tYWjFdf/jRZBdb/5Mj+r0HUyJu+TVOwL0sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLV4Z4wtKk09jZQi+5E7EYY8zkx2MB8GA1UdIwQY
MBaAFPXUEpU6wGp8UssmeW+IBrG7hZYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kOGU2NGQtOWQ2Yy00MTQ5LWE2OWEt
NzlkNTJkYzY2OTI2LzEvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kOGU2NGQtOWQ2Yy00MTQ5LWE2OWEtNzlkNTJkYzY2OTI2
LzEvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgwV4Dwt
aEoJ0QxtH19WhVYb/OkaZPICpQZ7FwDjE51asMx9DxEM55p6yOQoCl6mWgBSH6e9
HNPuFSiBPbcJGIypk3ByADNpvBW/gI0xYa0t6QOo9v/UR1M2i8evv7K2txQvgyst
skOtzD3N9f4mQHMrbT99eqeGrarfY8goensLL+UclbsTT9+SDkiiHCmgdQyM6wco
eW719RJLpkDaSMg8AIu1SNlAHsACCyLFvLXzysl4d5PYOADWrMWiao0URxX0vVxz
Ct2/wiTFMWOzv6PKRtDAG2yet/nMhxERKWjPXliygrjEe3a60br6l8k4YVmdZ7Sx
Nk5Ko6jT32e2EQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:24 2025 by rpki-client on console-fra.rpki-client.org