Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
File: cqPGykNevb-W__pMXZjkYAgo9xI.mft (raw, json)
Hash identifier: 8TreboPMpjHitV0brWz/uRGw45Ymoqdvpluf52SES58=
Subject key identifier: 52:9F:5E:38:DE:78:54:B8:22:B3:F2:BE:BE:39:66:5F:4E:C1:E2:58
Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
Certificate issuer: /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Certificate serial: 0194BB295F48D2CD8834AB0297F881C5127B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
Manifest number: 0F6C
Signing time: Fri 31 Jan 2025 07:00:38 +0000
Manifest this update: Fri 31 Jan 2025 07:00:38 +0000
Manifest next update: Sat 01 Feb 2025 07:00:38 +0000
Files and hashes: 1: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (hash: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=)
2: cqPGykNevb-W__pMXZjkYAgo9xI.crl (hash: KRQQU0AqzK8lU4oq/8vw1MlCG1NUwjpoVoYVaqAMzZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:5f:48:d2:cd:88:34:ab:02:97:f8:81:c5:12:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Validity
Not Before: Jan 31 07:00:38 2025 GMT
Not After : Feb 1 07:00:38 2025 GMT
Subject: CN=529f5e38de7854b822b3f2bebe39665f4ec1e258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:40:55:b8:97:a7:76:a3:8c:c5:b1:b8:f4:
60:be:32:d7:73:a3:cd:0f:a3:fd:5d:7b:00:29:0e:
15:d1:9b:ea:e2:49:85:aa:ff:85:df:ea:e7:9d:8a:
46:92:6a:0e:0a:b2:ba:49:09:70:20:c2:0f:02:2a:
ab:99:60:21:65:81:3c:f8:5f:79:37:c3:68:e3:d2:
aa:db:b1:34:b0:8b:71:19:ec:5f:9f:89:9d:7c:74:
17:ee:d4:6d:64:6e:6e:91:bf:28:f2:85:39:16:b1:
4c:7a:b5:9f:6e:3d:e3:6d:1f:de:89:72:5c:8b:ce:
da:2d:db:f7:fb:4e:25:2e:69:d0:be:1a:c7:ed:c2:
88:c6:75:7a:65:fe:aa:04:d0:71:d7:6f:2b:43:a5:
80:b3:38:31:37:16:14:b8:4d:47:7d:d5:c8:d9:fe:
c1:d6:57:76:eb:87:cc:4d:e7:8a:89:51:e1:10:80:
9a:f1:bf:76:cc:d3:e7:5a:6f:b0:c8:dd:64:d5:8a:
ec:c0:a2:35:af:46:ab:14:08:22:74:85:4c:bd:a0:
ae:01:73:da:25:72:b8:c8:08:9e:e4:7d:28:9f:41:
c4:24:ce:b4:31:16:3c:1a:f4:24:4f:96:c7:79:78:
c1:22:e5:70:a5:ab:4e:3e:cc:98:f9:84:21:21:df:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9F:5E:38:DE:78:54:B8:22:B3:F2:BE:BE:39:66:5F:4E:C1:E2:58
X509v3 Authority Key Identifier:
keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b6:28:35:97:ad:c5:06:f2:b7:15:cc:4b:e9:4c:ab:ef:d3:
7d:81:b3:0c:f7:85:d8:fc:73:6d:9c:c2:b0:d1:09:5c:53:9c:
75:b3:bb:4a:46:e1:88:91:dc:ef:aa:b1:8c:2a:bb:8b:79:d3:
0d:7a:76:b7:d9:8f:96:c0:c7:2b:b8:42:eb:05:e5:63:74:4f:
bc:05:0e:87:5d:35:9a:1e:09:38:f8:0c:93:8b:6a:ce:df:d4:
04:72:d3:05:44:79:36:51:bc:15:1a:6b:89:23:f1:03:1b:e1:
60:20:f2:d4:33:d7:54:1a:e1:b9:13:e7:6e:58:6f:1e:7b:b5:
86:b2:41:b4:45:cf:51:b6:6f:99:fb:32:f9:be:d3:49:6e:02:
8d:37:81:06:fd:56:fb:b4:78:12:96:f8:5e:63:81:db:60:0e:
86:fc:72:14:18:e0:39:05:87:73:d0:17:08:fb:8d:43:4f:94:
04:c7:fa:d0:47:81:a2:b6:00:be:f3:eb:be:6b:b3:d0:8e:c3:
e6:e6:65:0e:0f:c2:f8:0a:9b:cf:75:21:fc:db:da:63:7c:51:
6a:34:b5:1d:cf:30:4d:92:bd:3e:0a:03:6f:e5:c4:65:a6:90:
77:b5:22:a1:85:a3:b3:d7:51:9d:52:15:00:e9:c8:21:31:6a:
ee:f2:97:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KV9I0s2INKsCl/iBxRJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYTNjNmNhNDM1ZWJkYmY5NmZmZmE0YzVkOThlNDYwMDgy
OGY3MTIwHhcNMjUwMTMxMDcwMDM4WhcNMjUwMjAxMDcwMDM4WjAzMTEwLwYDVQQD
Eyg1MjlmNWUzOGRlNzg1NGI4MjJiM2YyYmViZTM5NjY1ZjRlYzFlMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uxAVbiXp3ajjMWxuPRgvjLXc6PN
D6P9XXsAKQ4V0Zvq4kmFqv+F3+rnnYpGkmoOCrK6SQlwIMIPAiqrmWAhZYE8+F95
N8No49Kq27E0sItxGexfn4mdfHQX7tRtZG5ukb8o8oU5FrFMerWfbj3jbR/eiXJc
i87aLdv3+04lLmnQvhrH7cKIxnV6Zf6qBNBx128rQ6WAszgxNxYUuE1HfdXI2f7B
1ld264fMTeeKiVHhEICa8b92zNPnWm+wyN1k1YrswKI1r0arFAgidIVMvaCuAXPa
JXK4yAie5H0on0HEJM60MRY8GvQkT5bHeXjBIuVwpatOPsyY+YQhId85OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKfXjjeeFS4IrPyvr45Zl9OweJYMB8GA1UdIwQY
MBaAFHKjxspDXr2/lv/6TF2Y5GAIKPcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lZDE1OTQtMmIzZi00OTYyLWFjYWIt
Y2ViMjFiOGU4MzJiLzEvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9lZDE1OTQtMmIzZi00OTYyLWFjYWItY2ViMjFiOGU4MzJi
LzEvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7YoNZet
xQbytxXMS+lMq+/TfYGzDPeF2PxzbZzCsNEJXFOcdbO7SkbhiJHc76qxjCq7i3nT
DXp2t9mPlsDHK7hC6wXlY3RPvAUOh101mh4JOPgMk4tqzt/UBHLTBUR5NlG8FRpr
iSPxAxvhYCDy1DPXVBrhuRPnblhvHnu1hrJBtEXPUbZvmfsy+b7TSW4CjTeBBv1W
+7R4Epb4XmOB22AOhvxyFBjgOQWHc9AXCPuNQ0+UBMf60EeBorYAvvPrvmuz0I7D
5uZlDg/C+Aqbz3Uh/NvaY3xRajS1Hc8wTZK9PgoDb+XEZaaQd7UioYWjs9dRnVIV
AOnIITFq7vKXeQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:28 2025 by rpki-client on console-fra.rpki-client.org