Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.mft
File: Q12Kb-q5GaEkBwEeFSfnXOPESJw.mft (raw, json)
Hash identifier: Ur4B7gHbqBVJCDbfubnk+K4o+qznpSPZmqLZ4yqot8o=
Subject key identifier: 00:C3:7A:2B:AB:6D:33:D0:C7:36:33:BB:8A:05:4E:E5:29:5F:75:35
Authority key identifier: 43:5D:8A:6F:EA:B9:19:A1:24:07:01:1E:15:27:E7:5C:E3:C4:48:9C
Certificate issuer: /CN=435d8a6feab919a12407011e1527e75ce3c4489c
Certificate serial: 0194BABB90F514812CEF4CEBBB0D2BF35DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q12Kb-q5GaEkBwEeFSfnXOPESJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.mft
Manifest number: 0B10
Signing time: Fri 31 Jan 2025 05:00:41 +0000
Manifest this update: Fri 31 Jan 2025 05:00:41 +0000
Manifest next update: Sat 01 Feb 2025 05:00:41 +0000
Files and hashes: 1: Q12Kb-q5GaEkBwEeFSfnXOPESJw.crl (hash: ySi5UnqbFOM8itaFscf+WEXC9BOe/bMmcL8RZkU38zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q12Kb-q5GaEkBwEeFSfnXOPESJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:90:f5:14:81:2c:ef:4c:eb:bb:0d:2b:f3:5d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435d8a6feab919a12407011e1527e75ce3c4489c
Validity
Not Before: Jan 31 05:00:41 2025 GMT
Not After : Feb 1 05:00:41 2025 GMT
Subject: CN=00c37a2bab6d33d0c73633bb8a054ee5295f7535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:4c:23:31:c2:b7:1e:75:c8:04:78:90:1d:
74:bb:da:a5:34:bf:1c:67:f1:e2:8b:dd:a6:3e:c4:
9c:80:20:ac:21:e5:e8:90:9e:6b:fb:2a:f4:0b:d4:
d2:b1:e3:0a:5f:10:eb:45:fa:6c:9f:7c:0b:e2:0d:
6e:24:40:cf:7f:e3:68:4a:a6:88:02:da:40:c2:3a:
c9:be:ab:4e:de:2b:80:50:ce:16:d9:2c:99:16:8f:
fe:78:16:87:b3:b1:bb:3e:03:b0:70:c0:85:2d:69:
73:7e:a6:61:35:68:0e:5b:fe:77:ea:ad:58:21:56:
e4:50:5e:ed:f8:bc:d6:0b:db:d7:55:20:9d:0a:dc:
60:6e:e4:d3:aa:37:84:9a:d3:0a:9d:2d:80:f0:3c:
1e:86:02:fe:f0:20:b3:e2:4a:ab:e1:5a:cc:5e:cd:
7e:88:b0:61:71:1b:15:0d:26:da:da:e4:27:74:39:
2b:d2:b5:c2:7c:56:4b:7d:e2:4e:b4:0d:08:e6:75:
74:76:d7:2c:6e:90:e6:8e:fb:f0:3c:24:10:87:67:
63:22:ba:4a:90:b4:b2:23:ae:b3:00:aa:f0:d5:66:
3e:13:9e:06:f8:0a:4c:37:14:a6:90:17:d6:66:25:
0b:54:77:ce:6e:3f:72:19:bd:6d:cc:dc:4a:ca:af:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C3:7A:2B:AB:6D:33:D0:C7:36:33:BB:8A:05:4E:E5:29:5F:75:35
X509v3 Authority Key Identifier:
keyid:43:5D:8A:6F:EA:B9:19:A1:24:07:01:1E:15:27:E7:5C:E3:C4:48:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q12Kb-q5GaEkBwEeFSfnXOPESJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:46:bb:05:a1:c9:0d:17:34:c9:a3:c9:39:fb:0e:43:10:51:
