Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File: 1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier: FFs3SVYp1QR2BTs97NTrmPmnymM16aCiatQS8TBRE48=
Subject key identifier: DF:80:CD:ED:87:12:8B:8E:AF:16:65:D8:6E:AC:22:51:9E:55:A7:BA
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer: /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial: 019510C7E9B430EA759074592D57203E0C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number: 04A4
Signing time: Sun 16 Feb 2025 22:01:31 +0000
Manifest this update: Sun 16 Feb 2025 22:01:31 +0000
Manifest next update: Mon 17 Feb 2025 22:01:31 +0000
Files and hashes: 1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: zVOr0PaTByksTEemjAKhpZR31xTmHNLoJJPb1suxwsw=)
2: veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa (hash: zCX9I5DqbiV1NyDUSWL69SaWgCwLBmNnvgRIApALMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:e9:b4:30:ea:75:90:74:59:2d:57:20:3e:0c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Validity
Not Before: Feb 16 22:01:31 2025 GMT
Not After : Feb 17 22:01:31 2025 GMT
Subject: CN=df80cded87128b8eaf1665d86eac22519e55a7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:ce:4a:36:1a:d3:66:05:a2:5c:8e:26:42:
7b:a0:5b:47:0c:de:c1:e2:80:86:b6:9d:b9:6d:b2:
3b:24:52:cb:84:2f:97:c9:9e:4b:39:36:be:52:4b:
b2:34:a5:5b:8b:f1:6d:5e:4b:d3:7f:53:4b:d5:b1:
c2:29:9f:ac:8d:66:8c:90:c6:b2:d4:dc:77:7e:65:
bd:5d:66:90:ee:7f:4d:d0:e6:ea:66:9e:f3:57:bc:
39:e8:0f:83:fe:56:6b:8f:d5:47:69:7d:7b:e4:ca:
7c:00:71:58:65:9a:c3:3c:36:ca:88:f7:37:cf:54:
d3:e7:91:20:a5:09:0d:74:1d:a5:bd:50:53:35:24:
6b:8b:1e:e5:68:15:02:f2:29:62:4e:1d:6e:c8:3e:
07:af:5a:0b:12:31:1d:cc:16:86:2f:6f:9a:dc:b6:
c2:4f:fc:61:4d:bb:91:c4:cf:70:c9:bf:2c:03:4b:
fe:28:8b:32:ad:83:a0:0f:38:27:7d:a6:1f:d6:33:
a1:cf:e8:8a:fe:0a:68:a2:a2:7c:d1:56:e6:e8:0c:
35:8b:9c:00:9c:82:8a:31:50:ec:96:36:a7:e8:c6:
f5:9d:03:91:35:60:07:13:8c:9e:e3:8e:2d:83:69:
ff:9d:8d:c2:13:2f:66:25:94:57:4f:ff:33:94:ac:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:80:CD:ED:87:12:8B:8E:AF:16:65:D8:6E:AC:22:51:9E:55:A7:BA
X509v3 Authority Key Identifier:
keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:88:bc:b6:a8:3f:23:aa:f6:9c:64:c9:a2:ea:fc:7f:21:a7:
f0:9f:98:e4:a3:61:a5:c2:a2:34:ce:51:b8:37:bd:61:f6:72:
47:e5:a9:bb:b8:d8:b4:4a:d0:c4:00:3d:4c:67:14:94:0c:10:
f8:d4:66:43:00:22:8b:91:48:29:94:f1:96:92:5d:2c:40:51:
33:fd:08:3d:f6:e7:7d:d6:b0:dd:07:8d:18:ea:84:6e:41:40:
b7:33:dd:b3:a3:75:57:0c:6a:42:b6:45:c4:bf:df:14:66:2e:
79:4e:27:0e:7a:8c:63:38:13:8f:dc:69:7a:9f:25:0d:f8:39:
7c:54:5c:91:3b:96:f7:4c:6a:77:c3:f2:4c:ca:13:60:42:3f:
81:cd:31:92:cd:0d:76:71:3d:95:bb:32:19:48:dd:bf:e7:d9:
4b:eb:da:ad:ba:da:8f:49:a4:d3:2d:fb:68:83:6b:bf:cb:ca:
2d:04:5e:3b:23:8d:6e:b3:c4:82:de:72:fa:a6:25:fe:da:1b:
9f:89:bf:73:18:21:8e:c8:b5:4a:09:13:f0:88:26:56:a4:62:
fe:2c:77:4a:71:99:5b:35:56:c9:58:d0:3c:86:7c:20:11:df:
d8:46:c2:7a:ca:bd:30:20:63:bd:aa:77:a3:c4:a6:a3:ef:e1:
08:d9:92:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx+m0MOp1kHRZLVcgPgyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MmFiNzhlZGE3YmYwMWQ5NWI1OTc3NGVkMzQ2YmNiZjk2
YTI2ODQwHhcNMjUwMjE2MjIwMTMxWhcNMjUwMjE3MjIwMTMxWjAzMTEwLwYDVQQD
EyhkZjgwY2RlZDg3MTI4YjhlYWYxNjY1ZDg2ZWFjMjI1MTllNTVhN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SbOSjYa02YFolyOJkJ7oFtHDN7B
4oCGtp25bbI7JFLLhC+XyZ5LOTa+UkuyNKVbi/FtXkvTf1NL1bHCKZ+sjWaMkMay
1Nx3fmW9XWaQ7n9N0ObqZp7zV7w56A+D/lZrj9VHaX175Mp8AHFYZZrDPDbKiPc3
z1TT55EgpQkNdB2lvVBTNSRrix7laBUC8iliTh1uyD4Hr1oLEjEdzBaGL2+a3LbC
T/xhTbuRxM9wyb8sA0v+KIsyrYOgDzgnfaYf1jOhz+iK/gpooqJ80Vbm6Aw1i5wA
nIKKMVDsljan6Mb1nQORNWAHE4ye444tg2n/nY3CEy9mJZRXT/8zlKwKVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+Aze2HEouOrxZl2G6sIlGeVae6MB8GA1UdIwQY
MBaAFNQqt47ae/AdlbWXdO00a8v5aiaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUNxM2p0cDc4QjJWdFpkMDdUUnJ5X2xxSm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82NDRhMDAtMmQ4Yi00NzI1LWI1Y2Et
OTAxMmJlYWUyODUyLzEvMUNxM2p0cDc4QjJWdFpkMDdUUnJ5X2xxSm9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi82NDRhMDAtMmQ4Yi00NzI1LWI1Y2EtOTAxMmJlYWUyODUy
LzEvMUNxM2p0cDc4QjJWdFpkMDdUUnJ5X2xxSm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYi8tqg/
I6r2nGTJour8fyGn8J+Y5KNhpcKiNM5RuDe9YfZyR+Wpu7jYtErQxAA9TGcUlAwQ
+NRmQwAii5FIKZTxlpJdLEBRM/0IPfbnfdaw3QeNGOqEbkFAtzPds6N1VwxqQrZF
xL/fFGYueU4nDnqMYzgTj9xpep8lDfg5fFRckTuW90xqd8PyTMoTYEI/gc0xks0N
dnE9lbsyGUjdv+fZS+varbraj0mk0y37aINrv8vKLQReOyONbrPEgt5y+qYl/tob
n4m/cxghjsi1SgkT8IgmVqRi/ix3SnGZWzVWyVjQPIZ8IBHf2EbCesq9MCBjvap3
o8Smo+/hCNmSKA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:33 2025 by rpki-client