Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json)
Hash identifier: uSDEV/TVnTJJKTVYZNLAHeh4Y/F5RIfZxbmpsF4cKKI=
Subject key identifier: 9E:9F:64:56:0D:39:DB:1B:66:E8:5E:C2:07:5E:D1:72:8E:06:0E:17
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 0194BAF262F517E8A82EF4BC462ABA4E1E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 06:00:34 +0000
Manifest this update: Fri 31 Jan 2025 06:00:34 +0000
Manifest next update: Sat 01 Feb 2025 06:00:34 +0000
Files and hashes: 1: 5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa (hash: nWQ6LzHmMcNUWFVJjD8F6A2IBDinnQ/3GkZ+tOcMhcc=)
2: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: TLK0+o0sTWEHWhph37AHN3b97fvbiaKwxvrrYSzhlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:62:f5:17:e8:a8:2e:f4:bc:46:2a:ba:4e:1e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Jan 31 06:00:34 2025 GMT
Not After : Feb 1 06:00:34 2025 GMT
Subject: CN=9e9f64560d39db1b66e85ec2075ed1728e060e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:54:e9:cc:5d:b5:68:fc:8e:75:32:6a:4c:
89:8d:32:b2:6c:8d:b8:9d:d1:24:43:c8:87:55:25:
da:d5:8b:6a:a2:39:d0:d9:3f:54:63:db:1c:c7:9d:
48:fc:c2:0e:06:18:8d:11:a9:f4:6e:14:23:1b:89:
1c:5e:3e:20:55:8b:4c:04:e1:36:5b:0a:46:84:d3:
89:02:96:83:71:50:93:ef:f2:1a:65:0e:1a:be:e4:
96:7e:c4:d5:fd:2b:03:9c:b3:e9:60:52:b7:22:f6:
1e:34:28:3a:59:ab:bc:91:c5:fb:38:4e:69:84:0c:
35:46:03:c4:32:a1:7d:c5:aa:13:e5:fd:96:94:c2:
13:13:66:4a:09:59:28:90:54:04:ad:34:05:67:78:
0a:38:f8:95:f7:2e:ce:d7:bc:97:a6:56:44:70:61:
a4:35:73:88:aa:ba:90:fb:f3:e2:f0:18:74:90:3b:
00:72:91:70:70:7c:50:c5:40:d0:02:d3:0a:99:2c:
96:41:8f:19:60:2e:79:64:12:ed:32:7a:aa:b6:58:
ed:a0:df:82:d9:0c:bf:bf:82:32:2e:16:cd:72:91:
e9:82:4a:4e:7e:07:ca:e9:f5:c6:e2:c1:c7:d0:1d:
fb:80:50:b7:53:5d:37:c4:07:db:85:31:05:5f:bf:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9F:64:56:0D:39:DB:1B:66:E8:5E:C2:07:5E:D1:72:8E:06:0E:17
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a7:af:76:2c:6c:ee:1d:e9:bd:fc:b9:b5:91:54:f3:e0:a9:
76:89:82:6e:c2:0f:a9:da:f1:0c:d7:46:2c:62:ba:33:4d:64:
40:6d:19:55:9f:17:ee:f3:aa:52:57:29:25:9b:3e:1b:63:c5:
2c:a4:2a:30:54:ee:5f:1f:1a:ec:0d:c9:9b:f0:83:1d:33:05:
40:1e:30:7b:44:6b:9f:62:a8:da:37:2c:da:7c:53:6e:30:c3:
36:3e:f9:4f:fe:ac:4b:53:cc:93:55:c8:58:cc:6b:a7:8d:1c:
3d:21:4c:ac:ae:b0:3d:91:d3:fa:6b:0e:93:c0:aa:7d:67:8b:
e9:cb:27:93:ef:2b:d7:f5:85:ea:63:6b:03:56:fe:7f:80:2b:
95:fe:e4:5b:39:7f:fd:09:ab:70:03:2c:50:d0:24:5e:a1:1b:
6f:e0:25:a5:4e:9b:92:39:3f:a0:a5:17:96:55:21:62:f4:bc:
e6:0b:ec:bc:6b:fd:fb:f0:c7:8d:c3:e6:d1:cc:8b:5c:38:19:
88:7b:77:52:ef:4f:fd:0d:7e:98:15:d9:91:64:9d:af:8c:e5:
cf:aa:1e:74:02:bf:22:93:fc:c5:9d:54:7c:76:3f:d6:cb:ca:
8e:54:e9:d6:fc:4e:55:4a:b7:d1:da:92:59:25:0b:48:5e:b6:
36:6f:4e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68mL1F+ioLvS8Riq6Th46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMGMyN2Y4NTU4MWUyZTdiZGUwYzk4ZmJkNTRiZTFkNDk2
NzA1MTcwHhcNMjUwMTMxMDYwMDM0WhcNMjUwMjAxMDYwMDM0WjAzMTEwLwYDVQQD
Eyg5ZTlmNjQ1NjBkMzlkYjFiNjZlODVlYzIwNzVlZDE3MjhlMDYwZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCtU6cxdtWj8jnUyakyJjTKybI24
ndEkQ8iHVSXa1YtqojnQ2T9UY9scx51I/MIOBhiNEan0bhQjG4kcXj4gVYtMBOE2
WwpGhNOJApaDcVCT7/IaZQ4avuSWfsTV/SsDnLPpYFK3IvYeNCg6Wau8kcX7OE5p
hAw1RgPEMqF9xaoT5f2WlMITE2ZKCVkokFQErTQFZ3gKOPiV9y7O17yXplZEcGGk
NXOIqrqQ+/Pi8Bh0kDsAcpFwcHxQxUDQAtMKmSyWQY8ZYC55ZBLtMnqqtljtoN+C
2Qy/v4IyLhbNcpHpgkpOfgfK6fXG4sHH0B37gFC3U103xAfbhTEFX79d1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6fZFYNOdsbZuhewgde0XKOBg4XMB8GA1UdIwQY
MBaAFF0MJ/hVgeLnveDJj71Uvh1JZwUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mNzg3YTktNTc2My00YzM2LThjNzMt
MzQxZjUxNzNmY2Y3LzEvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mNzg3YTktNTc2My00YzM2LThjNzMtMzQxZjUxNzNmY2Y3
LzEvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaevdixs
7h3pvfy5tZFU8+CpdomCbsIPqdrxDNdGLGK6M01kQG0ZVZ8X7vOqUlcpJZs+G2PF
LKQqMFTuXx8a7A3Jm/CDHTMFQB4we0Rrn2Ko2jcs2nxTbjDDNj75T/6sS1PMk1XI
WMxrp40cPSFMrK6wPZHT+msOk8CqfWeL6csnk+8r1/WF6mNrA1b+f4Arlf7kWzl/
/QmrcAMsUNAkXqEbb+AlpU6bkjk/oKUXllUhYvS85gvsvGv9+/DHjcPm0cyLXDgZ
iHt3Uu9P/Q1+mBXZkWSdr4zlz6oedAK/IpP8xZ1UfHY/1svKjlTp1vxOVUq30dqS
WSULSF62Nm9Oew==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:46 2025 by rpki-client on console-fra.rpki-client.org