Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
File: XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json)
Hash identifier: bsrE/cH1I3cuja7Rqc077GQ2HPGfMaV1CpOom0J7PdE=
Subject key identifier: DF:B3:9F:22:D1:44:0E:05:13:6C:5F:E9:2F:5B:E9:E5:4E:7E:47:49
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial: 0194BB6020C7304715A726F007CCA664FCD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:26 +0000
Manifest this update: Fri 31 Jan 2025 08:00:26 +0000
Manifest next update: Sat 01 Feb 2025 08:00:26 +0000
Files and hashes: 1: EhB6weKGJ4-421K8pUvkm2LrMKg.roa (hash: GehRK19n2FBgVxX0RORTYOeMQOvVei0ObqKHpANJ3js=)
2: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: vbUjN75IKG+stfFsSzP9i3FBR0Pl9iKR2/oh5WbOG9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:20:c7:30:47:15:a7:26:f0:07:cc:a6:64:fc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Validity
Not Before: Jan 31 08:00:26 2025 GMT
Not After : Feb 1 08:00:26 2025 GMT
Subject: CN=dfb39f22d1440e05136c5fe92f5be9e54e7e4749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:ce:0c:44:4d:d3:6e:34:66:f4:fa:c9:63:
48:b0:3e:fc:3e:cd:e6:cb:e7:cd:1f:85:7d:99:ae:
de:61:9b:d3:83:66:43:b8:20:af:93:d8:b2:5e:f5:
1a:21:9a:30:fd:7b:37:6c:e6:b9:bf:aa:41:a1:a5:
64:b9:1c:ec:f0:c0:ab:c7:a4:03:60:a6:c5:f6:62:
54:24:7d:2e:3a:b6:01:ea:14:d5:6e:9c:3b:b3:72:
e7:4b:f2:02:d7:a0:e9:e1:a4:35:58:06:13:40:a4:
3f:e5:ea:fe:fc:c3:b2:74:91:e2:eb:5c:6e:fe:18:
07:b3:73:f6:d1:83:3c:6a:03:78:5b:b1:2b:7d:18:
c5:05:b7:62:75:d2:2a:e8:45:ab:5e:94:20:fd:1b:
6d:65:0a:70:2f:41:84:89:d5:34:30:09:58:c7:9e:
73:48:20:65:93:0e:32:79:b0:cf:3b:45:38:33:8e:
0a:27:45:13:04:b6:c4:89:ca:b5:5c:b4:b6:85:72:
4c:e4:98:bd:df:94:ee:e8:2c:73:b6:1f:4f:17:cf:
77:ac:00:a0:75:65:52:b5:b7:28:98:81:34:3c:2a:
b2:4b:67:40:da:40:ca:df:5d:01:27:85:c7:aa:ca:
e6:03:0f:ff:95:95:fc:a5:38:b5:c9:39:b0:9a:a6:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B3:9F:22:D1:44:0E:05:13:6C:5F:E9:2F:5B:E9:E5:4E:7E:47:49
X509v3 Authority Key Identifier:
keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0e:92:fd:9b:9d:1e:9e:e0:99:95:7f:00:ea:7e:ca:2c:77:
e3:01:c5:30:af:fe:df:a1:ac:2d:6d:0a:03:7f:2a:24:f8:1e:
57:2f:aa:f0:f4:5e:2f:41:1c:ff:df:db:f3:2a:2c:d6:27:8e:
bd:75:b7:fb:21:fd:ae:d1:f6:1a:b5:14:5e:ac:16:4f:90:3f:
fd:db:ee:b3:20:5d:c1:f9:1f:2c:6a:31:6f:ff:b9:0e:81:5f:
e1:90:b4:ef:b6:d4:36:48:73:ef:24:82:14:07:f6:bb:d0:2c:
30:fd:5f:4a:25:cd:fe:a0:80:db:a7:9b:45:26:a9:4e:24:8a:
19:2f:15:b0:4d:8f:77:3a:f3:60:42:38:eb:5d:10:ba:d8:d1:
51:59:ee:2d:3a:ee:e9:c1:08:9f:9d:48:7e:49:ca:9d:d7:15:
93:fd:27:d0:80:8b:5e:3b:55:b7:3f:f6:a5:7c:a6:ff:ed:bb:
8a:04:3b:58:79:a8:ea:53:de:f2:85:86:1a:82:21:cf:3f:81:
19:c8:71:ff:36:d5:ea:e0:b8:d6:a8:cb:41:7b:8a:c4:28:1e:
f2:37:36:35:34:d2:43:28:9b:bb:7d:38:8c:dc:51:64:42:6d:
36:0e:6c:2f:eb:8b:b6:8b:6d:a0:d4:48:c5:e6:0b:8b:2b:73:
20:6f:e6:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YCDHMEcVpybwB8ymZPzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMGJiZWI3ODMzYmRjOWJlNzI1MDYxMTU3YzAzOWYyYTEw
ZjFhODAwHhcNMjUwMTMxMDgwMDI2WhcNMjUwMjAxMDgwMDI2WjAzMTEwLwYDVQQD
EyhkZmIzOWYyMmQxNDQwZTA1MTM2YzVmZTkyZjViZTllNTRlN2U0NzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA7ODERN0240ZvT6yWNIsD78Ps3m
y+fNH4V9ma7eYZvTg2ZDuCCvk9iyXvUaIZow/Xs3bOa5v6pBoaVkuRzs8MCrx6QD
YKbF9mJUJH0uOrYB6hTVbpw7s3LnS/IC16Dp4aQ1WAYTQKQ/5er+/MOydJHi61xu
/hgHs3P20YM8agN4W7ErfRjFBbdiddIq6EWrXpQg/RttZQpwL0GEidU0MAlYx55z
SCBlkw4yebDPO0U4M44KJ0UTBLbEicq1XLS2hXJM5Ji935Tu6Cxzth9PF893rACg
dWVStbcomIE0PCqyS2dA2kDK310BJ4XHqsrmAw//lZX8pTi1yTmwmqZK6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+znyLRRA4FE2xf6S9b6eVOfkdJMB8GA1UdIwQY
MBaAFF0LvreDO9yb5yUGEVfAOfKhDxqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kMmMwOGYtNWZmMy00OTgyLWI1N2It
NjMxYzZkMDllODQ1LzEvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kMmMwOGYtNWZmMy00OTgyLWI1N2ItNjMxYzZkMDllODQ1
LzEvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoA6S/Zud
Hp7gmZV/AOp+yix34wHFMK/+36GsLW0KA38qJPgeVy+q8PReL0Ec/9/b8yos1ieO
vXW3+yH9rtH2GrUUXqwWT5A//dvusyBdwfkfLGoxb/+5DoFf4ZC077bUNkhz7ySC
FAf2u9AsMP1fSiXN/qCA26ebRSapTiSKGS8VsE2PdzrzYEI4610QutjRUVnuLTru
6cEIn51IfknKndcVk/0n0ICLXjtVtz/2pXym/+27igQ7WHmo6lPe8oWGGoIhzz+B
Gchx/zbV6uC41qjLQXuKxCge8jc2NTTSQyibu304jNxRZEJtNg5sL+uLtottoNRI
xeYLiytzIG/mgw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:42 2025 by rpki-client on console-fra.rpki-client.org