Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
File: qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft (raw, json)
Hash identifier: 9nAhMX/eIn1hTx3pOFpuAH8lv7VL8nFFtT2onpYETIM=
Subject key identifier: DE:AF:B2:E2:39:16:1E:8B:94:2C:34:D9:EB:30:9D:77:E8:4D:7B:C4
Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
Certificate issuer: /CN=aaca4f4a737ec09f335ac40633133328213efc3d
Certificate serial: 0194C388716D492ED4316A4F82E9E39090FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
Manifest number: 0B3F
Signing time: Sat 01 Feb 2025 22:01:26 +0000
Manifest this update: Sat 01 Feb 2025 22:01:26 +0000
Manifest next update: Sun 02 Feb 2025 22:01:26 +0000
Files and hashes: 1: 3FxUxvyalEPW74QSSmy9O2QWzSA.roa (hash: K7i9DvkPZQGo1B9Tr53E+YnX3gzSBh7iAMkmSak9hOM=)
2: qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl (hash: DhPQuQHGRP0d5dxXUXKhEca3xRbHXxMNYkPRHD8P2pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:71:6d:49:2e:d4:31:6a:4f:82:e9:e3:90:90:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d
Validity
Not Before: Feb 1 22:01:26 2025 GMT
Not After : Feb 2 22:01:26 2025 GMT
Subject: CN=deafb2e239161e8b942c34d9eb309d77e84d7bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:08:e6:68:0c:68:9e:ca:10:94:37:bd:15:
4e:d7:3b:35:e7:b7:ec:4e:ba:1b:17:18:c1:cb:06:
c7:cf:a6:5b:24:15:1c:2c:5a:03:1c:66:2f:87:bf:
21:fb:fe:f2:94:ae:6d:ec:2d:49:36:e5:b9:7f:2b:
fe:6c:79:78:d9:2e:cb:51:91:be:fd:5c:15:78:75:
9d:bb:1c:1c:ec:8b:cd:44:d0:6a:d9:a3:ed:76:0b:
09:a2:d0:e5:f2:12:f0:d9:6d:4f:ee:dc:2d:1b:6d:
27:b5:56:fc:4e:fb:7b:c8:a0:ea:19:b6:6c:89:b9:
f6:e0:31:20:0a:78:31:20:31:6e:7e:5c:26:d9:a6:
4a:69:d0:90:e9:5a:47:e0:54:c4:c5:35:38:be:1d:
0b:dc:ee:64:a7:63:d8:e1:e3:b6:1a:ad:55:a8:47:
f9:ed:e9:8b:ac:79:4f:04:f5:4e:1e:93:5a:df:96:
8d:c2:16:ad:1a:d0:a7:de:1b:d4:f9:ed:dd:80:54:
4c:8b:98:0d:d4:67:6f:cf:be:27:7c:65:de:22:93:
26:ff:a0:0f:4b:ce:2d:a1:22:7c:58:53:e5:48:cd:
25:80:16:1c:0d:10:07:f3:83:2a:a0:52:9d:db:f9:
8e:8e:d7:1f:bd:a1:87:3e:d2:02:a3:f0:f8:79:38:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AF:B2:E2:39:16:1E:8B:94:2C:34:D9:EB:30:9D:77:E8:4D:7B:C4
X509v3 Authority Key Identifier:
keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:3c:be:6a:e9:80:2c:89:df:22:0e:79:a5:70:29:79:d8:3c:
47:ee:2b:66:78:2a:f2:e1:f0:fb:61:27:c7:23:57:32:e8:49:
75:d3:4c:83:a3:4b:27:ef:f5:13:3f:55:bb:d0:d9:9d:bc:f4:
50:0b:5a:ce:72:6f:bf:43:c6:4b:bb:8c:06:4c:8a:79:67:d0:
62:64:22:f9:63:7f:0a:a2:b4:af:7a:14:20:ec:de:aa:d2:1d:
d5:84:ab:8c:75:61:b5:51:67:a5:20:23:0e:63:d5:17:45:e0:
32:ee:44:60:9a:5a:f2:eb:bc:6c:56:50:cc:a6:8d:f9:87:55:
eb:20:cc:8f:dd:8c:30:2c:42:f7:21:77:e3:6b:a2:41:e1:58:
bb:8f:e2:72:48:d1:a8:b0:02:5f:41:6c:05:04:eb:ac:76:ff:
64:8d:58:7b:ac:9e:bc:76:86:52:bd:e3:47:1d:ec:d9:6e:cc:
f8:c3:fc:68:22:9d:a7:15:e6:c6:21:b6:71:96:0f:4d:c4:8f:
6f:3b:41:4e:3a:4e:28:4d:a2:71:6b:f1:3e:61:f5:31:69:c6:
39:39:d0:63:44:52:c9:19:49:40:21:1b:28:6e:dc:e2:f6:3f:
2d:63:84:7b:5d:6d:d1:94:82:22:b7:e5:fc:9e:85:f5:a3:99:
cd:e1:e7:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDiHFtSS7UMWpPgunjkJD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhY2E0ZjRhNzM3ZWMwOWYzMzVhYzQwNjMzMTMzMzI4MjEz
ZWZjM2QwHhcNMjUwMjAxMjIwMTI2WhcNMjUwMjAyMjIwMTI2WjAzMTEwLwYDVQQD
EyhkZWFmYjJlMjM5MTYxZThiOTQyYzM0ZDllYjMwOWQ3N2U4NGQ3YmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr04I5mgMaJ7KEJQ3vRVO1zs157fs
TrobFxjBywbHz6ZbJBUcLFoDHGYvh78h+/7ylK5t7C1JNuW5fyv+bHl42S7LUZG+
/VwVeHWduxwc7IvNRNBq2aPtdgsJotDl8hLw2W1P7twtG20ntVb8Tvt7yKDqGbZs
ibn24DEgCngxIDFuflwm2aZKadCQ6VpH4FTExTU4vh0L3O5kp2PY4eO2Gq1VqEf5
7emLrHlPBPVOHpNa35aNwhatGtCn3hvU+e3dgFRMi5gN1Gdvz74nfGXeIpMm/6AP
S84toSJ8WFPlSM0lgBYcDRAH84MqoFKd2/mOjtcfvaGHPtICo/D4eThTiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6vsuI5Fh6LlCw02eswnXfoTXvEMB8GA1UdIwQY
MBaAFKrKT0pzfsCfM1rEBjMTMyghPvw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMTg3NmEtZmFlMS00M2NjLWEyZDct
MzM0ZTZmMzMyMTgwLzEvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jMTg3NmEtZmFlMS00M2NjLWEyZDctMzM0ZTZmMzMyMTgw
LzEvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzjy+aumA
LInfIg55pXApedg8R+4rZngq8uHw+2EnxyNXMuhJddNMg6NLJ+/1Ez9Vu9DZnbz0
UAtaznJvv0PGS7uMBkyKeWfQYmQi+WN/CqK0r3oUIOzeqtId1YSrjHVhtVFnpSAj
DmPVF0XgMu5EYJpa8uu8bFZQzKaN+YdV6yDMj92MMCxC9yF342uiQeFYu4/ickjR
qLACX0FsBQTrrHb/ZI1Ye6yevHaGUr3jRx3s2W7M+MP8aCKdpxXmxiG2cZYPTcSP
bztBTjpOKE2icWvxPmH1MWnGOTnQY0RSyRlJQCEbKG7c4vY/LWOEe11t0ZSCIrfl
/J6F9aOZzeHnGQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:42 2025 by rpki-client