Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
File: hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json)
Hash identifier: WBLALkwujFOLMBSSCrYUnelLqardeHrBgYj4D7ONj2M=
Subject key identifier: 50:02:AE:A3:C7:EC:BE:DE:73:18:9B:85:10:9D:78:58:73:9F:38:84
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 0194C42C37EF695EB14A35A944037EBFA74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 01:00:19 +0000
Manifest this update: Sun 02 Feb 2025 01:00:19 +0000
Manifest next update: Mon 03 Feb 2025 01:00:19 +0000
Files and hashes: 1: 9YAK0xIjvZ0jkU9GYhz1bySm8ao.roa (hash: YSdN3my3ymjfDNRBd0aA0z7OnehzvCW8RCNSPlN8quQ=)
2: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: n+u1p3y6Cls2GC7ANmfc2WWbZfQVtZvRpfYBnXoRU58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:37:ef:69:5e:b1:4a:35:a9:44:03:7e:bf:a7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: Feb 2 01:00:19 2025 GMT
Not After : Feb 3 01:00:19 2025 GMT
Subject: CN=5002aea3c7ecbede73189b85109d7858739f3884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:70:5a:bb:40:08:da:1b:3a:c4:b7:c9:68:
92:69:0a:e0:ff:0b:76:d0:cc:c2:cd:57:b5:c1:59:
29:0c:0d:bb:f0:65:33:4f:fc:f5:38:65:ea:8c:35:
0d:03:88:e7:ec:bd:2f:f1:36:98:60:66:32:d3:f4:
bc:af:6f:a7:44:a5:2a:72:e8:3c:b7:5b:9a:a5:56:
21:fc:7a:0b:19:65:e0:ec:b2:67:99:a3:d6:fc:cb:
f7:20:87:b9:05:c2:29:5c:6d:6c:43:1c:7f:b2:7d:
74:83:e5:62:04:d7:83:05:42:5c:14:f9:52:bf:a9:
ec:8a:47:f4:0d:f9:8f:9c:c7:f7:45:5f:3f:1b:a1:
4c:0b:ed:32:c2:7f:4a:8a:48:ec:5b:65:2a:98:36:
6e:0f:72:3c:6f:6f:7b:fe:d5:bb:24:0a:f7:49:e7:
48:2a:9f:ff:05:86:66:39:a1:4e:8a:55:a1:b5:c5:
f0:67:2a:f6:aa:08:a0:9e:26:43:f7:0b:53:a0:8d:
ee:66:64:37:60:e1:1f:ec:88:89:15:bb:7c:c7:4b:
19:59:4e:72:0f:b2:66:51:70:9e:71:1c:20:80:2f:
98:fd:35:6f:e4:a2:aa:87:58:f1:95:dc:f6:62:2c:
9c:a6:64:3e:f6:66:14:74:55:c2:f3:89:ee:13:2c:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:02:AE:A3:C7:EC:BE:DE:73:18:9B:85:10:9D:78:58:73:9F:38:84
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a7:6c:66:81:8e:c6:af:59:4e:9c:db:e7:76:8d:37:4b:c6:
05:81:fb:ac:23:9b:2b:ab:e8:14:67:42:21:9e:2f:5d:0c:42:
75:25:1e:18:db:33:f0:60:7d:12:f3:f1:a3:87:72:77:3c:b5:
40:1e:71:e2:e1:c6:f6:e5:d4:cd:d1:cc:95:a5:a2:41:62:48:
38:c4:68:d7:33:b6:9d:f2:70:ca:c1:a0:44:59:dd:75:2b:64:
a5:c8:b2:18:6f:7f:c7:97:55:97:f3:d8:cc:67:ef:e4:ca:69:
50:ae:d6:fa:3a:2a:b7:35:1a:15:b0:65:f2:9b:f9:1d:b8:51:
7e:df:bc:7e:59:66:5e:3e:31:64:16:19:2d:64:88:e5:b6:d2:
f4:01:f5:0b:b3:62:0f:ef:9b:75:ad:16:38:af:1f:cb:28:90:
94:c8:27:a4:df:96:00:16:f4:30:d5:7f:e0:b1:29:4f:fc:c6:
03:94:61:53:98:fc:6d:d8:6e:dc:06:e0:71:f1:08:87:b6:dc:
f7:33:13:32:3f:52:8d:95:35:dd:1a:7f:18:ae:2c:ee:a0:a2:
3e:6b:54:4e:10:0e:dd:05:94:f2:3f:5b:d2:db:95:eb:b5:8f:
55:3d:89:e0:7c:f7:49:4b:18:3f:de:3a:4c:eb:58:00:47:1e:
21:8c:99:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELDfvaV6xSjWpRAN+v6dNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ODQyMjc0YjM3ODhiODBiMmZlZDkxNmRiMzg4MGZlMDhj
Mzc1MjgwHhcNMjUwMjAyMDEwMDE5WhcNMjUwMjAzMDEwMDE5WjAzMTEwLwYDVQQD
Eyg1MDAyYWVhM2M3ZWNiZWRlNzMxODliODUxMDlkNzg1ODczOWYzODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXlwWrtACNobOsS3yWiSaQrg/wt2
0MzCzVe1wVkpDA278GUzT/z1OGXqjDUNA4jn7L0v8TaYYGYy0/S8r2+nRKUqcug8
t1uapVYh/HoLGWXg7LJnmaPW/Mv3IIe5BcIpXG1sQxx/sn10g+ViBNeDBUJcFPlS
v6nsikf0DfmPnMf3RV8/G6FMC+0ywn9KikjsW2UqmDZuD3I8b297/tW7JAr3SedI
Kp//BYZmOaFOilWhtcXwZyr2qgigniZD9wtToI3uZmQ3YOEf7IiJFbt8x0sZWU5y
D7JmUXCecRwggC+Y/TVv5KKqh1jxldz2YiycpmQ+9mYUdFXC84nuEyyamwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFACrqPH7L7ecxibhRCdeFhznziEMB8GA1UdIwQY
MBaAFIaEInSzeIuAsv7ZFts4gP4Iw3UoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG9RaWRMTjRpNEN5X3RrVzJ6aUFfZ2pEZFNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hZWJjZWYtNjI5Ni00YTMyLTg2M2Ut
YWEzMTUyMGQzYTZiLzEvaG9RaWRMTjRpNEN5X3RrVzJ6aUFfZ2pEZFNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9hZWJjZWYtNjI5Ni00YTMyLTg2M2UtYWEzMTUyMGQzYTZi
LzEvaG9RaWRMTjRpNEN5X3RrVzJ6aUFfZ2pEZFNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqdsZoGO
xq9ZTpzb53aNN0vGBYH7rCObK6voFGdCIZ4vXQxCdSUeGNsz8GB9EvPxo4dydzy1
QB5x4uHG9uXUzdHMlaWiQWJIOMRo1zO2nfJwysGgRFnddStkpciyGG9/x5dVl/PY
zGfv5MppUK7W+joqtzUaFbBl8pv5HbhRft+8fllmXj4xZBYZLWSI5bbS9AH1C7Ni
D++bda0WOK8fyyiQlMgnpN+WABb0MNV/4LEpT/zGA5RhU5j8bdhu3AbgcfEIh7bc
9zMTMj9SjZU13Rp/GK4s7qCiPmtUThAO3QWU8j9b0tuV67WPVT2J4Hz3SUsYP946
TOtYAEceIYyZbA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:41:22 2025 by rpki-client