Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
File: qvIogBSZWTJzeuf5_CJN8QIUElU.mft (raw, json)
Hash identifier: FHml+bXu76pJ/n9nh749UCiiwEQuXb4gkkruF//j9Q4=
Subject key identifier: B8:F0:FE:E2:AA:55:67:73:BF:FC:90:8B:EA:B7:62:92:52:95:56:FC
Authority key identifier: AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
Certificate issuer: /CN=aaf2288014995932737ae7f9fc224df102141255
Certificate serial: 019511A25F2284BD9A85A054368D26E51148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
Manifest number: 1191
Signing time: Mon 17 Feb 2025 02:00:08 +0000
Manifest this update: Mon 17 Feb 2025 02:00:08 +0000
Manifest next update: Tue 18 Feb 2025 02:00:08 +0000
Files and hashes: 1: qvIogBSZWTJzeuf5_CJN8QIUElU.crl (hash: 1Xg9tpCeCR4vgn0Ww7d6q611gkEupyZJ1cVRUrSnQmY=)
2: ssFjFRP8rOyA12qsYqju5Tngnd4.roa (hash: hIS1+X5/5zlmutztUW28Al86ZCC1Pn71/f8lra8GU0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:5f:22:84:bd:9a:85:a0:54:36:8d:26:e5:11:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf2288014995932737ae7f9fc224df102141255
Validity
Not Before: Feb 17 02:00:08 2025 GMT
Not After : Feb 18 02:00:08 2025 GMT
Subject: CN=b8f0fee2aa556773bffc908beab76292529556fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:a3:4a:b7:34:c5:74:ef:e4:d1:f7:ca:46:
e9:5f:d6:3b:82:0b:a4:ff:bc:f1:f5:0e:fd:0c:27:
bb:34:15:98:0a:fd:6d:e7:b7:5a:bb:99:48:95:27:
31:6a:09:18:5c:f1:fd:fb:74:b9:a9:a0:c8:79:f4:
12:71:29:1d:e8:96:f5:43:d1:bd:f6:7f:6c:90:38:
ed:a5:fa:7f:e8:83:2a:39:b9:8b:54:0c:8e:23:6c:
9a:89:0f:3e:43:e3:cd:33:42:23:fb:cb:bf:ca:0c:
19:25:87:4a:a3:22:2d:d1:f6:6d:d1:df:a9:34:b7:
e8:7d:4f:cb:a8:43:7c:ea:3f:82:6d:0f:04:5e:40:
b5:61:45:a4:2e:8f:ac:44:da:7b:fa:ab:67:64:3d:
a0:67:89:6a:99:5f:85:fc:28:75:f2:60:db:69:68:
0f:70:81:59:17:d2:ef:f1:2f:bd:da:c8:b4:9b:4f:
68:9d:56:7d:9d:fe:2d:4b:cc:45:51:e0:6b:cc:54:
e1:3b:d8:c3:7c:d2:89:1e:54:9e:13:72:51:33:e7:
44:eb:08:b2:30:4c:d0:6d:38:f0:7f:84:8b:0d:47:
8a:58:52:b5:f7:5a:cb:7e:ca:b5:c2:e1:d2:97:9b:
65:f7:34:b0:d4:78:a5:cb:df:cf:1f:00:e3:70:d9:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F0:FE:E2:AA:55:67:73:BF:FC:90:8B:EA:B7:62:92:52:95:56:FC
X509v3 Authority Key Identifier:
keyid:AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d1:42:71:0a:53:ee:5e:91:4b:ab:40:c1:e5:c4:e2:e7:5f:
e4:c2:13:8a:c9:4f:c2:8e:0f:2c:4f:b0:29:cd:65:4b:6a:ec:
