Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: Z2WJI6nQMpBlHsg7+abBkoKavAzqEZGRfBJotUJVQ7M=
Subject key identifier: 49:E8:DC:A3:98:A2:05:EF:46:3C:69:F5:5A:D2:5F:BB:D9:EE:DD:5E
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 0195116BE04BC4BD051232C89287632700EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 0167
Signing time: Mon 17 Feb 2025 01:00:37 +0000
Manifest this update: Mon 17 Feb 2025 01:00:37 +0000
Manifest next update: Tue 18 Feb 2025 01:00:37 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: FrODxRBcgl9RikGc6YEVQ0f4f55SClmdxubLxYSYwhA=)
2: DxWkaJkNeo1GnfX8PTB6m_7NDo8.roa (hash: 1C13Qsc+uAlJmXy/kak788lVFXMyWIaA+AZiv7RcjGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:e0:4b:c4:bd:05:12:32:c8:92:87:63:27:00:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: Feb 17 01:00:37 2025 GMT
Not After : Feb 18 01:00:37 2025 GMT
Subject: CN=49e8dca398a205ef463c69f55ad25fbbd9eedd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:fb:4b:27:8d:3a:80:58:b0:2d:db:7d:e9:
8a:27:19:94:57:cc:64:64:19:4d:90:8d:a1:e6:9e:
20:ff:6e:35:16:a6:2b:db:47:e5:b5:88:39:17:84:
67:2b:91:49:40:7f:af:49:bb:e5:b8:67:3d:97:b9:
3c:ce:20:b2:b7:67:f9:42:eb:12:ac:46:dd:db:f9:
5d:bb:00:b4:17:88:e3:a8:1f:97:10:c4:78:b7:a7:
27:18:df:97:e3:02:90:ab:5e:ad:14:1b:0d:8c:42:
14:68:5d:36:14:e0:d0:e9:37:b5:2d:aa:f8:1f:39:
23:ff:70:b1:7d:4f:7d:66:e3:da:a1:f4:7c:61:52:
48:6d:0e:61:03:dc:fe:19:e6:81:b4:37:34:43:45:
3a:f8:4e:7b:07:20:8f:9e:d4:21:5b:51:a6:32:fb:
0e:bf:de:25:e4:7d:0d:2e:03:cc:af:cc:51:9e:64:
ce:72:9c:af:3c:9b:c8:ec:7f:d7:b0:05:6b:e2:60:
4b:8c:5f:2a:2b:bf:0d:74:d1:74:e3:9a:3f:0b:a4:
07:57:ad:7c:1a:66:47:55:5a:68:9b:4b:52:f8:8c:
a9:c2:01:60:7e:36:b6:3e:8d:48:57:80:21:d7:2f:
30:ba:3b:02:8a:c0:aa:1c:fc:26:6d:97:d5:35:d0:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E8:DC:A3:98:A2:05:EF:46:3C:69:F5:5A:D2:5F:BB:D9:EE:DD:5E
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:df:e9:8c:f7:ee:a0:9d:69:00:68:0e:c8:5e:2e:83:5d:65:
0f:9e:10:b2:28:56:d9:f8:0c:8e:b1:95:a0:a4:75:dd:f5:60:
b1:57:86:74:bc:95:ac:05:06:8b:c6:cc:f5:be:d1:e9:52:fe:
0f:b9:1b:09:5f:a9:ba:80:b6:cc:39:21:92:b6:fc:d4:ce:87:
e0:04:80:a1:27:22:16:03:9a:71:31:5d:e3:31:c8:c0:7b:a1:
61:0e:7a:f7:73:d1:32:26:93:1d:71:9a:2e:5b:9e:e9:33:9d:
ee:df:21:b7:84:5d:99:8b:0c:53:fb:90:f3:6c:30:e0:85:09:
8a:00:17:d4:84:f5:82:2d:d6:1e:78:38:a4:ec:b3:e6:63:68:
20:d0:cc:8f:63:ef:3d:35:e3:69:4f:33:34:27:47:2c:11:a7:
db:57:9a:a8:2a:4a:67:eb:22:68:18:5a:cf:4c:e1:61:18:89:
1a:ac:18:35:d7:e0:59:ed:b6:b6:bd:3d:ae:9b:58:97:b6:56:
48:31:fe:cc:7f:eb:2f:69:d3:51:b1:5a:a6:4e:b4:2b:81:48:
09:72:aa:ca:dd:e2:55:10:ee:08:e2:6b:34:8f:63:1d:ec:0d:
45:0f:22:31:4b:0c:2d:5f:4d:dd:ec:84:99:08:49:d6:ea:5b:
a4:16:ed:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa+BLxL0FEjLIkodjJwDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMTQyZGYyZjY3MDk0MGNjZjVhNGIyN2EwZDBjOTg3ZWNj
ODg2NTYwHhcNMjUwMjE3MDEwMDM3WhcNMjUwMjE4MDEwMDM3WjAzMTEwLwYDVQQD
Eyg0OWU4ZGNhMzk4YTIwNWVmNDYzYzY5ZjU1YWQyNWZiYmQ5ZWVkZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYD7SyeNOoBYsC3bfemKJxmUV8xk
ZBlNkI2h5p4g/241FqYr20fltYg5F4RnK5FJQH+vSbvluGc9l7k8ziCyt2f5QusS
rEbd2/lduwC0F4jjqB+XEMR4t6cnGN+X4wKQq16tFBsNjEIUaF02FODQ6Te1Lar4
Hzkj/3CxfU99ZuPaofR8YVJIbQ5hA9z+GeaBtDc0Q0U6+E57ByCPntQhW1GmMvsO
v94l5H0NLgPMr8xRnmTOcpyvPJvI7H/XsAVr4mBLjF8qK78NdNF045o/C6QHV618
GmZHVVpom0tS+IypwgFgfja2Po1IV4Ah1y8wujsCisCqHPwmbZfVNdDDGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEno3KOYogXvRjxp9VrSX7vZ7t1eMB8GA1UdIwQY
MBaAFNMULfL2cJQMz1pLJ6DQyYfsyIZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjIt
NjMyY2FlZWY0NTg0LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjItNjMyY2FlZWY0NTg0
LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbd/pjPfu
oJ1pAGgOyF4ug11lD54QsihW2fgMjrGVoKR13fVgsVeGdLyVrAUGi8bM9b7R6VL+
D7kbCV+puoC2zDkhkrb81M6H4ASAoSciFgOacTFd4zHIwHuhYQ5693PRMiaTHXGa
Llue6TOd7t8ht4RdmYsMU/uQ82ww4IUJigAX1IT1gi3WHng4pOyz5mNoINDMj2Pv
PTXjaU8zNCdHLBGn21eaqCpKZ+siaBhaz0zhYRiJGqwYNdfgWe22tr09rptYl7ZW
SDH+zH/rL2nTUbFapk60K4FICXKqyt3iVRDuCOJrNI9jHewNRQ8iMUsMLV9N3eyE
mQhJ1upbpBbtFw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:26 2025 by rpki-client