Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json)
Hash identifier: AZKDQcnE/sfiYBlR8K/pFeawbadetTbssc6hR+Dyawo=
Subject key identifier: 41:02:E8:F9:89:AE:4F:9A:25:23:FF:8B:BD:19:88:4B:75:3D:06:21
Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Certificate serial: 019511A2ACBBA6D0B480D51CEB76B573534D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
Manifest number: 0DD2
Signing time: Mon 17 Feb 2025 02:00:28 +0000
Manifest this update: Mon 17 Feb 2025 02:00:28 +0000
Manifest next update: Tue 18 Feb 2025 02:00:28 +0000
Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: rnhwn8pbwHjIOJPvv07aVbkLftAxTqwWhxo6IzXteQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ac:bb:a6:d0:b4:80:d5:1c:eb:76:b5:73:53:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Validity
Not Before: Feb 17 02:00:28 2025 GMT
Not After : Feb 18 02:00:28 2025 GMT
Subject: CN=4102e8f989ae4f9a2523ff8bbd19884b753d0621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:75:2b:ff:b0:a5:5a:8e:8b:7d:96:d6:0e:
3e:b7:9d:ad:57:ed:f2:04:ab:30:04:44:4b:8e:b6:
1f:2b:91:8d:3e:85:c6:03:d6:7d:b5:94:63:40:3c:
e6:43:ae:3a:a9:c7:23:7c:f6:aa:86:ec:92:bf:dc:
e3:43:b9:db:37:79:82:bd:e9:ae:d3:4e:04:86:cb:
6f:49:30:0d:57:56:07:96:ba:4a:ad:7c:f9:f0:14:
e8:79:9d:9e:17:ba:56:f0:4c:38:dc:ee:87:ec:db:
71:f8:2b:4a:97:d0:83:b6:d1:7a:f8:47:1a:89:c0:
29:ef:15:38:1c:b7:55:84:33:d7:25:07:1d:2f:0f:
42:8b:57:2b:5a:4b:2a:37:3c:7b:4d:6b:04:3b:b1:
71:9a:0f:8b:31:39:76:15:e5:7c:1a:2e:c9:9b:b0:
fc:56:d0:23:d3:03:2d:eb:2c:b7:88:1b:7b:d1:da:
94:39:b5:68:93:0b:29:cb:3f:17:e8:87:21:f4:34:
20:7d:52:b3:a4:df:80:bb:f2:95:93:b3:a4:b3:34:
96:48:f7:ed:7d:2b:25:c5:69:98:00:b6:f7:cf:64:
4c:f4:ca:a8:b8:44:d5:b5:03:ee:15:14:25:01:95:
74:25:82:f3:ef:fa:48:63:b7:82:b6:97:ac:2f:48:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:02:E8:F9:89:AE:4F:9A:25:23:FF:8B:BD:19:88:4B:75:3D:06:21
X509v3 Authority Key Identifier:
keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7e:d0:85:39:fd:b9:d2:8a:60:dd:db:55:1f:c3:bc:de:d2:
b2:66:07:24:75:1c:98:51:e2:bb:64:84:16:b1:f6:ef:3d:38:
7f:36:3e:d0:2a:d6:e9:d1:13:b2:da:ab:4b:03:af:09:a2:9b:
3f:4f:a8:ca:9c:0f:9a:12:22:64:84:63:45:fd:70:62:0c:7b:
77:03:40:ec:1d:d0:81:2c:bf:ee:5b:10:07:c6:fb:2d:da:10:
4b:66:85:75:b4:76:21:76:0e:8c:3f:99:bc:55:15:e5:a2:7a:
71:0b:d1:6b:90:e3:d9:39:23:13:a9:0d:89:92:8b:78:90:70:
7c:7f:39:b9:dc:61:ef:40:9c:fa:bf:31:a9:91:23:75:d2:96:
fe:be:1d:5c:da:6d:33:5e:76:13:87:66:76:51:f7:a5:06:4e:
27:9f:a6:31:2d:3a:bb:57:bc:02:2c:07:ba:c5:76:a9:60:4e:
c3:01:9b:2f:13:e0:27:27:c3:bc:72:e9:65:63:9c:25:e4:96:
28:3a:e0:b4:94:8e:86:26:5b:cb:fd:b8:b0:61:a6:21:11:c5:
d2:fc:1f:50:05:da:81:ed:fb:c8:30:5e:d1:bd:74:8f:eb:9b:
67:8e:15:92:10:90:ad:91:82:2a:da:04:34:97:29:8a:cc:16:
11:78:cb:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURoqy7ptC0gNUc63a1c1NNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYzE2ZWVjYTZhZmVhODQ0Y2E0Njg4MjU4Y2UzMzAwZDJh
MzkzZmUwHhcNMjUwMjE3MDIwMDI4WhcNMjUwMjE4MDIwMDI4WjAzMTEwLwYDVQQD
Eyg0MTAyZThmOTg5YWU0ZjlhMjUyM2ZmOGJiZDE5ODg0Yjc1M2QwNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNZ1K/+wpVqOi32W1g4+t52tV+3y
BKswBERLjrYfK5GNPoXGA9Z9tZRjQDzmQ646qccjfPaqhuySv9zjQ7nbN3mCvemu
004EhstvSTANV1YHlrpKrXz58BToeZ2eF7pW8Ew43O6H7Ntx+CtKl9CDttF6+Eca
icAp7xU4HLdVhDPXJQcdLw9Ci1crWksqNzx7TWsEO7Fxmg+LMTl2FeV8Gi7Jm7D8
VtAj0wMt6yy3iBt70dqUObVokwspyz8X6Ich9DQgfVKzpN+Au/KVk7OkszSWSPft
fSslxWmYALb3z2RM9MqouETVtQPuFRQlAZV0JYLz7/pIY7eCtpesL0h27wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEC6PmJrk+aJSP/i70ZiEt1PQYhMB8GA1UdIwQY
MBaAFEPBbuymr+qETKRogljOMwDSo5P+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MjlhMzItYTQwZi00NTcwLWE3ODUt
YjM5NzdmNjQ0N2IzLzEvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85MjlhMzItYTQwZi00NTcwLWE3ODUtYjM5NzdmNjQ0N2Iz
LzEvUThGdTdLYXY2b1JNcEdpQ1dNNHpBTktqa180LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgH7QhTn9
udKKYN3bVR/DvN7SsmYHJHUcmFHiu2SEFrH27z04fzY+0CrW6dETstqrSwOvCaKb
P0+oypwPmhIiZIRjRf1wYgx7dwNA7B3QgSy/7lsQB8b7LdoQS2aFdbR2IXYOjD+Z
vFUV5aJ6cQvRa5Dj2TkjE6kNiZKLeJBwfH85udxh70Cc+r8xqZEjddKW/r4dXNpt
M152E4dmdlH3pQZOJ5+mMS06u1e8AiwHusV2qWBOwwGbLxPgJyfDvHLpZWOcJeSW
KDrgtJSOhiZby/24sGGmIRHF0vwfUAXage37yDBe0b10j+ubZ44VkhCQrZGCKtoE
NJcpiswWEXjLUA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:17 2025 by rpki-client