Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier: 1asIvyFyRvdjw0LSvMkGsIyR05bX8yZBHhdi6dFNwbU=
Subject key identifier: C7:2E:20:8E:3B:6E:DF:A6:86:C0:1B:16:92:01:C5:67:29:57:1C:0B
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial: 0194C350F0D3D932A593242FCD588183359B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number: 1B
Signing time: Sat 01 Feb 2025 21:00:49 +0000
Manifest this update: Sat 01 Feb 2025 21:00:49 +0000
Manifest next update: Sun 02 Feb 2025 21:00:49 +0000
Files and hashes: 1: HW--gyFyIjJfbbNnSxJATPWJGEI.roa (hash: shKJNjvcZlh2Drp2JswFM6L89Fwml75F7pDB0H15/3Q=)
2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: vdLmx3AeQMvp4AZIoZYA4YKkOiYdNozMoMr5keAWMP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:f0:d3:d9:32:a5:93:24:2f:cd:58:81:83:35:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Validity
Not Before: Feb 1 21:00:49 2025 GMT
Not After : Feb 2 21:00:49 2025 GMT
Subject: CN=c72e208e3b6edfa686c01b169201c56729571c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:54:00:8e:82:6e:f9:59:e4:63:fd:ad:c9:
ad:4f:10:3a:c1:88:fe:c4:8f:f2:c5:93:61:f6:26:
f0:59:84:12:26:e8:36:6a:61:ff:ed:f0:b1:25:06:
32:24:77:8a:08:19:63:d1:61:ca:6f:da:35:e6:0c:
ce:3a:06:e3:b9:9b:58:24:10:16:1e:70:e7:cd:ea:
cd:bd:06:a8:3c:13:7c:b5:18:6e:02:f5:9c:b8:47:
e4:cf:c9:93:29:72:1d:94:80:88:18:c1:55:2f:a4:
52:29:81:e1:59:d4:8c:20:dd:29:2b:ad:23:bb:84:
ef:d7:7f:e5:85:d1:46:a7:a8:6f:e0:be:19:e1:08:
f9:9c:14:b1:fe:c7:9f:3a:eb:25:17:0a:1d:68:94:
12:9e:6e:7b:0d:cb:57:f9:02:1f:52:e8:fd:83:9e:
d6:35:de:fa:91:41:a7:04:8d:4f:2b:ed:52:d1:22:
34:b8:40:43:48:3b:da:58:11:d8:41:98:10:2c:1c:
18:46:2a:e0:76:7d:9c:7c:44:5b:00:7a:61:d6:3b:
d0:70:c9:c3:fd:dd:af:7e:b0:ef:d1:31:da:b2:e8:
59:70:30:81:b4:5b:2e:e0:3f:cb:bb:d2:15:ec:3f:
e5:2d:11:3c:1d:c9:c6:0c:c8:92:a2:26:a5:be:ce:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2E:20:8E:3B:6E:DF:A6:86:C0:1B:16:92:01:C5:67:29:57:1C:0B
X509v3 Authority Key Identifier:
keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:35:1b:18:85:ff:8d:da:9f:ac:71:17:24:e9:f6:ec:c4:c1:
38:50:cb:15:7c:33:24:20:6e:e9:7f:57:bf:8d:c0:3f:b8:44:
34:c2:05:ce:d2:6f:7e:bd:7b:2e:1d:63:27:b5:f0:71:c2:04:
3a:ba:fa:4a:c5:8a:e0:4f:c2:c6:b4:eb:b8:b8:52:e4:2d:77:
84:ad:bb:f2:a4:da:04:22:97:71:82:56:bd:91:d8:ff:b9:68:
33:34:c6:cc:36:51:7b:07:1c:ae:de:41:6a:ca:ad:d2:c7:c7:
ca:c0:56:b7:9b:c3:e4:b8:22:53:85:90:63:08:dd:3a:02:7a:
df:fc:a9:a3:d8:ad:1e:c4:d7:55:2e:c0:91:fc:e9:d2:14:35:
29:92:78:2e:c9:f1:0f:0d:e3:4a:7b:76:96:7e:18:24:d0:56:
ce:15:2d:b3:f3:91:49:b9:53:b5:32:cf:cd:a5:3d:b3:a9:9a:
53:25:37:02:5a:bf:2d:89:b8:2e:70:e4:61:ab:6c:63:55:b0:
cc:4f:7a:a5:86:b5:2d:75:7a:ca:2e:1a:63:c2:d1:31:ae:f5:
d5:7c:ca:18:2a:2c:ab:34:df:f8:72:c2:7d:0b:3d:db:5e:80:
39:66:c8:55:a6:e5:b7:3d:19:f1:d5:81:6b:15:e6:de:bb:44:
45:a1:97:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDUPDT2TKlkyQvzViBgzWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYWM2MTk3Nzk5ZmQ2OGI2ZTViYmUwYjU3ZTY1MmZkODBk
ZDM2MjEwHhcNMjUwMjAxMjEwMDQ5WhcNMjUwMjAyMjEwMDQ5WjAzMTEwLwYDVQQD
EyhjNzJlMjA4ZTNiNmVkZmE2ODZjMDFiMTY5MjAxYzU2NzI5NTcxYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW1UAI6CbvlZ5GP9rcmtTxA6wYj+
xI/yxZNh9ibwWYQSJug2amH/7fCxJQYyJHeKCBlj0WHKb9o15gzOOgbjuZtYJBAW
HnDnzerNvQaoPBN8tRhuAvWcuEfkz8mTKXIdlICIGMFVL6RSKYHhWdSMIN0pK60j
u4Tv13/lhdFGp6hv4L4Z4Qj5nBSx/sefOuslFwodaJQSnm57DctX+QIfUuj9g57W
Nd76kUGnBI1PK+1S0SI0uEBDSDvaWBHYQZgQLBwYRirgdn2cfERbAHph1jvQcMnD
/d2vfrDv0THasuhZcDCBtFsu4D/Lu9IV7D/lLRE8HcnGDMiSoialvs7WlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcuII47bt+mhsAbFpIBxWcpVxwLMB8GA1UdIwQY
MBaAFKqsYZd5n9aLblu+C1fmUv2A3TYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC84ODMwMWMtYWM3OS00MDgzLTkyOGYt
NWI0OWRiNjVjNTQ1LzEvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC84ODMwMWMtYWM3OS00MDgzLTkyOGYtNWI0OWRiNjVjNTQ1
LzEvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjUbGIX/
jdqfrHEXJOn27MTBOFDLFXwzJCBu6X9Xv43AP7hENMIFztJvfr17Lh1jJ7XwccIE
Orr6SsWK4E/CxrTruLhS5C13hK278qTaBCKXcYJWvZHY/7loMzTGzDZRewccrt5B
asqt0sfHysBWt5vD5LgiU4WQYwjdOgJ63/ypo9itHsTXVS7Akfzp0hQ1KZJ4Lsnx
Dw3jSnt2ln4YJNBWzhUts/ORSblTtTLPzaU9s6maUyU3Alq/LYm4LnDkYatsY1Ww
zE96pYa1LXV6yi4aY8LRMa711XzKGCosqzTf+HLCfQs9216AOWbIVabltz0Z8dWB
axXm3rtERaGXEQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:33 2025 by rpki-client