Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: DZsmCwxdmKy6UF4pEHfteDaEiHJsczhXZflz4abqXTk=
Subject key identifier: 6C:A5:61:A1:DF:FB:75:77:6A:D9:6F:58:2C:15:68:30:D7:94:73:69
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 0194BA846C556585C84B94BABB135BD9BC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 05DB
Signing time: Fri 31 Jan 2025 04:00:28 +0000
Manifest this update: Fri 31 Jan 2025 04:00:28 +0000
Manifest next update: Sat 01 Feb 2025 04:00:28 +0000
Files and hashes: 1: Ot7K37c41MVu-6Ir2VOkUuixgHw.roa (hash: 7Ylv6CILYrMD9u/uD4SkYHlbdsDQ05xlERBBPqPUVnQ=)
2: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: UGIrRoSrju8/PiALwGE9MFzpiN2DoLhJj/HwybSU4Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:6c:55:65:85:c8:4b:94:ba:bb:13:5b:d9:bc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Jan 31 04:00:28 2025 GMT
Not After : Feb 1 04:00:28 2025 GMT
Subject: CN=6ca561a1dffb75776ad96f582c156830d7947369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:d2:6f:af:c6:b0:ed:02:d5:9a:f0:1e:68:
13:28:c7:2f:18:e4:ad:fa:d4:8d:59:8c:eb:a7:0d:
30:53:ca:c8:34:ec:ee:f5:30:ae:d7:b4:4a:28:8d:
cd:1f:43:4e:45:cc:5f:60:e1:e2:db:b9:f3:ec:a4:
a5:cb:23:5e:8d:83:90:30:25:54:16:52:99:f4:2b:
ab:bb:4b:0f:23:58:b1:d2:23:76:cc:6a:dc:b6:f5:
b7:30:a0:52:87:35:ce:c1:2b:28:9f:f2:bd:4e:65:
34:53:a9:26:4f:ec:8d:95:a9:a8:06:f0:fc:13:2f:
40:e0:62:d8:c0:09:4c:ca:50:b9:0f:d5:76:24:a9:
05:e3:71:ff:ea:4f:bb:13:85:19:0c:7a:fc:24:d2:
85:7f:8a:a8:2e:e2:35:63:2f:30:c6:29:a6:cd:97:
10:39:01:8e:60:a3:84:00:10:4a:47:70:ec:71:4a:
c2:d9:b3:09:80:82:55:cc:ad:e2:7b:3b:88:6f:90:
d7:2b:d3:61:e8:99:38:28:b8:94:55:31:2d:9f:6a:
5f:75:3c:b2:a9:90:61:16:da:4c:14:18:0a:d9:0f:
69:1b:45:54:4d:91:99:08:d6:c9:05:aa:56:6b:02:
5e:4d:57:99:56:a4:b6:32:6a:3a:0e:21:5d:d8:4e:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A5:61:A1:DF:FB:75:77:6A:D9:6F:58:2C:15:68:30:D7:94:73:69
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:68:e0:a6:61:5c:c3:dc:76:5d:b9:3f:3e:8e:47:4f:5c:85:
7a:99:60:ab:b1:75:48:6f:3e:35:5d:44:95:7d:4f:87:5d:75:
ab:b6:b5:82:92:c8:b1:49:41:53:36:48:63:54:ab:b0:0e:0c:
dd:9b:55:83:c7:a6:70:48:fa:23:95:f6:6f:e2:c9:1e:c1:da:
f5:29:3b:6d:ee:c7:a3:b7:dd:39:7b:38:51:d3:39:2b:bb:4b:
5b:53:06:14:aa:e6:cf:ac:4f:21:d1:a4:fc:a6:d6:28:c0:11:
58:e2:3f:bf:52:bb:39:c3:1f:fd:bf:d3:45:e7:02:06:03:b2:
ff:7f:00:97:96:2f:99:9d:e4:5b:dd:2e:a2:5c:3a:27:84:38:
fc:cb:6f:3a:7c:55:b1:35:fd:63:14:4d:a2:d0:f3:ad:05:65:
a3:92:fd:73:eb:50:6c:75:e0:26:28:06:98:a3:3f:f2:a4:06:
68:22:70:7b:f1:bc:42:fe:7c:d9:95:46:b8:db:61:68:ff:1d:
ef:08:33:8e:76:e3:dd:ea:2a:8c:de:84:fb:b2:ad:b9:6e:37:
8a:ce:60:bb:ec:6a:94:92:6b:86:9c:81:54:0e:f4:ef:79:09:
91:7c:05:b7:fa:b2:9d:4e:f0:8e:ae:12:e0:e4:06:c6:ad:1d:
36:4b:f1:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hGxVZYXIS5S6uxNb2bwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNzM0ZWY1YWUyMWMwZTg5N2ZhMTg2NDQ3MTg0ZWM5YWQ0
YWUyOWQwHhcNMjUwMTMxMDQwMDI4WhcNMjUwMjAxMDQwMDI4WjAzMTEwLwYDVQQD
Eyg2Y2E1NjFhMWRmZmI3NTc3NmFkOTZmNTgyYzE1NjgzMGQ3OTQ3MzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4nSb6/GsO0C1ZrwHmgTKMcvGOSt
+tSNWYzrpw0wU8rINOzu9TCu17RKKI3NH0NORcxfYOHi27nz7KSlyyNejYOQMCVU
FlKZ9Curu0sPI1ix0iN2zGrctvW3MKBShzXOwSson/K9TmU0U6kmT+yNlamoBvD8
Ey9A4GLYwAlMylC5D9V2JKkF43H/6k+7E4UZDHr8JNKFf4qoLuI1Yy8wximmzZcQ
OQGOYKOEABBKR3DscUrC2bMJgIJVzK3iezuIb5DXK9Nh6Jk4KLiUVTEtn2pfdTyy
qZBhFtpMFBgK2Q9pG0VUTZGZCNbJBapWawJeTVeZVqS2Mmo6DiFd2E6JPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGylYaHf+3V3atlvWCwVaDDXlHNpMB8GA1UdIwQY
MBaAFKpzTvWuIcDol/oYZEcYTsmtSuKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWIt
ZGE3ODBjZmI5OWE0LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWItZGE3ODBjZmI5OWE0
LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmjgpmFc
w9x2Xbk/Po5HT1yFeplgq7F1SG8+NV1ElX1Ph111q7a1gpLIsUlBUzZIY1SrsA4M
3ZtVg8emcEj6I5X2b+LJHsHa9Sk7be7Ho7fdOXs4UdM5K7tLW1MGFKrmz6xPIdGk
/KbWKMARWOI/v1K7OcMf/b/TRecCBgOy/38Al5YvmZ3kW90uolw6J4Q4/MtvOnxV
sTX9YxRNotDzrQVlo5L9c+tQbHXgJigGmKM/8qQGaCJwe/G8Qv582ZVGuNthaP8d
7wgzjnbj3eoqjN6E+7KtuW43is5gu+xqlJJrhpyBVA7073kJkXwFt/qynU7wjq4S
4OQGxq0dNkvxOA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:59 2025 by rpki-client on console-fra.rpki-client.org