e1:d5:70:c9:19:8c:9d:e0:54:2e:de:10:5d:ac:27:cd:42:46:
d8:35:e6:77:de:00:b0:db:e0:39:f7:74:5b:90:09:78:be:1e:
9d:34:8f:68:24:fb:02:d3:17:7e:53:c9:c0:e6:27:aa:09:49:
cb:a9:f4:c5:28:9c:a2:25:e6:3e:9a:84:20:41:ba:dc:f1:cc:
2f:90:ab:fd:8d:c0:30:23:f8:d5:29:2f:f8:38:4a:d3:5d:9c:
d7:8e:80:ea:cd:ed:71:c2:ad:2a:75:76:6f:2e:b5:b7:1c:4e:
8b:84:f7:ed:2c:73:fc:28:d0:fe:54:5c:90:ff:e5:56:1c:fb:
68:19:93:0f:14:5f:5d:cc:55:c2:ca:fe:6e:83:aa:76:5b:39:
9e:ff:65:a4:c3:2b:04:86:ab:ac:44:83:dc:43:38:b1:29:f1:
a7:d8:8e:d9:49:eb:16:d7:9f:cf:b4:b9:76:b3:0d:bd:cc:98:
69:57:29:ee:3f:38:f6:0e:84:ed:37:35:d1:c6:5f:af:ac:f3:
b4:b1:ed:76:3f:36:0c:76:a6:50:00:1a:28:1e:08:1b:95:aa:
b1:48:34:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURol8ihL2ahaBUNo0m5RFIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZjIyODgwMTQ5OTU5MzI3MzdhZTdmOWZjMjI0ZGYxMDIx
NDEyNTUwHhcNMjUwMjE3MDIwMDA4WhcNMjUwMjE4MDIwMDA4WjAzMTEwLwYDVQQD
EyhiOGYwZmVlMmFhNTU2NzczYmZmYzkwOGJlYWI3NjI5MjUyOTU1NmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdujSrc0xXTv5NH3ykbpX9Y7gguk
/7zx9Q79DCe7NBWYCv1t57dau5lIlScxagkYXPH9+3S5qaDIefQScSkd6Jb1Q9G9
9n9skDjtpfp/6IMqObmLVAyOI2yaiQ8+Q+PNM0Ij+8u/ygwZJYdKoyIt0fZt0d+p
NLfofU/LqEN86j+CbQ8EXkC1YUWkLo+sRNp7+qtnZD2gZ4lqmV+F/Ch18mDbaWgP
cIFZF9Lv8S+92si0m09onVZ9nf4tS8xFUeBrzFThO9jDfNKJHlSeE3JRM+dE6wiy
MEzQbTjwf4SLDUeKWFK191rLfsq1wuHSl5tl9zSw1Hily9/PHwDjcNlwGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjw/uKqVWdzv/yQi+q3YpJSlVb8MB8GA1UdIwQY
MBaAFKryKIAUmVkyc3rn+fwiTfECFBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZJb2dCU1pXVEp6ZXVmNV9DSk44UUlVRWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lYTA2MjMtMzZjMS00ZjNhLWJmZjMt
NjMxNGI5OGJkYTQyLzEvcXZJb2dCU1pXVEp6ZXVmNV9DSk44UUlVRWxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lYTA2MjMtMzZjMS00ZjNhLWJmZjMtNjMxNGI5OGJkYTQy
LzEvcXZJb2dCU1pXVEp6ZXVmNV9DSk44UUlVRWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9FCcQpT
7l6RS6tAweXE4udf5MITislPwo4PLE+wKc1lS2rs4dVwyRmMneBULt4QXawnzUJG
2DXmd94AsNvgOfd0W5AJeL4enTSPaCT7AtMXflPJwOYnqglJy6n0xSicoiXmPpqE
IEG63PHML5Cr/Y3AMCP41Skv+DhK012c146A6s3tccKtKnV2by61txxOi4T37Sxz
/CjQ/lRckP/lVhz7aBmTDxRfXcxVwsr+boOqdls5nv9lpMMrBIarrESD3EM4sSnx
p9iO2UnrFtefz7S5drMNvcyYaVcp7j849g6E7Tc10cZfr6zztLHtdj82DHamUAAa
KB4IG5WqsUg0mg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:53 2025 by rpki-client