Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier: 8TAwaaIic0Ow0RCZt3W/OfkHwzSFpK2rXtH+jGM4tns=
Subject key identifier: 84:C4:3F:9D:4B:78:CA:20:77:1C:C2:E8:64:1B:13:F8:4C:B6:08:9E
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 0194BAF24D0451F00FCD7DADD9C717C64B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number: 041D
Signing time: Fri 31 Jan 2025 06:00:28 +0000
Manifest this update: Fri 31 Jan 2025 06:00:28 +0000
Manifest next update: Sat 01 Feb 2025 06:00:28 +0000
Files and hashes: 1: KCUlDmw6bWU3YbCORDEmbOGAZjo.roa (hash: Nc8m/cnvj+btoZ7tciRXRAK9ytP0BPBAiNr2VEuvtEs=)
2: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: UeTjP0Jg5bFyxdualzv8YKjJFPULf9Wg1VtnYDu860o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:4d:04:51:f0:0f:cd:7d:ad:d9:c7:17:c6:4b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Jan 31 06:00:28 2025 GMT
Not After : Feb 1 06:00:28 2025 GMT
Subject: CN=84c43f9d4b78ca20771cc2e8641b13f84cb6089e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:1d:59:4d:c6:a9:59:94:60:e6:4e:87:6a:
9e:fd:46:3d:08:76:04:37:eb:0a:d6:3e:15:0d:45:
68:6a:f9:3e:3a:2a:93:ee:7d:6e:cf:9a:61:8a:5d:
23:5a:4b:a4:39:5c:20:a5:e4:d0:3b:8a:e4:8d:9a:
e0:cd:30:71:ce:dd:d2:b9:97:c4:13:d5:6e:a0:67:
c5:a0:49:ac:65:1a:58:17:aa:c0:d0:55:a9:22:0a:
01:3e:d2:f8:21:59:d6:56:63:14:5c:32:11:9e:3f:
0b:fe:28:6d:16:38:73:d5:0a:3e:b4:89:46:59:3c:
3c:85:07:19:48:1c:4c:c0:7c:1b:bd:cc:4d:8c:de:
d3:33:c9:6a:8a:49:4c:ba:d1:72:95:02:9d:56:11:
c4:91:cb:81:c7:f0:92:bb:ed:85:a1:0c:c5:bb:60:
06:b0:5b:34:11:49:74:d9:15:52:cb:49:2c:63:22:
8d:dd:6b:21:d3:24:ce:db:fe:b1:75:6b:a9:65:b1:
01:1a:57:8c:90:d2:a7:78:de:57:5b:e5:2a:20:8c:
5f:cb:2b:98:af:af:1e:6c:00:05:77:a4:88:75:0d:
7e:54:08:b1:13:5f:e4:65:07:7e:10:07:88:d0:23:
74:8f:49:39:69:c8:9a:5f:44:b3:3f:e1:73:73:44:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C4:3F:9D:4B:78:CA:20:77:1C:C2:E8:64:1B:13:F8:4C:B6:08:9E
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e4:07:13:ac:6c:de:5f:fb:8c:a2:2e:56:52:7f:74:0d:e8:
ae:74:4a:49:16:46:a6:3e:5b:5e:75:3f:ab:c5:7a:07:4a:c1:
c5:d9:ef:c3:cc:57:bd:a0:7b:be:6d:99:e5:41:58:64:3a:c5:
76:4e:46:0b:58:de:51:84:5b:eb:bc:42:06:17:61:f9:9c:c7:
b0:45:ac:74:c5:24:eb:1b:d2:9f:3f:d6:ba:92:b9:6c:b4:b4:
a6:71:33:6f:49:c6:97:1e:39:a5:ac:e9:b9:a3:7c:29:7e:55:
e9:92:46:26:eb:8f:fa:82:59:9a:d4:45:25:57:bf:a6:8e:59:
b0:f5:6e:d9:b2:a0:eb:8e:21:6a:bb:da:af:ae:ba:e3:a2:6b:
5c:98:5c:87:3e:49:f6:5e:3e:53:55:61:3a:be:12:d7:32:d3:
48:e6:ee:1b:91:82:b3:4f:9a:fa:0e:df:ae:ce:f5:47:58:21:
64:1c:c6:af:2f:1e:6e:62:c8:41:56:87:0c:38:d3:33:c0:c3:
d3:89:f8:9a:f9:33:b2:f3:1a:30:90:f0:cd:10:1c:56:18:5a:
ce:82:8b:48:84:e8:49:dd:e2:7a:cf:4e:3c:71:31:04:96:e7:
7a:c6:bb:d6:f2:28:4a:8d:67:5c:99:6f:58:52:fc:30:3c:b1:
c3:57:a5:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68k0EUfAPzX2t2ccXxktgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWRlZDBiODNmYTRlMzFjZTBhMDg0MGViNDI5YmE4YTlm
MThlMzkwHhcNMjUwMTMxMDYwMDI4WhcNMjUwMjAxMDYwMDI4WjAzMTEwLwYDVQQD
Eyg4NGM0M2Y5ZDRiNzhjYTIwNzcxY2MyZTg2NDFiMTNmODRjYjYwODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUwdWU3GqVmUYOZOh2qe/UY9CHYE
N+sK1j4VDUVoavk+OiqT7n1uz5phil0jWkukOVwgpeTQO4rkjZrgzTBxzt3SuZfE
E9VuoGfFoEmsZRpYF6rA0FWpIgoBPtL4IVnWVmMUXDIRnj8L/ihtFjhz1Qo+tIlG
WTw8hQcZSBxMwHwbvcxNjN7TM8lqiklMutFylQKdVhHEkcuBx/CSu+2FoQzFu2AG
sFs0EUl02RVSy0ksYyKN3Wsh0yTO2/6xdWupZbEBGleMkNKneN5XW+UqIIxfyyuY
r68ebAAFd6SIdQ1+VAixE1/kZQd+EAeI0CN0j0k5aciaX0SzP+Fzc0TGdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITEP51LeMogdxzC6GQbE/hMtgieMB8GA1UdIwQY
MBaAFI6t7QuD+k4xzgoIQOtCm6ip8Y45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanEzdEM0UDZUakhPQ2doQTYwS2JxS254amprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMjJjMDgtNTZhNy00MmQ0LWJlYTUt
ODc3ZGRhMTkyMzc5LzEvanEzdEM0UDZUakhPQ2doQTYwS2JxS254amprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jMjJjMDgtNTZhNy00MmQ0LWJlYTUtODc3ZGRhMTkyMzc5
LzEvanEzdEM0UDZUakhPQ2doQTYwS2JxS254amprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuQHE6xs
3l/7jKIuVlJ/dA3ornRKSRZGpj5bXnU/q8V6B0rBxdnvw8xXvaB7vm2Z5UFYZDrF
dk5GC1jeUYRb67xCBhdh+ZzHsEWsdMUk6xvSnz/WupK5bLS0pnEzb0nGlx45pazp
uaN8KX5V6ZJGJuuP+oJZmtRFJVe/po5ZsPVu2bKg644harvar66646JrXJhchz5J
9l4+U1VhOr4S1zLTSObuG5GCs0+a+g7frs71R1ghZBzGry8ebmLIQVaHDDjTM8DD
04n4mvkzsvMaMJDwzRAcVhhazoKLSIToSd3ies9OPHExBJbnesa71vIoSo1nXJlv
WFL8MDyxw1elxQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:29 2025 by rpki-client on console-fra.rpki-client.org