Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json)
Hash identifier: AqTcXE0RZplt3sTtteP3VQXQ0w8jsyjaDKDNhmbQNgg=
Subject key identifier: 05:BA:5A:1B:7F:35:55:BD:8D:01:C6:92:AD:42:50:FA:1A:C1:88:57
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 0195116BF1C2AB88B909E2ADB5BEEDEDBF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
Manifest number: 09CB
Signing time: Mon 17 Feb 2025 01:00:41 +0000
Manifest this update: Mon 17 Feb 2025 01:00:41 +0000
Manifest next update: Tue 18 Feb 2025 01:00:41 +0000
Files and hashes: 1: 8nlWTKhyMjB_CH2EMsOrSJHd2IE.roa (hash: mJ1SJpAndBJG+LB/ssF0bKHufcREx+RUY5ZeHveZh6w=)
2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: wZbBm/wggLwhoJ9w5nGtPkzp9QDxs2CBZbAxKCGEKjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:f1:c2:ab:88:b9:09:e2:ad:b5:be:ed:ed:bf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Feb 17 01:00:41 2025 GMT
Not After : Feb 18 01:00:41 2025 GMT
Subject: CN=05ba5a1b7f3555bd8d01c692ad4250fa1ac18857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:6a:3f:8a:16:d4:37:41:63:47:8f:12:06:
60:cc:02:50:ab:5e:83:4f:38:69:16:1f:22:17:74:
80:01:16:a8:05:9c:81:d9:29:cd:36:6c:1d:c1:c5:
8d:b7:fd:95:26:8f:7d:42:a9:75:23:56:91:4a:3c:
b8:ea:59:90:1b:52:89:09:e1:29:a5:65:f5:44:2e:
95:b5:be:4b:9d:03:8e:8d:88:7f:5a:ae:bb:fc:76:
c3:61:23:41:2d:b3:e3:62:92:e9:49:a3:df:76:a3:
27:ea:d2:07:32:be:7b:b0:bc:72:e6:df:2d:5e:1c:
c1:8a:18:d8:ab:5c:30:25:10:92:29:ce:f7:67:8d:
34:73:3c:24:d7:2d:4a:47:b6:20:bb:1b:35:e2:3e:
17:1d:0c:3f:70:3b:7d:f5:98:d1:ee:1f:d3:c0:92:
08:ef:73:71:f6:5a:17:ac:7c:7b:1b:98:6a:57:3c:
01:8e:78:db:f6:ca:4e:a4:a2:b4:d5:e8:f2:43:d0:
62:81:10:fe:3c:5d:83:db:71:0e:e9:fb:90:f3:9d:
f5:d0:81:87:dc:9b:e4:a3:49:ae:39:ea:50:70:db:
d2:6b:68:92:61:5d:d8:e7:63:c1:eb:b8:cf:c8:b0:
45:04:f5:4f:b7:89:62:7a:18:44:6c:6e:a6:ef:86:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BA:5A:1B:7F:35:55:BD:8D:01:C6:92:AD:42:50:FA:1A:C1:88:57
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ca:a6:05:35:f8:93:fb:63:c3:3e:41:9b:9d:ef:9e:67:5f:
76:33:3c:7e:6c:17:ca:4d:74:f6:26:87:c2:d0:18:dc:f5:d6:
2e:4a:f4:a1:59:7d:54:1e:59:17:c1:10:6e:d3:09:f7:13:d6:
1d:d8:7b:7a:2b:92:c4:60:c1:34:a6:95:e2:1c:39:ec:67:2b:
6e:f5:3a:8c:74:35:c3:74:3a:a7:29:28:5d:e7:96:2e:b9:09:
e6:0c:8b:28:a4:3c:c8:73:1b:96:6a:41:54:6e:78:12:ba:9c:
18:0c:64:4d:36:b1:96:11:2c:9d:56:df:72:a2:94:71:a4:d7:
08:80:3f:bc:00:fe:23:74:21:ad:2e:e9:c2:22:50:49:69:2e:
96:01:9d:05:1f:0e:a0:58:a5:81:01:d6:73:a4:23:5f:1c:77:
89:9f:cb:23:5e:34:c0:8d:1b:40:99:c3:08:43:62:a9:6d:8f:
b4:37:81:70:7f:92:a5:5c:7b:e1:1f:ae:e4:3a:c5:c5:fc:60:
d0:e6:ce:bc:70:00:ec:c7:12:bb:4b:0f:8b:4e:4d:33:25:8c:
c2:71:fa:4b:89:08:9d:38:a2:78:eb:c6:0c:91:84:94:bb:5c:
cd:02:6a:97:47:f7:7c:7d:dd:50:bf:7d:54:46:74:b3:d9:37:
c4:81:a5:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa/HCq4i5CeKttb7t7b8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OTI5Y2IzNDNiZGYzY2YyMDRjNDA1YWYwYTU1MzNlYTRi
MDkzM2MwHhcNMjUwMjE3MDEwMDQxWhcNMjUwMjE4MDEwMDQxWjAzMTEwLwYDVQQD
EygwNWJhNWExYjdmMzU1NWJkOGQwMWM2OTJhZDQyNTBmYTFhYzE4ODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeNqP4oW1DdBY0ePEgZgzAJQq16D
TzhpFh8iF3SAARaoBZyB2SnNNmwdwcWNt/2VJo99Qql1I1aRSjy46lmQG1KJCeEp
pWX1RC6Vtb5LnQOOjYh/Wq67/HbDYSNBLbPjYpLpSaPfdqMn6tIHMr57sLxy5t8t
XhzBihjYq1wwJRCSKc73Z400czwk1y1KR7Yguxs14j4XHQw/cDt99ZjR7h/TwJII
73Nx9loXrHx7G5hqVzwBjnjb9spOpKK01ejyQ9BigRD+PF2D23EO6fuQ85310IGH
3Jvko0muOepQcNvSa2iSYV3Y52PB67jPyLBFBPVPt4liehhEbG6m74aNdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAW6Wht/NVW9jQHGkq1CUPoawYhXMB8GA1UdIwQY
MBaAFKiSnLNDvfPPIExAWvClUz6ksJM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iN2NjMzYtNzc3ZS00NGI5LWFkNjIt
NTlkNDRlZjdlNGZmLzEvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iN2NjMzYtNzc3ZS00NGI5LWFkNjItNTlkNDRlZjdlNGZm
LzEvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMqmBTX4
k/tjwz5Bm53vnmdfdjM8fmwXyk109iaHwtAY3PXWLkr0oVl9VB5ZF8EQbtMJ9xPW
Hdh7eiuSxGDBNKaV4hw57GcrbvU6jHQ1w3Q6pykoXeeWLrkJ5gyLKKQ8yHMblmpB
VG54ErqcGAxkTTaxlhEsnVbfcqKUcaTXCIA/vAD+I3QhrS7pwiJQSWkulgGdBR8O
oFilgQHWc6QjXxx3iZ/LI140wI0bQJnDCENiqW2PtDeBcH+SpVx74R+u5DrFxfxg
0ObOvHAA7McSu0sPi05NMyWMwnH6S4kInTiieOvGDJGElLtczQJql0f3fH3dUL99
VEZ0s9k3xIGlxw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:38 2025 by rpki-client