Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier: 0psR27bSBy7XlD6mtH+XUosiHY5gtOpYwRR2z8NTuwI=
Subject key identifier: E0:BC:15:C1:67:A5:95:61:E2:AD:33:64:F5:FE:F2:68:69:18:20:02
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 0194BABBBDD812B3CDEA54716837FE269E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number: 07C2
Signing time: Fri 31 Jan 2025 05:00:53 +0000
Manifest this update: Fri 31 Jan 2025 05:00:53 +0000
Manifest next update: Sat 01 Feb 2025 05:00:53 +0000
Files and hashes: 1: R32ocj-6uY_43O0MYMBgyGscCvA.roa (hash: r9h0VFYvoYX+2ey0h2BkC9X3BYpiR12BEJYPKT358/g=)
2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: g4yZ5gZAxtphKbx5/WLhqNz52Eg2VVT+Z0K1MkoYPlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:bd:d8:12:b3:cd:ea:54:71:68:37:fe:26:9e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: Jan 31 05:00:53 2025 GMT
Not After : Feb 1 05:00:53 2025 GMT
Subject: CN=e0bc15c167a59561e2ad3364f5fef26869182002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:0b:54:b0:e6:f2:b7:e9:f2:61:92:06:20:
f3:ce:55:e7:f0:88:bb:a8:8e:23:a3:33:1d:6e:0a:
1f:d4:92:c1:38:6a:60:19:e0:78:e0:9f:20:4a:b2:
b8:3a:12:c8:fa:c9:a2:ca:90:f4:70:0c:e9:41:df:
4b:02:3f:d6:4a:0d:53:e1:01:d9:51:95:28:4b:c0:
97:7b:69:c0:a8:37:d2:92:ae:25:de:0f:36:45:38:
43:97:b1:0d:8c:1b:43:1f:b3:41:56:49:23:c3:7a:
da:cc:66:fe:fa:5c:65:39:3f:08:e3:f0:bd:2a:4f:
81:1c:74:ac:c8:93:0c:54:9d:9f:b5:d4:14:09:45:
1d:25:76:bf:c2:50:81:ae:e1:a6:96:fe:a5:6e:bb:
14:b0:da:74:ba:55:53:bb:f4:76:4d:f1:65:de:c4:
33:fd:a1:da:ef:2b:22:13:1e:90:8c:24:9c:14:2f:
c1:10:c1:ed:3a:9a:04:90:ab:18:bf:9d:06:fd:e0:
27:f8:40:b5:33:c4:8a:14:b0:a1:30:69:45:48:5c:
f5:96:69:28:f3:4c:9f:07:1e:34:ba:63:89:3a:9d:
1a:7f:ab:1d:c5:61:dc:38:d4:dc:fd:71:80:c5:04:
64:8c:08:b3:0a:57:05:86:df:db:0d:c6:61:47:c5:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BC:15:C1:67:A5:95:61:E2:AD:33:64:F5:FE:F2:68:69:18:20:02
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1c:a9:db:51:2d:6d:b9:ff:65:02:ff:75:9a:aa:8e:99:6f:
cb:5a:c6:3b:cf:af:d9:5a:d0:c3:08:a7:a5:0f:9f:c9:8c:03:
1a:dc:94:62:ec:9a:32:af:c3:78:01:cf:30:22:ff:25:cd:50:
ea:3f:db:c8:1b:c7:00:d5:8c:53:09:5d:da:4b:96:a9:4c:d3:
f8:ca:8e:9a:df:1c:fa:e1:ec:ce:77:53:16:91:5e:14:69:88:
49:b0:dd:73:9f:be:5f:6d:0b:da:16:b1:b9:d0:6a:51:9c:83:
90:85:e7:88:51:24:37:f5:d7:4a:21:22:24:2b:16:f5:25:4a:
9d:4b:e6:70:30:8f:65:0b:8f:dc:24:43:eb:9b:76:b4:6b:e7:
18:6f:2b:b9:ef:9d:f1:35:c0:ca:1e:4b:c5:35:74:56:ea:77:
8e:d7:87:f4:a7:e8:5b:47:38:63:99:6f:a9:58:73:1b:c9:ee:
18:f2:19:6d:87:13:cc:20:eb:3e:13:fb:ee:d8:76:8d:b9:f9:
f9:77:da:aa:e9:ef:55:ab:4a:b9:e5:05:56:ba:9b:8a:21:3f:
2c:98:bd:b6:f4:9a:29:ef:79:90:41:04:f1:9f:a2:6a:e4:2e:
df:2c:2d:22:39:8f:c9:7c:33:72:2b:dc:4c:3b:c5:b3:d2:e2:
37:70:36:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u73YErPN6lRxaDf+Jp4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMDBjYTg2Mjk1NmYxOWQ0ZGM5NTQ2OGFhNjE2ZjliMTY3
ZDliMzkwHhcNMjUwMTMxMDUwMDUzWhcNMjUwMjAxMDUwMDUzWjAzMTEwLwYDVQQD
EyhlMGJjMTVjMTY3YTU5NTYxZTJhZDMzNjRmNWZlZjI2ODY5MTgyMDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX4LVLDm8rfp8mGSBiDzzlXn8Ii7
qI4jozMdbgof1JLBOGpgGeB44J8gSrK4OhLI+smiypD0cAzpQd9LAj/WSg1T4QHZ
UZUoS8CXe2nAqDfSkq4l3g82RThDl7ENjBtDH7NBVkkjw3razGb++lxlOT8I4/C9
Kk+BHHSsyJMMVJ2ftdQUCUUdJXa/wlCBruGmlv6lbrsUsNp0ulVTu/R2TfFl3sQz
/aHa7ysiEx6QjCScFC/BEMHtOpoEkKsYv50G/eAn+EC1M8SKFLChMGlFSFz1lmko
80yfBx40umOJOp0af6sdxWHcONTc/XGAxQRkjAizClcFht/bDcZhR8WX8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC8FcFnpZVh4q0zZPX+8mhpGCACMB8GA1UdIwQY
MBaAFKoAyoYpVvGdTclUaKphb5sWfZs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmIt
N2U4OWY0MWIyNjZiLzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmItN2U4OWY0MWIyNjZi
LzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxyp21Et
bbn/ZQL/dZqqjplvy1rGO8+v2VrQwwinpQ+fyYwDGtyUYuyaMq/DeAHPMCL/Jc1Q
6j/byBvHANWMUwld2kuWqUzT+MqOmt8c+uHszndTFpFeFGmISbDdc5++X20L2hax
udBqUZyDkIXniFEkN/XXSiEiJCsW9SVKnUvmcDCPZQuP3CRD65t2tGvnGG8rue+d
8TXAyh5LxTV0Vup3jteH9KfoW0c4Y5lvqVhzG8nuGPIZbYcTzCDrPhP77th2jbn5
+XfaqunvVatKueUFVrqbiiE/LJi9tvSaKe95kEEE8Z+iauQu3ywtIjmPyXwzcivc
TDvFs9LiN3A2xw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:22 2025 by rpki-client on console-fra.rpki-client.org