Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
File: qQcj6hJVTVL0ZzoaSHifPQWniaA.mft (raw, json)
Hash identifier: GTvwCCpMqh+7pSPLizXUDKG/YzL3o+7+CfhIU2EkqbA=
Subject key identifier: E4:3D:39:E9:04:F6:27:33:25:29:D3:18:A7:B6:15:B6:EC:C5:E1:7E
Authority key identifier: A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
Certificate issuer: /CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Certificate serial: 0194BABB6E4C03F3AC158929E6BF0C173CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
Manifest number: 10BA
Signing time: Fri 31 Jan 2025 05:00:33 +0000
Manifest this update: Fri 31 Jan 2025 05:00:33 +0000
Manifest next update: Sat 01 Feb 2025 05:00:33 +0000
Files and hashes: 1: qQcj6hJVTVL0ZzoaSHifPQWniaA.crl (hash: MSBtE0b9IwyoKVCWGhtElCyedSiWr9+T7ro4kviNaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:6e:4c:03:f3:ac:15:89:29:e6:bf:0c:17:3c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Validity
Not Before: Jan 31 05:00:33 2025 GMT
Not After : Feb 1 05:00:33 2025 GMT
Subject: CN=e43d39e904f627332529d318a7b615b6ecc5e17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6f:0b:ca:80:10:85:4f:a8:74:da:3c:a8:52:
b4:33:94:96:fb:33:a7:3c:6a:1d:86:e3:63:e0:6a:
c9:03:6c:cd:3b:be:3b:26:82:f6:e2:b9:a7:e8:ae:
26:4e:b1:bc:06:4c:af:a7:11:4a:34:52:59:bf:9f:
ef:96:6b:f1:6a:fc:51:60:e6:a0:3f:fb:18:1d:27:
39:6d:8e:ab:e2:6f:b7:f2:18:3f:f7:13:03:67:e6:
a5:80:46:b4:da:43:92:d7:d1:1f:5b:4f:13:0f:12:
62:3e:43:38:27:bf:bc:35:c7:75:4c:06:5d:c0:f4:
80:34:5d:e9:d3:1a:0a:bd:dc:a4:08:c4:8b:10:b2:
8f:de:cb:ac:5a:e0:01:17:71:3d:3e:80:f7:de:3b:
a1:50:b8:a9:07:e7:f4:e6:fe:86:b7:4e:50:29:79:
5d:c2:f0:e2:8b:0e:ab:50:24:f6:48:a4:0e:30:91:
da:30:5a:56:ac:b4:93:52:f2:60:8b:fc:ac:16:50:
6b:81:01:ae:26:be:52:e1:06:5c:eb:d5:e3:af:f5:
76:2d:4c:62:6e:01:2f:7f:c7:94:0f:bc:35:77:93:
f7:70:7f:db:9f:a0:ab:1e:87:74:49:00:4d:67:30:
73:67:79:9f:fc:44:12:c9:65:55:78:bf:8b:30:56:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:39:E9:04:F6:27:33:25:29:D3:18:A7:B6:15:B6:EC:C5:E1:7E
X509v3 Authority Key Identifier:
keyid:A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ae:cb:40:70:31:31:4c:c3:32:cb:ce:c2:52:40:09:eb:c9:
12:cb:30:24:64:d6:f2:62:eb:52:e0:d4:e1:26:7a:3b:04:58:
2b:de:8f:b0:89:66:ce:17:45:7f:81:91:4c:3b:fa:9a:bb:f2:
4e:bb:4c:5a:4d:f3:9e:48:3a:83:46:ba:a8:1a:69:d9:78:5f:
8f:32:f7:11:a3:37:0c:10:c3:01:10:cb:30:06:c3:b6:c5:f5:
b4:fd:59:05:73:f2:58:b6:97:fd:95:cf:3a:64:7e:7a:90:d5:
39:b7:e1:10:bf:15:8f:2d:57:0a:c1:98:b0:43:23:29:ff:ed:
24:24:69:8a:27:74:5e:5d:47:12:ca:3c:35:72:54:1b:c7:55:
c1:07:dd:43:b6:7c:79:bc:5b:7e:50:50:d9:51:90:33:56:88:
73:76:7a:29:90:e8:bd:92:ec:b5:f2:d1:88:b3:d8:e9:ab:bd:
a3:2f:45:31:d9:53:0b:1f:d0:f4:fd:ba:11:d9:59:ba:15:2c:
e4:2e:28:58:d7:d0:52:b8:b5:8f:b1:8a:a4:52:26:aa:9e:af:
bf:4e:1f:9b:ed:77:db:b6:8c:ee:38:9d:8a:a9:b3:dd:08:c2:
99:d4:83:17:1a:71:4a:81:fc:7b:43:be:94:e3:d2:e2:7c:87:
d8:4d:8c:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u25MA/OsFYkp5r8MFzy7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDcyM2VhMTI1NTRkNTJmNDY3M2ExYTQ4Nzg5ZjNkMDVh
Nzg5YTAwHhcNMjUwMTMxMDUwMDMzWhcNMjUwMjAxMDUwMDMzWjAzMTEwLwYDVQQD
EyhlNDNkMzllOTA0ZjYyNzMzMjUyOWQzMThhN2I2MTViNmVjYzVlMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW8LyoAQhU+odNo8qFK0M5SW+zOn
PGodhuNj4GrJA2zNO747JoL24rmn6K4mTrG8BkyvpxFKNFJZv5/vlmvxavxRYOag
P/sYHSc5bY6r4m+38hg/9xMDZ+algEa02kOS19EfW08TDxJiPkM4J7+8Ncd1TAZd
wPSANF3p0xoKvdykCMSLELKP3susWuABF3E9PoD33juhULipB+f05v6Gt05QKXld
wvDiiw6rUCT2SKQOMJHaMFpWrLSTUvJgi/ysFlBrgQGuJr5S4QZc69Xjr/V2LUxi
bgEvf8eUD7w1d5P3cH/bn6CrHod0SQBNZzBzZ3mf/EQSyWVVeL+LMFZEPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ9OekE9iczJSnTGKe2FbbsxeF+MB8GA1UdIwQY
MBaAFKkHI+oSVU1S9Gc6Gkh4nz0Fp4mgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFjajZoSlZUVkwwWnpvYVNIaWZQUVduaWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80ZDMxNWQtNjNhOC00NGIwLWI4YTMt
Yjc3NGMzZWE5ZGJiLzEvcVFjajZoSlZUVkwwWnpvYVNIaWZQUVduaWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80ZDMxNWQtNjNhOC00NGIwLWI4YTMtYjc3NGMzZWE5ZGJi
LzEvcVFjajZoSlZUVkwwWnpvYVNIaWZQUVduaWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAba7LQHAx
MUzDMsvOwlJACevJEsswJGTW8mLrUuDU4SZ6OwRYK96PsIlmzhdFf4GRTDv6mrvy
TrtMWk3znkg6g0a6qBpp2XhfjzL3EaM3DBDDARDLMAbDtsX1tP1ZBXPyWLaX/ZXP
OmR+epDVObfhEL8Vjy1XCsGYsEMjKf/tJCRpiid0Xl1HEso8NXJUG8dVwQfdQ7Z8
ebxbflBQ2VGQM1aIc3Z6KZDovZLstfLRiLPY6au9oy9FMdlTCx/Q9P26EdlZuhUs
5C4oWNfQUri1j7GKpFImqp6vv04fm+1327aM7jidiqmz3QjCmdSDFxpxSoH8e0O+
lOPS4nyH2E2MZA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:52 2025 by rpki-client on console-fra.rpki-client.org