Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier: dJq+I0byvw+w1n7voEYHt1kO7mbaDkCIDf2tJN5J3Xw=
Subject key identifier: FB:22:6C:C8:59:87:76:1C:17:4F:2C:C7:03:C4:14:3B:92:9A:1A:0B
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 0195113515CD843A5CF4869A5A902146AD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number: 027B
Signing time: Mon 17 Feb 2025 00:00:46 +0000
Manifest this update: Mon 17 Feb 2025 00:00:46 +0000
Manifest next update: Tue 18 Feb 2025 00:00:46 +0000
Files and hashes: 1: qeUjFmDBXRanRORKytHhxi_chXY.roa (hash: BDfZzOuGAgs1F3dD55NRk4ttvCosc+ZV+zf9zuFmFos=)
2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: XAQxsk3g+ed0QpcetU0DY+pl0SxuzSJAzPnOY97wefc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:15:cd:84:3a:5c:f4:86:9a:5a:90:21:46:ad:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Feb 17 00:00:46 2025 GMT
Not After : Feb 18 00:00:46 2025 GMT
Subject: CN=fb226cc85987761c174f2cc703c4143b929a1a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:d6:19:49:b5:ec:d7:c1:bb:f7:ac:f7:b1:
d0:fe:b1:5d:30:a5:a2:e4:96:87:56:39:37:6c:44:
5f:43:b3:d1:20:c2:4d:e9:e3:0c:ff:f0:66:8d:36:
ef:44:9e:0c:bf:92:66:1a:35:85:6b:20:67:8f:87:
c4:45:21:cb:65:b6:d3:a8:9a:b9:f5:5c:e2:39:4b:
ae:dc:49:5c:68:43:15:4e:2d:d3:41:40:ee:ea:90:
1c:12:2f:1b:99:83:52:bd:3f:f7:e5:78:f5:1c:55:
8f:0f:06:5a:02:8a:b3:27:20:cc:3d:ef:e9:f4:fe:
f8:9b:5e:6a:b3:fc:d4:12:e3:b7:27:13:41:3c:87:
fc:37:62:f6:ee:34:4a:49:24:cd:dc:ed:6d:29:a5:
92:65:b5:b9:16:14:92:72:39:70:c1:48:48:d2:a0:
e7:e0:06:49:ba:9e:40:67:12:c4:97:e2:6e:8b:ec:
b8:8b:64:0b:b7:ae:4a:6a:47:da:cb:a9:98:cb:e7:
1a:54:b9:4f:df:23:83:0e:1a:09:0d:88:be:e5:7b:
f1:68:32:96:f3:50:05:48:25:9f:39:15:c0:25:6e:
8c:3b:c3:42:5f:2d:4b:cc:3f:0a:62:10:4d:9e:86:
b8:36:5e:43:a6:a3:d2:c5:0f:b0:73:4d:cf:88:c8:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:22:6C:C8:59:87:76:1C:17:4F:2C:C7:03:C4:14:3B:92:9A:1A:0B
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c5:48:b4:d7:2e:5b:88:3f:c5:1d:0c:8c:eb:ec:76:09:96:
1d:c3:7e:26:3e:ec:9a:1e:57:c7:83:95:95:14:11:df:73:6c:
c7:86:81:93:27:75:99:fc:43:32:6b:ea:54:5a:36:96:7d:23:
c8:5d:38:d3:4f:c5:95:90:6c:e7:34:53:f1:53:f9:77:dd:2b:
7f:30:34:c1:9e:66:2a:41:bc:6c:bb:2c:c3:b8:58:77:60:51:
95:24:28:83:ce:41:ea:27:ae:1e:cc:55:3f:30:1d:63:e6:25:
0e:02:01:b2:fe:9d:eb:12:97:27:0c:33:a8:4c:37:e9:a8:64:
08:d3:3c:32:a2:4d:4c:16:10:2f:4a:c4:98:ea:9c:c6:73:4b:
83:17:6e:80:7f:bd:65:ba:35:69:87:9c:ca:3d:56:5d:94:24:
08:d4:03:85:b1:10:41:57:c3:82:ad:b7:46:9e:26:bc:f5:2a:
70:d7:10:12:dc:7d:16:5a:9f:e3:fc:2d:0e:e2:76:22:4c:ca:
5b:fa:9e:41:92:ef:ad:08:32:14:f0:1f:68:22:6c:43:df:34:
7a:02:10:6f:e8:56:54:ca:a1:54:f9:8a:46:fd:e1:b6:07:6a:
53:08:4b:dc:ec:1c:04:d2:15:77:4f:da:db:02:e1:41:25:67:
10:d8:ea:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNRXNhDpc9IaaWpAhRq1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTNkMjY1MzUxYjY1ZjIzOWYyOTk3ZGUxZThhODA2Nzc5
MzNhNWUwHhcNMjUwMjE3MDAwMDQ2WhcNMjUwMjE4MDAwMDQ2WjAzMTEwLwYDVQQD
EyhmYjIyNmNjODU5ODc3NjFjMTc0ZjJjYzcwM2M0MTQzYjkyOWExYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpbWGUm17NfBu/es97HQ/rFdMKWi
5JaHVjk3bERfQ7PRIMJN6eMM//BmjTbvRJ4Mv5JmGjWFayBnj4fERSHLZbbTqJq5
9VziOUuu3ElcaEMVTi3TQUDu6pAcEi8bmYNSvT/35Xj1HFWPDwZaAoqzJyDMPe/p
9P74m15qs/zUEuO3JxNBPIf8N2L27jRKSSTN3O1tKaWSZbW5FhSScjlwwUhI0qDn
4AZJup5AZxLEl+Jui+y4i2QLt65Kakfay6mYy+caVLlP3yODDhoJDYi+5XvxaDKW
81AFSCWfORXAJW6MO8NCXy1LzD8KYhBNnoa4Nl5DpqPSxQ+wc03PiMj0gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsibMhZh3YcF08sxwPEFDuSmhoLMB8GA1UdIwQY
MBaAFL6j0mU1G2XyOfKZfeHoqAZ3kzpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jMDg3OGQtYWZjNi00ZTcwLTkwZDMt
ZjUzYzVjMTc1NmQ3LzEvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jMDg3OGQtYWZjNi00ZTcwLTkwZDMtZjUzYzVjMTc1NmQ3
LzEvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMVItNcu
W4g/xR0MjOvsdgmWHcN+Jj7smh5Xx4OVlRQR33Nsx4aBkyd1mfxDMmvqVFo2ln0j
yF0400/FlZBs5zRT8VP5d90rfzA0wZ5mKkG8bLssw7hYd2BRlSQog85B6ieuHsxV
PzAdY+YlDgIBsv6d6xKXJwwzqEw36ahkCNM8MqJNTBYQL0rEmOqcxnNLgxdugH+9
Zbo1aYecyj1WXZQkCNQDhbEQQVfDgq23Rp4mvPUqcNcQEtx9Flqf4/wtDuJ2IkzK
W/qeQZLvrQgyFPAfaCJsQ980egIQb+hWVMqhVPmKRv3htgdqUwhL3OwcBNIVd0/a
2wLhQSVnENjqZA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:44 2025 by rpki-client