Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
File: qI1YyAfJSdssH18nPx78TfGlxVM.mft (raw, json)
Hash identifier: vstbmXz0a4y/7zgqKiWt80zvv70H6jtgy5KlQstr0gY=
Subject key identifier: 79:0B:8A:B7:1A:02:A1:FD:33:FE:A2:4E:87:26:D5:00:29:73:73:08
Authority key identifier: A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
Certificate issuer: /CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Certificate serial: 0194BB295C9EDBBD271776C7018BBF34CFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
Manifest number: 058E
Signing time: Fri 31 Jan 2025 07:00:37 +0000
Manifest this update: Fri 31 Jan 2025 07:00:37 +0000
Manifest next update: Sat 01 Feb 2025 07:00:37 +0000
Files and hashes: 1: qI1YyAfJSdssH18nPx78TfGlxVM.crl (hash: ztLrjKAZwoabLTDc9R/f2GUk7eb9mnBj9xUJ8MfFwLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:5c:9e:db:bd:27:17:76:c7:01:8b:bf:34:cf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Validity
Not Before: Jan 31 07:00:37 2025 GMT
Not After : Feb 1 07:00:37 2025 GMT
Subject: CN=790b8ab71a02a1fd33fea24e8726d50029737308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:5a:5b:78:84:da:8f:f3:8f:98:33:16:b8:
43:98:8b:eb:1d:56:b8:84:37:a7:08:09:79:9b:b5:
4c:53:90:2b:10:04:16:6d:02:0f:b5:42:2c:bc:5b:
e2:8d:c8:10:74:90:76:78:cb:06:90:76:5e:12:5f:
46:1d:95:1a:1b:a4:aa:b5:7d:5b:e6:76:13:b2:e1:
ff:a0:b1:dd:8c:53:fc:2f:bd:39:1e:36:99:fe:92:
d5:58:7a:41:ab:6b:a7:d7:d5:db:7b:3c:64:8a:b7:
29:96:0c:05:a2:ce:c9:6a:d1:31:a6:71:76:60:2c:
50:ec:75:49:34:a3:51:8f:f9:9f:dc:76:37:8a:08:
b0:9f:6c:e3:d3:0e:79:cd:34:c1:6c:21:ae:82:02:
66:6c:78:8f:d0:36:55:21:8e:6b:01:52:de:71:c9:
f5:59:58:2d:e8:67:b8:b8:93:fb:2c:e5:ee:b3:53:
92:65:fa:bc:0d:c3:f1:55:e0:72:21:79:2a:3e:b9:
97:36:26:b2:0d:63:bf:50:4a:ac:35:47:4d:45:06:
b1:52:3d:5c:2e:1c:ce:3b:2d:83:3b:5b:2c:80:db:
f0:0e:3e:ae:e8:06:21:2f:77:52:d5:8a:1c:4d:7f:
b0:90:b6:9a:17:92:61:ba:68:cc:01:d0:d5:a7:a5:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0B:8A:B7:1A:02:A1:FD:33:FE:A2:4E:87:26:D5:00:29:73:73:08
X509v3 Authority Key Identifier:
keyid:A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:83:27:27:79:0c:04:8c:7b:7d:a9:95:52:6b:4f:3a:ee:16:
88:cf:b6:9c:5b:c7:cb:24:75:d2:d3:af:31:4d:9c:3c:4f:14:
4b:b1:36:7e:84:03:fd:c3:c0:88:ce:9f:6e:90:43:01:38:6c:
ba:f1:9f:c4:ec:56:0d:e2:a9:2a:fd:d2:59:72:3b:44:bb:3c:
d8:72:1a:65:5e:aa:6f:8e:8b:0b:f1:85:66:bd:0a:3f:21:42:
fa:f3:1a:ef:cc:34:4f:9a:ec:6e:68:79:03:77:7e:6b:1f:8f:
5e:d9:1e:af:79:cd:1a:31:26:fc:16:b2:0d:53:e6:38:2b:52:
56:09:ab:52:dd:35:48:ff:67:55:e6:99:ad:86:38:65:15:69:
61:fa:39:a1:b3:44:ca:f0:29:53:6b:11:da:e5:d0:b5:c0:64:
71:51:6d:1b:04:ab:48:77:b9:20:12:79:be:7a:52:2c:36:05:
e3:b3:de:15:ac:77:ad:d1:80:1a:13:d5:38:f1:1e:f5:8f:b8:
f4:98:5d:1f:9c:d7:7a:ab:f2:48:08:91:24:ef:71:f9:81:ba:
5b:0f:20:45:32:30:46:0a:22:72:27:eb:f5:66:cd:ab:e8:23:
90:63:fc:67:e9:7f:f7:7b:14:85:91:aa:a7:ab:81:a8:fc:03:
72:bb:2f:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KVye270nF3bHAYu/NM/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OGQ1OGM4MDdjOTQ5ZGIyYzFmNWYyNzNmMWVmYzRkZjFh
NWM1NTMwHhcNMjUwMTMxMDcwMDM3WhcNMjUwMjAxMDcwMDM3WjAzMTEwLwYDVQQD
Eyg3OTBiOGFiNzFhMDJhMWZkMzNmZWEyNGU4NzI2ZDUwMDI5NzM3MzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIdaW3iE2o/zj5gzFrhDmIvrHVa4
hDenCAl5m7VMU5ArEAQWbQIPtUIsvFvijcgQdJB2eMsGkHZeEl9GHZUaG6SqtX1b
5nYTsuH/oLHdjFP8L705HjaZ/pLVWHpBq2un19XbezxkircplgwFos7JatExpnF2
YCxQ7HVJNKNRj/mf3HY3igiwn2zj0w55zTTBbCGuggJmbHiP0DZVIY5rAVLeccn1
WVgt6Ge4uJP7LOXus1OSZfq8DcPxVeByIXkqPrmXNiayDWO/UEqsNUdNRQaxUj1c
LhzOOy2DO1ssgNvwDj6u6AYhL3dS1YocTX+wkLaaF5JhumjMAdDVp6WciwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkLircaAqH9M/6iTocm1QApc3MIMB8GA1UdIwQY
MBaAFKiNWMgHyUnbLB9fJz8e/E3xpcVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYt
NmMyNGIwMmEwMjJkLzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYtNmMyNGIwMmEwMjJk
LzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIMnJ3kM
BIx7famVUmtPOu4WiM+2nFvHyyR10tOvMU2cPE8US7E2foQD/cPAiM6fbpBDAThs
uvGfxOxWDeKpKv3SWXI7RLs82HIaZV6qb46LC/GFZr0KPyFC+vMa78w0T5rsbmh5
A3d+ax+PXtker3nNGjEm/BayDVPmOCtSVgmrUt01SP9nVeaZrYY4ZRVpYfo5obNE
yvApU2sR2uXQtcBkcVFtGwSrSHe5IBJ5vnpSLDYF47PeFax3rdGAGhPVOPEe9Y+4
9JhdH5zXeqvySAiRJO9x+YG6Ww8gRTIwRgoicifr9WbNq+gjkGP8Z+l/93sUhZGq
p6uBqPwDcrsvDw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:22 2025 by rpki-client on console-fra.rpki-client.org