f1:c5:b6:b1:cc:39:3f:be:e4:28:11:c1:e5:8c:33:a8:d3:8b:
5b:fe:37:0a:0e:ba:d9:c6:0b:26:2e:d9:32:f5:88:42:ff:46:
83:48:ed:e4:44:16:0c:ab:87:ed:26:75:e3:85:d4:4b:b3:10:
f7:61:6f:c1:69:cd:ae:51:f4:2d:b4:d5:a7:ed:a9:10:55:d8:
fc:76:64:48:d7:59:1e:12:6f:f4:ea:21:46:61:dd:55:94:64:
1c:a9:11:b5:ad:40:ef:46:41:a5:dc:df:2f:1f:ac:18:f1:1b:
83:69:cb:a4:24:f4:62:55:da:94:13:63:71:d5:2d:ec:b4:47:
60:95:6f:5a:7a:80:02:fb:a0:63:fc:d9:bf:c1:f6:e1:dd:b5:
3c:a6:c3:f5:96:41:f6:8d:c1:67:8f:ef:82:31:8b:cb:38:e5:
d6:90:4a:37:09:ae:39:11:8a:2d:5d:1f:0b:a0:e4:ba:cc:5e:
ad:32:f3:5c:61:3f:90:f1:0d:ea:98:c1:f3:e7:98:24:00:3b:
e7:f2:7b:0d:27:c4:45:d8:d4:28:fc:35:cb:2e:d8:f9:19:8c:
35:d9:8a:88:d6:15:3a:96:3a:c5:9d:df:70:c1:79:74:4c:5c:
db:16:84:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u5D1FIEs70zruw0r8127MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNWQ4YTZmZWFiOTE5YTEyNDA3MDExZTE1MjdlNzVjZTNj
NDQ4OWMwHhcNMjUwMTMxMDUwMDQxWhcNMjUwMjAxMDUwMDQxWjAzMTEwLwYDVQQD
EygwMGMzN2EyYmFiNmQzM2QwYzczNjMzYmI4YTA1NGVlNTI5NWY3NTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNpMIzHCtx51yAR4kB10u9qlNL8c
Z/Hii92mPsScgCCsIeXokJ5r+yr0C9TSseMKXxDrRfpsn3wL4g1uJEDPf+NoSqaI
AtpAwjrJvqtO3iuAUM4W2SyZFo/+eBaHs7G7PgOwcMCFLWlzfqZhNWgOW/536q1Y
IVbkUF7t+LzWC9vXVSCdCtxgbuTTqjeEmtMKnS2A8DwehgL+8CCz4kqr4VrMXs1+
iLBhcRsVDSba2uQndDkr0rXCfFZLfeJOtA0I5nV0dtcsbpDmjvvwPCQQh2djIrpK
kLSyI66zAKrw1WY+E54G+ApMNxSmkBfWZiULVHfObj9yGb1tzNxKyq+iVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADDeiurbTPQxzYzu4oFTuUpX3U1MB8GA1UdIwQY
MBaAFENdim/quRmhJAcBHhUn51zjxEicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTEyS2ItcTVHYUVrQndFZUZTZm5YT1BFU0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mYjdhZjQtZjFmYy00ODdhLWJjYTIt
MjI5NWViN2U4ZDlhLzEvUTEyS2ItcTVHYUVrQndFZUZTZm5YT1BFU0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mYjdhZjQtZjFmYy00ODdhLWJjYTItMjI5NWViN2U4ZDlh
LzEvUTEyS2ItcTVHYUVrQndFZUZTZm5YT1BFU0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUa7BaHJ
DRc0yaPJOfsOQxBR8cW2scw5P77kKBHB5YwzqNOLW/43Cg662cYLJi7ZMvWIQv9G
g0jt5EQWDKuH7SZ144XUS7MQ92FvwWnNrlH0LbTVp+2pEFXY/HZkSNdZHhJv9Ooh
RmHdVZRkHKkRta1A70ZBpdzfLx+sGPEbg2nLpCT0YlXalBNjcdUt7LRHYJVvWnqA
AvugY/zZv8H24d21PKbD9ZZB9o3BZ4/vgjGLyzjl1pBKNwmuORGKLV0fC6Dkusxe
rTLzXGE/kPEN6pjB8+eYJAA75/J7DSfERdjUKPw1yy7Y+RmMNdmKiNYVOpY6xZ3f
cMF5dExc2xaEtA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:10 2025 by rpki-client on console-fra.rpki-client.org