Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File: qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier: r20eundmaCDtCjoTB9VPGq0gF457oahZBmp+TEBlYnA=
Subject key identifier: AF:EF:1C:FA:97:A4:5D:A7:40:28:77:2E:09:65:8D:2A:FF:1B:17:4B
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 0194BABB242C4F1975473E78FB238CC0666E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number: 0FC6
Signing time: Fri 31 Jan 2025 05:00:14 +0000
Manifest this update: Fri 31 Jan 2025 05:00:14 +0000
Manifest next update: Sat 01 Feb 2025 05:00:14 +0000
Files and hashes: 1: Jo7QZBDB32wXW0Iw1K7QdXNowZk.roa (hash: K7AhFGZtd/rNskeYTg//KKyYm9N8IOSqZd1eL/nYFI0=)
2: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: cjdBejCE8hCMGQZINrCaZue8xCMniIpLmldNp2lf1oY=)
3: s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa (hash: oInMskbU1ysq45NZWBKPFPJeOmbD2WauFvK9W3eBwaY=)
4: vFfYVEKCcc2PyT6NhaZHTqsCyRc.roa (hash: IviSD1XdrOD9s0OcxHYtTVilTBOr8uyUO7SjAFCSO3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:24:2c:4f:19:75:47:3e:78:fb:23:8c:c0:66:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Jan 31 05:00:14 2025 GMT
Not After : Feb 1 05:00:14 2025 GMT
Subject: CN=afef1cfa97a45da74028772e09658d2aff1b174b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ee:f7:68:f7:39:9b:71:53:1a:3b:ef:aa:44:
2a:a1:f9:82:e3:8c:f0:84:7d:20:42:f4:24:50:d2:
34:32:dd:2f:0e:aa:49:5b:ba:d8:fa:39:61:9d:8c:
d8:55:07:a8:f6:66:47:69:00:57:f2:c6:11:92:fd:
62:2e:1f:2a:81:f9:35:de:3b:c7:4d:2e:ba:03:c9:
6b:c8:85:b4:0b:e0:b8:56:fa:29:50:67:db:f0:49:
b5:c4:5d:fd:6a:e4:8c:f9:9f:a9:59:b1:62:71:40:
e0:69:d6:ba:4d:1b:0a:49:64:df:14:4a:a3:7d:10:
84:4f:6f:31:80:7d:88:c6:1e:c0:0c:78:95:61:bd:
52:cd:b5:a7:53:54:2e:94:a5:78:37:07:8b:08:ea:
fc:96:66:44:94:e5:94:ce:53:40:0a:b2:71:54:a9:
b6:ef:e0:ed:02:71:33:47:44:31:2b:1f:24:98:cf:
68:62:51:60:bf:09:13:51:9a:ef:98:1a:de:4f:54:
3f:62:46:6b:9f:be:d1:92:b2:28:05:1d:b1:16:ab:
2f:a1:e5:c3:63:36:89:9f:26:e6:2e:30:6e:bc:6e:
b8:ac:e7:9d:01:08:70:42:3d:5d:63:da:b9:4d:63:
c8:49:24:b6:e8:da:d5:93:4d:fb:74:5f:73:c9:ff:
76:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EF:1C:FA:97:A4:5D:A7:40:28:77:2E:09:65:8D:2A:FF:1B:17:4B
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e6:f2:6a:e6:44:c9:33:90:ff:1a:f5:d5:ed:e3:fc:eb:03:
0e:fc:3f:67:96:f2:9a:5c:28:9e:a1:22:96:b6:2e:c7:99:e8:
11:b6:43:31:ff:e4:d9:ee:9d:41:b2:d0:09:cc:00:44:9b:00:
15:f1:b5:b3:a0:37:0d:b0:c9:1f:6d:31:f8:71:87:82:2b:25:
e4:2c:93:56:aa:76:0f:18:d2:ba:c1:c2:cb:a5:b3:09:13:d3:
77:c2:8a:f7:14:4b:77:24:d2:aa:4d:49:38:1c:36:da:36:d2:
73:46:ec:c8:59:05:c5:b4:08:79:4b:8a:86:24:a3:d6:bc:1d:
b7:7d:2d:6a:86:3d:fb:f1:e7:9d:d8:4d:22:3b:b6:89:8c:4d:
be:75:63:fe:8d:07:fa:14:06:56:07:3c:62:74:74:5d:6a:76:
df:16:de:9c:4f:5d:7e:c2:7e:bc:f0:2a:f7:26:a4:8e:7a:c6:
23:05:d7:9a:a5:0c:83:57:99:fb:08:a8:ff:d2:78:fc:ee:2a:
b2:12:89:cc:2a:02:55:77:58:a6:9d:ad:68:31:4f:b8:4b:e5:
82:c2:51:dd:dd:7c:5a:3f:b1:ca:d7:28:9d:d6:d9:42:9d:96:
11:0b:c7:53:df:23:90:10:48:96:87:0f:dc:56:8c:11:e9:43:
52:d5:ed:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uyQsTxl1Rz54+yOMwGZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Y2M0NGQ3ZjFkMGRjMGE1YWJmMjc3NjQ5NWI2MWRlNDgx
OTkyNWYwHhcNMjUwMTMxMDUwMDE0WhcNMjUwMjAxMDUwMDE0WjAzMTEwLwYDVQQD
EyhhZmVmMWNmYTk3YTQ1ZGE3NDAyODc3MmUwOTY1OGQyYWZmMWIxNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u73aPc5m3FTGjvvqkQqofmC44zw
hH0gQvQkUNI0Mt0vDqpJW7rY+jlhnYzYVQeo9mZHaQBX8sYRkv1iLh8qgfk13jvH
TS66A8lryIW0C+C4VvopUGfb8Em1xF39auSM+Z+pWbFicUDgada6TRsKSWTfFEqj
fRCET28xgH2Ixh7ADHiVYb1SzbWnU1QulKV4NweLCOr8lmZElOWUzlNACrJxVKm2
7+DtAnEzR0QxKx8kmM9oYlFgvwkTUZrvmBreT1Q/YkZrn77RkrIoBR2xFqsvoeXD
YzaJnybmLjBuvG64rOedAQhwQj1dY9q5TWPISSS26NrVk037dF9zyf92DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/vHPqXpF2nQCh3LglljSr/GxdLMB8GA1UdIwQY
MBaAFKnMRNfx0NwKWr8ndklbYd5IGZJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjct
MTYxN2YzOGE2ZGZjLzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjctMTYxN2YzOGE2ZGZj
LzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeObyauZE
yTOQ/xr11e3j/OsDDvw/Z5bymlwonqEilrYux5noEbZDMf/k2e6dQbLQCcwARJsA
FfG1s6A3DbDJH20x+HGHgisl5CyTVqp2DxjSusHCy6WzCRPTd8KK9xRLdyTSqk1J
OBw22jbSc0bsyFkFxbQIeUuKhiSj1rwdt30taoY9+/HnndhNIju2iYxNvnVj/o0H
+hQGVgc8YnR0XWp23xbenE9dfsJ+vPAq9yakjnrGIwXXmqUMg1eZ+wio/9J4/O4q
shKJzCoCVXdYpp2taDFPuEvlgsJR3d18Wj+xytcondbZQp2WEQvHU98jkBBIlocP
3FaMEelDUtXtfg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:32 2025 by rpki-client on console-fra.rpki-client.org