Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: paApQQQK6jv88OoxKAmBMLp3TexVDvn8XgqR9Do/98k=
Subject key identifier: E3:45:43:98:0E:98:8D:39:44:0A:1F:6E:CF:C7:52:7F:D3:66:E0:8B
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 0194BAF23DEE0F7F3DF44F759DC915A5FB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 0D47
Signing time: Fri 31 Jan 2025 06:00:25 +0000
Manifest this update: Fri 31 Jan 2025 06:00:25 +0000
Manifest next update: Sat 01 Feb 2025 06:00:25 +0000
Files and hashes: 1: AHAIEOWCHWLKa9JHFINf6irqksg.roa (hash: 0crUb9fChI2AB7u9/en/nHBi9yIJVpozoehFQ2yd02I=)
2: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: +N8Gx7YscRbkBbKNYIG2BuThKkr12QJoFDyMVQuBAHM=)
3: iuTZJrZ_xqcN--oZzppXYNl2GLY.roa (hash: EaSRmqObnprgwhDFxETI2q5Xy3PnwGKEyMaUX8iySCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:3d:ee:0f:7f:3d:f4:4f:75:9d:c9:15:a5:fb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Jan 31 06:00:25 2025 GMT
Not After : Feb 1 06:00:25 2025 GMT
Subject: CN=e34543980e988d39440a1f6ecfc7527fd366e08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3f:36:21:16:9c:c2:50:41:15:6d:72:93:3e:
5e:e6:0b:e5:5f:a2:db:4d:b4:00:b0:83:2d:32:5d:
2f:6f:b5:84:1f:b7:6a:18:a5:83:8d:7e:b5:a5:d3:
b1:d2:69:c8:fe:ae:e0:c3:d9:44:a7:cf:61:7f:38:
57:e1:cb:d5:2f:b4:df:76:23:b1:e5:a8:52:67:0c:
84:9a:6b:e4:dc:b9:9d:2a:71:c2:6a:b8:21:77:9b:
96:21:8f:ae:3d:52:47:42:b9:8f:9c:ab:94:d1:d4:
0f:d7:ae:1d:51:e8:8b:44:c1:91:d7:7e:1e:36:ba:
e4:2e:fe:a8:4a:49:2d:11:f3:4e:a3:4f:93:9f:51:
e1:9b:58:97:e7:e1:ac:3c:76:fb:7a:c0:f1:ba:73:
f3:db:2b:76:2b:7e:26:c1:09:62:62:a7:d9:83:2d:
86:e5:c4:40:5f:24:97:8a:ff:94:a8:e5:ad:a2:16:
d3:ef:50:a5:5f:6f:17:7c:3a:aa:20:83:07:6f:0e:
1c:75:96:1f:b2:e8:8b:35:1e:0f:05:5a:40:a3:63:
2b:db:56:ae:c4:d7:65:23:c2:35:e1:ec:25:8b:10:
3b:3f:77:11:38:31:17:26:19:1c:33:0d:04:ba:2c:
58:c9:04:3a:fb:5c:d6:b1:26:96:76:25:af:ab:08:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:45:43:98:0E:98:8D:39:44:0A:1F:6E:CF:C7:52:7F:D3:66:E0:8B
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ec:8a:7f:aa:d0:21:d5:d6:0a:6b:99:c1:94:9e:62:46:7a:
98:93:b0:2f:cd:a8:07:df:60:84:b1:84:64:08:c8:e3:9b:79:
27:69:e3:28:c8:0e:b5:f6:89:1a:f9:60:b6:7c:18:94:b9:bb:
90:cf:ff:41:1e:11:41:26:22:93:49:0a:83:d1:eb:6f:b1:3f:
06:b3:4b:4f:65:32:f7:fb:5e:8c:16:ff:52:f6:e8:77:4e:45:
47:20:77:35:13:d6:24:b1:22:38:80:b6:ba:e2:c7:89:3e:5b:
56:b1:c5:3b:31:26:0c:bb:de:be:ca:2d:ff:86:47:de:60:75:
26:2e:03:19:b5:3f:65:3e:85:8a:48:08:3d:9b:3b:cb:57:c5:
11:cf:7f:da:0c:27:99:aa:66:d2:10:8e:be:7a:79:81:e8:ce:
05:ad:8c:7f:e9:bb:2e:e8:a5:cc:ba:59:9c:1c:45:27:6b:a6:
19:42:73:52:e4:de:bd:18:a2:51:5e:7f:c3:b0:14:38:91:df:
25:0b:1e:a5:82:e4:df:77:50:bb:96:c0:8a:c8:64:50:fc:2c:
e6:b0:b5:05:7d:6c:3b:a8:ff:9a:33:9c:2d:8b:66:d5:3c:a9:
75:a7:1e:03:80:85:ed:15:3d:55:23:51:3a:98:04:78:0e:a3:
ba:2f:5a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68j3uD3899E91nckVpfsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjdiMGMwZmU3YzA4OTM1ZTI1ODcxM2ZjZjkwZmU5NThl
ZTAzZWUwHhcNMjUwMTMxMDYwMDI1WhcNMjUwMjAxMDYwMDI1WjAzMTEwLwYDVQQD
EyhlMzQ1NDM5ODBlOTg4ZDM5NDQwYTFmNmVjZmM3NTI3ZmQzNjZlMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+D82IRacwlBBFW1ykz5e5gvlX6Lb
TbQAsIMtMl0vb7WEH7dqGKWDjX61pdOx0mnI/q7gw9lEp89hfzhX4cvVL7TfdiOx
5ahSZwyEmmvk3LmdKnHCarghd5uWIY+uPVJHQrmPnKuU0dQP164dUeiLRMGR134e
NrrkLv6oSkktEfNOo0+Tn1Hhm1iX5+GsPHb7esDxunPz2yt2K34mwQliYqfZgy2G
5cRAXySXiv+UqOWtohbT71ClX28XfDqqIIMHbw4cdZYfsuiLNR4PBVpAo2Mr21au
xNdlI8I14ewlixA7P3cRODEXJhkcMw0EuixYyQQ6+1zWsSaWdiWvqwg8pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONFQ5gOmI05RAofbs/HUn/TZuCLMB8GA1UdIwQY
MBaAFEEnsMD+fAiTXiWHE/z5D+lY7gPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQt
YmQxZDQ4ZDUxMmNlLzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQtYmQxZDQ4ZDUxMmNl
LzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeyKf6rQ
IdXWCmuZwZSeYkZ6mJOwL82oB99ghLGEZAjI45t5J2njKMgOtfaJGvlgtnwYlLm7
kM//QR4RQSYik0kKg9Hrb7E/BrNLT2Uy9/tejBb/Uvbod05FRyB3NRPWJLEiOIC2
uuLHiT5bVrHFOzEmDLvevsot/4ZH3mB1Ji4DGbU/ZT6FikgIPZs7y1fFEc9/2gwn
mapm0hCOvnp5gejOBa2Mf+m7LuilzLpZnBxFJ2umGUJzUuTevRiiUV5/w7AUOJHf
JQsepYLk33dQu5bAishkUPws5rC1BX1sO6j/mjOcLYtm1TypdaceA4CF7RU9VSNR
OpgEeA6jui9aiA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:10 2025 by rpki-client on console-fra.rpki-client.org