Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
File: vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json)
Hash identifier: vyrriwUYa0s9tTbhTAFO8hE9e0FzxTFAptDxqmgTqb8=
Subject key identifier: C4:5C:FB:6E:2F:98:64:23:1B:E7:98:89:EA:73:F8:E4:BD:9A:A3:A3
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Certificate issuer: /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial: 01951090142CC2CD78F6E9A0BC28DC538F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
Manifest number: 0A1D
Signing time: Sun 16 Feb 2025 21:00:32 +0000
Manifest this update: Sun 16 Feb 2025 21:00:32 +0000
Manifest next update: Mon 17 Feb 2025 21:00:32 +0000
Files and hashes: 1: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: BpgEzgdNr6aIQL+SIDH/GkwPR4EaUF3o4AWh/u1sJRw=)
2: zW8H9236KdsFPYHIiVwdIlsjLeA.roa (hash: A3BKCbMqcBICoyGdtSjfGVXeNlYAC0vfSMBZfdSiSAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:14:2c:c2:cd:78:f6:e9:a0:bc:28:dc:53:8f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
Validity
Not Before: Feb 16 21:00:32 2025 GMT
Not After : Feb 17 21:00:32 2025 GMT
Subject: CN=c45cfb6e2f9864231be79889ea73f8e4bd9aa3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:69:f8:b7:b1:98:f1:0e:d0:4b:78:b4:ce:
05:0e:2e:86:dd:26:3b:11:89:c5:f9:b7:52:73:fc:
1e:78:cb:6e:77:f3:96:c7:81:ef:75:8e:e5:b2:15:
a3:64:95:2b:48:e6:f3:78:39:bd:02:ed:8d:fc:4d:
b0:56:7d:f9:3c:c3:d4:f2:7a:d9:ea:92:f1:91:0e:
4a:8f:dc:bc:43:1f:4d:53:65:a8:18:08:3f:2c:a8:
21:81:d8:8e:05:67:3f:4c:d7:4a:91:fd:9b:ef:71:
11:c4:4b:97:88:89:ce:e1:2c:41:3c:a5:52:a1:d5:
e3:24:81:75:4f:8c:39:7e:f4:59:35:3a:68:a6:c6:
f2:a7:d0:9c:d4:7f:79:fa:74:fe:31:17:f4:7d:c6:
5d:19:1e:c4:4a:03:b4:f5:1a:23:b5:d0:bf:74:26:
fb:ad:ab:7f:aa:6c:32:ee:20:5f:84:b8:5f:49:fb:
85:b5:d9:1d:bb:65:07:71:58:98:30:16:16:b7:f3:
81:87:e7:d0:b2:21:ed:a1:db:c2:c4:b6:3b:19:ec:
0c:82:03:10:5e:ac:cd:00:45:f1:7a:9a:9a:86:6c:
df:50:b0:65:8f:6b:28:e0:0a:b2:ed:8f:29:66:e8:
1b:8e:3f:98:6c:49:35:e5:98:9e:ba:f5:18:24:da:
80:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5C:FB:6E:2F:98:64:23:1B:E7:98:89:EA:73:F8:E4:BD:9A:A3:A3
X509v3 Authority Key Identifier:
keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:42:ae:64:b3:11:56:66:d5:4b:de:5b:08:9d:67:b0:26:37:
cc:b0:a9:ad:79:68:59:74:c4:cb:b1:67:82:84:56:de:78:0a:
c3:29:c5:39:dc:7b:89:53:c8:37:3c:65:1c:a6:ef:7a:43:27:
3e:76:1c:3f:5c:6e:fa:77:22:11:0e:ab:fe:a8:5a:1b:d6:9c:
6d:70:d8:dc:da:63:a8:97:13:81:a3:76:fb:57:74:7d:ea:39:
f7:81:f5:f5:86:8a:70:eb:9f:ce:8a:d2:12:fb:40:e8:2f:eb:
3f:f0:91:e0:d0:e0:a7:08:c7:5b:ad:d9:38:e4:d0:09:71:66:
4d:7b:b9:e6:c4:45:94:a5:e1:d0:7e:a3:2b:d1:b2:a6:98:25:
01:b8:ff:33:5e:f6:a2:74:d4:5a:95:9d:66:36:16:1c:dc:4e:
5c:b1:70:9d:87:ac:d6:12:04:a5:33:15:d2:73:f4:94:20:1e:
b1:2e:4b:ee:a9:5c:0a:e3:22:6f:44:be:8b:7e:cf:61:d8:c0:
21:83:d3:d3:d9:74:2c:6d:1d:4a:6a:77:a2:88:2f:31:cd:c3:
c1:8f:d4:90:e1:52:ba:3d:39:eb:42:d0:06:c5:2c:4c:1a:0c:
be:23:5a:cb:95:95:f9:34:47:2f:e5:c7:ca:87:54:81:8f:09:
bd:77:49:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQkBQsws149umgvCjcU494MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMDI2MTY1NTQ2MzIzNTY0NTBiYzRiYjRiNmRhY2ZjNzlk
ZjMwMjUwHhcNMjUwMjE2MjEwMDMyWhcNMjUwMjE3MjEwMDMyWjAzMTEwLwYDVQQD
EyhjNDVjZmI2ZTJmOTg2NDIzMWJlNzk4ODllYTczZjhlNGJkOWFhM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMpp+LexmPEO0Et4tM4FDi6G3SY7
EYnF+bdSc/weeMtud/OWx4HvdY7lshWjZJUrSObzeDm9Au2N/E2wVn35PMPU8nrZ
6pLxkQ5Kj9y8Qx9NU2WoGAg/LKghgdiOBWc/TNdKkf2b73ERxEuXiInO4SxBPKVS
odXjJIF1T4w5fvRZNTpopsbyp9Cc1H95+nT+MRf0fcZdGR7ESgO09RojtdC/dCb7
rat/qmwy7iBfhLhfSfuFtdkdu2UHcViYMBYWt/OBh+fQsiHtodvCxLY7GewMggMQ
XqzNAEXxepqahmzfULBlj2so4Aqy7Y8pZugbjj+YbEk15ZieuvUYJNqASwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRc+24vmGQjG+eYiepz+OS9mqOjMB8GA1UdIwQY
MBaAFL0CYWVUYyNWRQvEu0ttrPx53zAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlFKaFpWUmpJMVpGQzhTN1MyMnNfSG5mTUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80YjYzZWEtZTRmMC00NGIwLWJkMmUt
OWUxOWQwOGNiNzFmLzEvdlFKaFpWUmpJMVpGQzhTN1MyMnNfSG5mTUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80YjYzZWEtZTRmMC00NGIwLWJkMmUtOWUxOWQwOGNiNzFm
LzEvdlFKaFpWUmpJMVpGQzhTN1MyMnNfSG5mTUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0KuZLMR
VmbVS95bCJ1nsCY3zLCprXloWXTEy7FngoRW3ngKwynFOdx7iVPINzxlHKbvekMn
PnYcP1xu+nciEQ6r/qhaG9acbXDY3NpjqJcTgaN2+1d0feo594H19YaKcOufzorS
EvtA6C/rP/CR4NDgpwjHW63ZOOTQCXFmTXu55sRFlKXh0H6jK9GyppglAbj/M172
onTUWpWdZjYWHNxOXLFwnYes1hIEpTMV0nP0lCAesS5L7qlcCuMib0S+i37PYdjA
IYPT09l0LG0dSmp3oogvMc3DwY/UkOFSuj0560LQBsUsTBoMviNay5WV+TRHL+XH
yodUgY8JvXdJ5Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:03 2025 by rpki-client