Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier: I6tLklDiRRc748dxFTtB3rPw79ci9QCkTB06rWTH5Jg=
Subject key identifier: 09:C2:73:39:E0:65:DB:85:E6:9A:19:8A:6F:AA:75:52:50:ED:87:D0
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 019511A27246A9A8973BA429BE30334975F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 02:00:13 +0000
Manifest this update: Mon 17 Feb 2025 02:00:13 +0000
Manifest next update: Tue 18 Feb 2025 02:00:13 +0000
Files and hashes: 1: OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa (hash: mqfa0ZehsylIV/d7nzWZG94iCnmV9oQHVVnGpSyC+og=)
2: pdwDWOzc3QzXOsiEO7HIgZ0hQdQ.roa (hash: m/RIMhJds2RFVXbpbtSSU1vxyz5pEJiQgY8y39qh5vk=)
3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: KFGvKvQWL5vj3E1fIqvu83gFtk3jNNcO9LG4RxGOm5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:72:46:a9:a8:97:3b:a4:29:be:30:33:49:75:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Feb 17 02:00:13 2025 GMT
Not After : Feb 18 02:00:13 2025 GMT
Subject: CN=09c27339e065db85e69a198a6faa755250ed87d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:f6:7a:48:53:fd:8c:9b:5c:f2:d6:74:16:
a2:0a:e6:d6:63:0e:5f:05:67:8a:4e:d0:9e:67:ef:
15:4e:65:e9:f5:3f:c9:ec:ef:99:89:12:ca:e5:b5:
b1:47:da:cc:1f:91:3b:a2:12:8b:c7:8b:5f:93:cd:
c3:95:92:37:b7:dc:b8:eb:96:8c:b5:3f:ef:bc:6f:
ea:81:4e:f6:77:7b:36:9d:dc:69:8d:cc:6d:a0:5e:
9d:8e:81:2d:28:ee:be:02:9b:f5:c0:63:92:32:b5:
78:a1:d1:68:bf:47:2e:48:77:53:0c:c4:e7:3a:10:
9d:4a:cc:ec:73:06:41:fc:a5:f8:b2:a7:c8:ce:0a:
60:24:7d:61:e7:d9:4c:2e:73:d7:c7:65:7b:60:d0:
1d:8f:7b:06:03:23:8d:4f:f4:29:78:bb:15:8e:68:
8a:99:ac:50:2c:91:1f:76:d0:c9:9d:5b:52:25:29:
6f:bc:dd:c7:68:44:b5:25:47:57:fd:b2:a2:72:ba:
3a:64:40:0a:28:62:0e:9d:1c:23:9f:89:a8:e5:86:
78:e4:35:7c:e5:28:67:df:94:ce:84:87:c0:f5:3c:
6e:57:66:4c:f9:74:48:07:e9:2d:e0:09:42:b5:33:
4e:6e:24:df:43:1a:0d:22:8e:0a:93:b8:3e:40:54:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C2:73:39:E0:65:DB:85:E6:9A:19:8A:6F:AA:75:52:50:ED:87:D0
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:25:d1:06:02:5d:7a:95:2c:08:a6:55:c0:b2:e2:bb:a4:64:
ab:13:7b:d5:60:bc:96:41:cb:0b:a7:90:42:8f:a8:e7:8e:e5:
d4:57:31:19:01:a8:98:25:a0:03:b3:51:8c:97:99:65:ca:dd:
4f:5e:fa:c7:f0:07:f2:b7:cf:e6:6c:79:09:59:7a:25:3c:d0:
2d:c6:01:39:90:45:51:cd:81:ea:1c:3b:ef:46:ad:c7:15:82:
b3:d4:e1:ff:b6:2e:93:f2:be:38:1f:91:a1:28:20:fa:93:b2:
b5:a2:93:49:27:f8:69:5b:44:a0:ec:16:81:ad:da:5c:8b:0b:
22:94:a4:74:d5:0d:5e:ac:8a:6f:4f:d6:ec:66:4d:2e:3c:b7:
4e:ff:91:ea:71:f4:77:15:fb:1b:c4:8b:e0:f6:4d:c9:f1:44:
f2:33:cc:7c:66:ba:09:94:92:65:af:f3:a2:bd:eb:83:ba:18:
9f:01:be:82:92:26:4d:3c:a0:1c:e6:10:47:8c:61:4e:ea:e8:
37:48:7d:3e:eb:c8:fb:50:16:a4:38:eb:59:bc:d3:d2:8f:06:
75:3d:a2:11:88:fd:36:eb:d2:af:12:49:9e:b8:bd:1e:9c:fb:
c7:56:9f:9a:a8:b1:a8:ee:20:27:6d:fe:28:f0:c3:27:f2:58:
06:e9:68:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURonJGqaiXO6QpvjAzSXX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDJkMDc3NDg1YTE1ZThhMjU0YTQ5ZWRkOTk0ZDRmYzJh
OTA4YTYwHhcNMjUwMjE3MDIwMDEzWhcNMjUwMjE4MDIwMDEzWjAzMTEwLwYDVQQD
EygwOWMyNzMzOWUwNjVkYjg1ZTY5YTE5OGE2ZmFhNzU1MjUwZWQ4N2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ/2ekhT/YybXPLWdBaiCubWYw5f
BWeKTtCeZ+8VTmXp9T/J7O+ZiRLK5bWxR9rMH5E7ohKLx4tfk83DlZI3t9y465aM
tT/vvG/qgU72d3s2ndxpjcxtoF6djoEtKO6+Apv1wGOSMrV4odFov0cuSHdTDMTn
OhCdSszscwZB/KX4sqfIzgpgJH1h59lMLnPXx2V7YNAdj3sGAyONT/QpeLsVjmiK
maxQLJEfdtDJnVtSJSlvvN3HaES1JUdX/bKicro6ZEAKKGIOnRwjn4mo5YZ45DV8
5Shn35TOhIfA9TxuV2ZM+XRIB+kt4AlCtTNObiTfQxoNIo4Kk7g+QFTC5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnCczngZduF5poZim+qdVJQ7YfQMB8GA1UdIwQY
MBaAFM0C0HdIWhXoolSknt2ZTU/CqQimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NzE0ZjEtYzNkNi00ODc1LWEzNmEt
MzdlODBkYWI5MzAyLzEvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82NzE0ZjEtYzNkNi00ODc1LWEzNmEtMzdlODBkYWI5MzAy
LzEvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyXRBgJd
epUsCKZVwLLiu6RkqxN71WC8lkHLC6eQQo+o547l1FcxGQGomCWgA7NRjJeZZcrd
T176x/AH8rfP5mx5CVl6JTzQLcYBOZBFUc2B6hw770atxxWCs9Th/7Yuk/K+OB+R
oSgg+pOytaKTSSf4aVtEoOwWga3aXIsLIpSkdNUNXqyKb0/W7GZNLjy3Tv+R6nH0
dxX7G8SL4PZNyfFE8jPMfGa6CZSSZa/zor3rg7oYnwG+gpImTTygHOYQR4xhTuro
N0h9PuvI+1AWpDjrWbzT0o8GdT2iEYj9NuvSrxJJnri9Hpz7x1afmqixqO4gJ23+
KPDDJ/JYBuloxQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:32 2025 by rpki-client