Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json)
Hash identifier: qHLtNJKAp8YlwB9tjUA+EVX0bdEcjeBzsADQ/vtF4nI=
Subject key identifier: 02:3B:59:32:DF:74:DF:5C:F2:EC:BB:8F:AF:B5:3C:18:42:41:B1:9C
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial: 0194C3BE885D9BE0C5F9F444F5857CE29A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
Manifest number: 11F7
Signing time: Sat 01 Feb 2025 23:00:31 +0000
Manifest this update: Sat 01 Feb 2025 23:00:31 +0000
Manifest next update: Sun 02 Feb 2025 23:00:31 +0000
Files and hashes: 1: YiH83ySN13U92VHOYGZ1qNFCvj0.roa (hash: B8hbjbe1F86HPut31UQL0FZp1i37mwSF9nd5leIYsNo=)
2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: RViei1nXEdpgTLRQTt4VAqU4s1zJK+HQw/1pO4vQHEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:88:5d:9b:e0:c5:f9:f4:44:f5:85:7c:e2:9a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Validity
Not Before: Feb 1 23:00:31 2025 GMT
Not After : Feb 2 23:00:31 2025 GMT
Subject: CN=023b5932df74df5cf2ecbb8fafb53c184241b19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:96:2a:92:0e:5c:6d:6b:12:88:ed:cd:31:
05:8b:20:42:3c:2f:c3:a9:0b:46:96:f9:bf:db:9f:
e5:fe:7d:82:56:e4:33:14:14:8b:bf:e3:74:e1:a0:
ee:94:ec:d4:af:17:49:87:1a:53:c7:16:c6:17:7f:
a8:0b:96:53:cb:b9:b6:22:e5:0a:04:c2:5f:12:d8:
36:61:3d:54:76:1c:77:93:c1:32:1c:fb:cf:61:b2:
e2:8e:e7:9a:fa:56:b1:1a:79:de:86:5e:96:c9:e7:
f3:a7:6f:3a:c8:c1:91:e7:ad:b2:05:37:c4:69:c2:
78:23:2d:b8:f2:53:7a:18:e0:b5:c4:88:24:51:86:
6a:aa:e9:94:95:3e:45:d6:85:78:a6:a4:3e:9d:62:
00:53:81:3a:0a:39:21:29:bc:eb:2c:7d:c1:10:d0:
89:94:22:31:41:dd:5b:c1:4f:db:1f:12:d6:f7:dd:
6d:28:45:c4:81:18:7a:27:6f:ca:cf:e1:9c:ba:4a:
81:bf:53:e8:39:e8:d7:18:f4:9b:50:47:25:6f:b0:
8c:bc:0b:fa:50:80:b5:55:49:f8:85:9d:92:5c:c4:
3e:44:25:14:ef:43:11:f8:f1:27:4a:ee:9b:dc:9d:
e3:38:a3:54:c8:87:ee:10:21:7e:14:f3:b7:a5:b2:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3B:59:32:DF:74:DF:5C:F2:EC:BB:8F:AF:B5:3C:18:42:41:B1:9C
X509v3 Authority Key Identifier:
keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a7:e7:d0:39:84:aa:b6:7c:6b:e9:9c:57:48:a9:fe:19:f9:
f3:d0:51:2d:c8:32:b1:e1:4d:45:43:ed:71:79:b3:ec:e1:3a:
79:c9:fe:0e:a5:2c:99:58:3a:df:65:8f:df:a3:67:4a:e2:48:
1a:68:2f:e8:a7:82:52:8d:fd:d1:b3:e1:3a:95:09:15:d0:5b:
98:9c:ce:2a:51:53:64:5a:d7:b5:ae:96:89:e7:f1:22:ff:83:
5f:29:f1:19:fb:14:fe:82:d0:05:d7:1c:6f:d0:de:5e:04:36:
e2:d7:37:08:eb:4c:c4:ce:65:bd:60:cf:86:9f:8c:d1:9c:c0:
bd:54:f2:48:f2:29:c7:28:c1:25:ad:69:76:87:62:c7:a6:a5:
6b:aa:cd:a7:ee:e8:ca:72:b7:e0:e3:c9:a9:1b:fa:07:1f:4d:
ed:56:54:71:65:2a:6c:af:fe:3d:74:70:4b:72:80:1f:b8:ca:
e6:67:dd:7f:27:7d:5e:bf:b7:99:3e:78:ba:94:20:97:84:a8:
17:ae:fb:15:1a:41:f2:5e:e0:8d:82:b3:b7:dc:f4:f7:8e:2c:
9f:da:09:7c:6a:28:e5:0e:82:ce:9f:bd:79:d4:cf:29:5b:ae:
8e:9b:32:6e:5c:a2:0d:c7:52:ec:12:b4:33:92:7c:03:7a:a0:
9f:e0:7f:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvohdm+DF+fRE9YV84pqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWE3YTc1NzZiMWIyMjk1OTBjMDkwZmQzNTZjMzgyZGZm
MzE1YjcwHhcNMjUwMjAxMjMwMDMxWhcNMjUwMjAyMjMwMDMxWjAzMTEwLwYDVQQD
EygwMjNiNTkzMmRmNzRkZjVjZjJlY2JiOGZhZmI1M2MxODQyNDFiMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3aWKpIOXG1rEojtzTEFiyBCPC/D
qQtGlvm/25/l/n2CVuQzFBSLv+N04aDulOzUrxdJhxpTxxbGF3+oC5ZTy7m2IuUK
BMJfEtg2YT1Udhx3k8EyHPvPYbLijuea+laxGnnehl6Wyefzp286yMGR562yBTfE
acJ4Iy248lN6GOC1xIgkUYZqqumUlT5F1oV4pqQ+nWIAU4E6CjkhKbzrLH3BENCJ
lCIxQd1bwU/bHxLW991tKEXEgRh6J2/Kz+GcukqBv1PoOejXGPSbUEclb7CMvAv6
UIC1VUn4hZ2SXMQ+RCUU70MR+PEnSu6b3J3jOKNUyIfuECF+FPO3pbLcnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAI7WTLfdN9c8uy7j6+1PBhCQbGcMB8GA1UdIwQY
MBaAFKiqenV2sbIpWQwJD9NWw4Lf8xW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lNWVkYjMtMGVhOC00NDIyLWIxNzUt
Zjc1MzQ1ODQ4ZTNmLzEvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lNWVkYjMtMGVhOC00NDIyLWIxNzUtZjc1MzQ1ODQ4ZTNm
LzEvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKfn0DmE
qrZ8a+mcV0ip/hn589BRLcgyseFNRUPtcXmz7OE6ecn+DqUsmVg632WP36NnSuJI
Gmgv6KeCUo390bPhOpUJFdBbmJzOKlFTZFrXta6WiefxIv+DXynxGfsU/oLQBdcc
b9DeXgQ24tc3COtMxM5lvWDPhp+M0ZzAvVTySPIpxyjBJa1pdodix6ala6rNp+7o
ynK34OPJqRv6Bx9N7VZUcWUqbK/+PXRwS3KAH7jK5mfdfyd9Xr+3mT54upQgl4So
F677FRpB8l7gjYKzt9z0944sn9oJfGoo5Q6Czp+9edTPKVuujpsyblyiDcdS7BK0
M5J8A3qgn+B/Jg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:11 2025 by rpki-client