Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier: 1QPOXEj8jsRCltzB88pH6A4n5id5LQdHVQANKCLhMmY=
Subject key identifier: 17:40:22:9D:10:A9:A8:8C:12:6A:FE:37:7E:D8:B0:80:48:C1:45:2C
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 0194BB5FE3FC90F6C445996ABC7C7B1CCB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 08:00:10 +0000
Manifest this update: Fri 31 Jan 2025 08:00:10 +0000
Manifest next update: Sat 01 Feb 2025 08:00:10 +0000
Files and hashes: 1: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (hash: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=)
2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: GRfcntKW+3NP8dPVTO91tlyk6QMEGpqRrCvCDfZcHZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e3:fc:90:f6:c4:45:99:6a:bc:7c:7b:1c:cb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Jan 31 08:00:10 2025 GMT
Not After : Feb 1 08:00:10 2025 GMT
Subject: CN=1740229d10a9a88c126afe377ed8b08048c1452c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:52:ea:0d:c3:c5:fa:80:44:7f:7d:d3:43:3e:
04:85:03:1c:cf:dc:a5:a1:10:f8:2f:4f:da:e5:04:
3d:ef:30:53:a5:d1:a6:ee:fe:0c:53:38:58:2e:12:
1d:1e:ec:76:fd:85:b1:69:75:77:7a:5e:63:e6:88:
8b:4f:ee:fe:fb:48:c4:ae:db:2f:eb:c0:47:93:82:
a7:46:ed:56:e5:5c:08:d4:b0:e7:8b:19:0c:e0:53:
52:ae:db:cb:7d:0f:11:c4:23:38:61:be:df:3a:cf:
e6:6d:54:12:b6:81:40:67:03:31:be:05:cd:a3:2d:
8d:07:84:9c:11:cd:46:b9:6b:09:cb:7f:92:d8:39:
0b:7f:27:cd:6b:15:e0:2e:0b:c5:15:b0:18:ec:43:
ec:b8:dd:7d:0e:13:a8:c4:ff:48:fb:c1:61:5a:dd:
f0:9f:fd:22:f0:bf:0b:f1:91:53:57:c0:a8:9f:73:
86:69:13:51:3c:b8:4d:91:b4:6c:32:3c:74:0c:84:
88:d4:5a:46:67:73:e0:5a:70:af:6e:f2:b2:e3:37:
50:de:26:16:44:66:da:48:e5:e6:4b:b4:88:81:84:
f1:c1:ce:fd:b0:6c:29:3d:1c:13:0a:da:ae:ec:9f:
cc:08:ec:bb:fa:7d:c6:4c:a0:b9:36:19:b6:ea:91:
40:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:40:22:9D:10:A9:A8:8C:12:6A:FE:37:7E:D8:B0:80:48:C1:45:2C
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a9:8e:c6:5f:3f:f7:7c:19:d3:ea:50:43:7e:96:f2:78:46:
f3:cf:f6:45:7b:48:fb:e4:af:10:bb:06:8b:af:b3:5f:f3:97:
39:88:68:a6:56:27:a6:ad:e7:92:52:ec:2d:9c:4a:fd:96:af:
84:fd:16:fa:5d:18:2a:e9:de:f7:ba:29:11:58:52:69:f1:92:
65:74:3d:0d:f1:37:b8:61:e0:28:d6:74:7b:29:ac:54:58:3c:
b0:f7:e6:b8:6f:d8:0b:77:c2:6e:7f:22:b7:28:6d:26:e5:60:
ec:84:13:65:9f:98:7f:95:8b:3b:ab:99:95:08:2f:f6:86:5d:
67:f9:96:81:55:51:af:9b:92:80:6d:32:a9:58:69:4b:c8:7b:
d5:3a:7d:85:62:cb:1d:8f:18:89:44:9b:c2:7c:9c:39:77:a8:
4a:c3:e0:6e:84:ff:71:86:d7:41:aa:f5:cf:7a:cb:df:30:c7:
03:bf:51:d8:4d:95:7b:8f:20:64:55:40:fb:ee:d0:a9:1b:7e:
d0:40:10:6d:0f:44:86:d6:eb:3d:8d:81:b7:7b:bf:b4:1e:d0:
9f:90:da:92:88:cb:a7:fa:a8:45:82:33:f6:89:b4:a5:e5:f5:
a3:a7:0c:46:1b:25:7e:71:09:bb:fa:48:e6:4b:98:c0:52:7b:
fa:e2:63:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X+P8kPbERZlqvHx7HMseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MmIyNDQwYTdjN2EyZGZjZjJlNDIxNmRhOGEzYmRlNjhi
OWI4OTgwHhcNMjUwMTMxMDgwMDEwWhcNMjUwMjAxMDgwMDEwWjAzMTEwLwYDVQQD
EygxNzQwMjI5ZDEwYTlhODhjMTI2YWZlMzc3ZWQ4YjA4MDQ4YzE0NTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lLqDcPF+oBEf33TQz4EhQMcz9yl
oRD4L0/a5QQ97zBTpdGm7v4MUzhYLhIdHux2/YWxaXV3el5j5oiLT+7++0jErtsv
68BHk4KnRu1W5VwI1LDnixkM4FNSrtvLfQ8RxCM4Yb7fOs/mbVQStoFAZwMxvgXN
oy2NB4ScEc1GuWsJy3+S2DkLfyfNaxXgLgvFFbAY7EPsuN19DhOoxP9I+8FhWt3w
n/0i8L8L8ZFTV8Con3OGaRNRPLhNkbRsMjx0DISI1FpGZ3PgWnCvbvKy4zdQ3iYW
RGbaSOXmS7SIgYTxwc79sGwpPRwTCtqu7J/MCOy7+n3GTKC5Nhm26pFASwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdAIp0QqaiMEmr+N37YsIBIwUUsMB8GA1UdIwQY
MBaAFKkrJECnx6Lfzy5CFtqKO95oubiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDIt
ZjJjNjdlY2EzZTViLzEvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDItZjJjNjdlY2EzZTVi
LzEvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKmOxl8/
93wZ0+pQQ36W8nhG88/2RXtI++SvELsGi6+zX/OXOYhoplYnpq3nklLsLZxK/Zav
hP0W+l0YKune97opEVhSafGSZXQ9DfE3uGHgKNZ0eymsVFg8sPfmuG/YC3fCbn8i
tyhtJuVg7IQTZZ+Yf5WLO6uZlQgv9oZdZ/mWgVVRr5uSgG0yqVhpS8h71Tp9hWLL
HY8YiUSbwnycOXeoSsPgboT/cYbXQar1z3rL3zDHA79R2E2Ve48gZFVA++7QqRt+
0EAQbQ9EhtbrPY2Bt3u/tB7Qn5DakojLp/qoRYIz9om0peX1o6cMRhslfnEJu/pI
5kuYwFJ7+uJjvg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:10 2025 by rpki-client on console-fra.rpki-client.org