Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: gbM1xRZK6ATYj+HEi1utwxU+XPsynTftQK3c15wdrLQ=
Subject key identifier: 32:9D:64:51:B6:67:AF:B6:1E:BA:6C:D6:6B:5B:AE:EE:78:07:C2:8D
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 0195124755B0FD397D29B2265F0012DC3744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 05:00:19 +0000
Manifest this update: Mon 17 Feb 2025 05:00:19 +0000
Manifest next update: Tue 18 Feb 2025 05:00:19 +0000
Files and hashes: 1: NcqRg7UrtJE68j0DY1PSHwYSu_4.roa (hash: O3F0k70QFpKk+LVxYcWwtpQ0YuG4zUsaxS4NlfXzPQ0=)
2: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: /ybqOFVmHdLZlK2z4FSo7IHC96iZ37dumTyieWH9QbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:55:b0:fd:39:7d:29:b2:26:5f:00:12:dc:37:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Feb 17 05:00:19 2025 GMT
Not After : Feb 18 05:00:19 2025 GMT
Subject: CN=329d6451b667afb61eba6cd66b5baeee7807c28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:80:f3:24:ff:3c:5a:6e:c2:49:94:ae:04:
92:fe:70:5f:a5:6e:d1:e8:db:48:85:19:21:02:6e:
be:96:6a:c6:77:3a:71:6c:a4:54:92:de:d1:6b:b9:
c8:fa:e0:dd:4c:35:7e:a2:89:82:dc:d3:79:36:f1:
ad:33:6a:67:dc:85:64:8b:d6:cd:b6:aa:48:ff:6d:
5c:92:bb:c8:28:4c:2b:65:ad:cb:cb:94:c3:6d:18:
57:01:8e:27:08:cf:65:ad:3e:42:56:0f:9b:cc:62:
0c:ce:fb:90:98:fb:28:af:29:4c:cd:25:fd:f4:7e:
b0:62:ec:f2:67:4d:ff:96:40:6c:49:cb:d0:cc:39:
30:97:cb:91:b3:46:34:d7:59:f9:4d:85:1d:16:cb:
8b:c1:68:94:26:3e:2c:3d:07:5a:7c:69:ee:18:c2:
23:43:30:e5:4e:f2:2e:ef:1a:94:65:bf:45:34:71:
29:9e:17:41:0e:f9:8c:52:43:8a:0a:45:81:14:b3:
c1:3e:10:59:e1:47:71:ae:5a:7e:91:19:5e:a7:1c:
46:8b:0c:1f:25:3e:1e:0e:df:8e:04:52:fa:8f:20:
8d:12:1f:e5:b5:a5:2e:cf:d6:74:ef:1e:d6:64:49:
11:09:27:27:7b:33:44:5c:54:a4:0c:86:76:0f:06:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9D:64:51:B6:67:AF:B6:1E:BA:6C:D6:6B:5B:AE:EE:78:07:C2:8D
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e6:0d:88:f6:26:7d:47:16:74:95:89:42:d8:eb:42:29:46:
06:a8:f1:4f:9c:a8:f2:80:26:b2:0c:fa:d2:76:db:58:b2:42:
b8:e0:b2:0c:da:b7:ff:e5:df:12:7d:02:23:60:96:34:2e:ee:
7e:90:81:b3:cb:ae:8b:b0:12:ef:f6:ca:42:5c:a5:0d:dd:85:
0e:cb:78:d4:77:81:e9:ee:ba:b8:dc:20:9f:96:8c:6e:0d:b6:
c0:9e:c9:91:da:45:3b:8c:94:f9:be:cb:03:08:49:6e:c7:01:
79:a0:27:6d:b1:2c:39:21:b6:01:9a:56:16:7b:4e:21:c4:a3:
ad:47:fc:df:08:c6:21:7a:07:f2:f1:24:92:f3:d1:7e:86:aa:
0b:98:0e:63:cb:98:12:31:af:96:6f:07:11:75:39:82:70:69:
56:4c:2a:97:5f:e2:97:f8:f7:06:02:54:2c:a1:5d:24:d9:ce:
07:e2:4c:7e:b4:e1:64:ad:b9:da:66:fa:a7:8a:cf:67:b9:50:
34:0a:44:6b:fe:a1:a2:2c:eb:37:0a:b0:ab:7b:46:ed:b2:63:
98:41:71:39:d9:bf:11:ee:9c:91:8d:74:80:37:66:ec:71:43:
c6:52:b9:85:17:a9:59:e2:f1:46:b1:6f:f6:6c:11:ff:28:e9:
73:e0:c7:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSR1Ww/Tl9KbImXwAS3DdEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTQyZDgzMGVjYTk4YTUzM2Y0MzcyZGExNjljOWM3OTJj
MzkzYjIwHhcNMjUwMjE3MDUwMDE5WhcNMjUwMjE4MDUwMDE5WjAzMTEwLwYDVQQD
EygzMjlkNjQ1MWI2NjdhZmI2MWViYTZjZDY2YjViYWVlZTc4MDdjMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NqA8yT/PFpuwkmUrgSS/nBfpW7R
6NtIhRkhAm6+lmrGdzpxbKRUkt7Ra7nI+uDdTDV+oomC3NN5NvGtM2pn3IVki9bN
tqpI/21ckrvIKEwrZa3Ly5TDbRhXAY4nCM9lrT5CVg+bzGIMzvuQmPsorylMzSX9
9H6wYuzyZ03/lkBsScvQzDkwl8uRs0Y011n5TYUdFsuLwWiUJj4sPQdafGnuGMIj
QzDlTvIu7xqUZb9FNHEpnhdBDvmMUkOKCkWBFLPBPhBZ4Udxrlp+kRlepxxGiwwf
JT4eDt+OBFL6jyCNEh/ltaUuz9Z07x7WZEkRCScnezNEXFSkDIZ2DwYuQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKdZFG2Z6+2Hrps1mtbru54B8KNMB8GA1UdIwQY
MBaAFEHkLYMOypilM/Q3LaFpyceSw5OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMt
MWFkNjFlZGUwYTRhLzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMtMWFkNjFlZGUwYTRh
LzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuYNiPYm
fUcWdJWJQtjrQilGBqjxT5yo8oAmsgz60nbbWLJCuOCyDNq3/+XfEn0CI2CWNC7u
fpCBs8uui7AS7/bKQlylDd2FDst41HeB6e66uNwgn5aMbg22wJ7JkdpFO4yU+b7L
AwhJbscBeaAnbbEsOSG2AZpWFntOIcSjrUf83wjGIXoH8vEkkvPRfoaqC5gOY8uY
EjGvlm8HEXU5gnBpVkwql1/il/j3BgJULKFdJNnOB+JMfrThZK252mb6p4rPZ7lQ
NApEa/6hoizrNwqwq3tG7bJjmEFxOdm/Ee6ckY10gDdm7HFDxlK5hRepWeLxRrFv
9mwR/yjpc+DHng==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:47 2025 by rpki-client