Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
File: qI1YyAfJSdssH18nPx78TfGlxVM.mft (raw, json)
Hash identifier: O9CFK2lIWCOh+6si/1D8r1iHD97fXAtSuAV/F6iQImY=
Subject key identifier: B7:7F:30:B5:BF:4F:4D:75:44:34:44:0E:44:6B:60:DA:BF:82:7E:43
Authority key identifier: A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
Certificate issuer: /CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Certificate serial: 0195121049034E2A591C35682B4C4F3CB20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
Manifest number: 05BB
Signing time: Mon 17 Feb 2025 04:00:11 +0000
Manifest this update: Mon 17 Feb 2025 04:00:11 +0000
Manifest next update: Tue 18 Feb 2025 04:00:11 +0000
Files and hashes: 1: qI1YyAfJSdssH18nPx78TfGlxVM.crl (hash: VCLy19ooSdutKfWRohBrgiNH6MiL6Msdk1aC/hON3g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:49:03:4e:2a:59:1c:35:68:2b:4c:4f:3c:b2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Validity
Not Before: Feb 17 04:00:11 2025 GMT
Not After : Feb 18 04:00:11 2025 GMT
Subject: CN=b77f30b5bf4f4d754434440e446b60dabf827e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:0e:78:41:c7:3a:79:0a:d9:b9:20:de:18:
ba:82:3e:7b:b5:07:99:da:c2:bd:e0:26:2e:7b:c8:
6b:ba:3b:9f:4b:de:fa:be:32:9a:2c:90:40:df:3e:
bc:0a:3d:89:67:dd:b5:94:82:4c:b2:f7:5b:54:b2:
24:3a:fb:89:f2:4c:8b:ba:c8:66:a0:0c:cd:22:8f:
5b:47:95:64:67:66:17:9c:f6:5d:da:a5:f0:a2:e7:
5c:98:06:76:80:23:e7:b1:94:a4:79:8b:90:29:59:
86:75:1e:b4:71:58:5f:bd:93:12:86:5e:be:8a:26:
81:2f:90:05:be:f5:da:5b:2e:4c:00:56:21:21:95:
eb:e5:3a:9d:0e:4a:c9:31:ab:b4:06:f3:4b:0f:4c:
2b:54:87:2f:25:0e:f7:ed:d5:c8:64:61:84:e0:ca:
7f:a8:45:c3:f9:81:51:89:b4:40:00:cf:ae:68:ec:
eb:6d:d8:fc:6e:19:b0:5e:df:d6:53:20:71:6a:f4:
ea:91:a7:f5:ba:bf:88:0b:41:0c:4c:cb:e4:3e:60:
ef:91:3d:4d:e0:ab:d3:de:19:fb:a4:cd:13:ae:2d:
aa:0a:0c:c4:59:ce:ef:b0:91:97:ae:28:af:22:dc:
a2:7c:20:cc:ed:22:35:95:fb:95:fd:3d:97:33:f6:
e5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7F:30:B5:BF:4F:4D:75:44:34:44:0E:44:6B:60:DA:BF:82:7E:43
X509v3 Authority Key Identifier:
keyid:A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a1:b3:d0:89:59:54:ea:31:43:31:1b:d7:38:e7:7e:e6:f0:
28:17:b5:a9:bc:b5:54:d5:f7:33:37:22:81:62:93:5a:53:a8:
6e:bb:df:96:f4:1d:5c:b4:84:9f:ef:25:c3:3b:6f:37:2a:3a:
eb:b9:51:50:07:e1:24:aa:a0:ed:ce:4c:1c:7c:bd:53:2e:e5:
ed:08:4c:ee:d5:32:30:3c:ab:90:0c:d9:9d:ff:c3:52:fe:0e:
7d:9c:b1:6a:6d:19:d3:f9:d2:0f:7e:ea:ad:36:76:01:f1:3f:
7c:ba:72:e7:a0:09:52:77:1b:51:23:78:ba:1a:51:44:10:0a:
c2:55:c5:7e:d0:39:45:b5:b3:bb:c5:45:92:93:e9:c8:fe:4a:
83:a7:1c:5f:97:81:93:7b:a3:1e:92:64:69:6f:1c:91:f7:83:
fa:22:d1:40:cc:a3:4f:3a:22:96:52:72:0c:6f:43:a1:52:f4:
5f:ad:fb:96:92:e1:dd:f0:bd:53:b8:1d:d2:e8:b8:15:e7:21:
75:c5:58:ff:fd:2e:2f:7e:5e:26:8c:56:4b:b8:ab:38:3a:28:
ca:2b:27:2f:87:0f:4c:ca:ae:ab:91:81:ed:f0:18:a7:86:7d:
ad:67:e4:86:06:f8:5e:6d:1f:d2:d2:7c:76:6b:89:bf:85:f8:
fa:22:79:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEEkDTipZHDVoK0xPPLILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OGQ1OGM4MDdjOTQ5ZGIyYzFmNWYyNzNmMWVmYzRkZjFh
NWM1NTMwHhcNMjUwMjE3MDQwMDExWhcNMjUwMjE4MDQwMDExWjAzMTEwLwYDVQQD
EyhiNzdmMzBiNWJmNGY0ZDc1NDQzNDQ0MGU0NDZiNjBkYWJmODI3ZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDIOeEHHOnkK2bkg3hi6gj57tQeZ
2sK94CYue8hrujufS976vjKaLJBA3z68Cj2JZ921lIJMsvdbVLIkOvuJ8kyLushm
oAzNIo9bR5VkZ2YXnPZd2qXwoudcmAZ2gCPnsZSkeYuQKVmGdR60cVhfvZMShl6+
iiaBL5AFvvXaWy5MAFYhIZXr5TqdDkrJMau0BvNLD0wrVIcvJQ737dXIZGGE4Mp/
qEXD+YFRibRAAM+uaOzrbdj8bhmwXt/WUyBxavTqkaf1ur+IC0EMTMvkPmDvkT1N
4KvT3hn7pM0Tri2qCgzEWc7vsJGXriivItyifCDM7SI1lfuV/T2XM/blHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd/MLW/T011RDREDkRrYNq/gn5DMB8GA1UdIwQY
MBaAFKiNWMgHyUnbLB9fJz8e/E3xpcVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYt
NmMyNGIwMmEwMjJkLzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYtNmMyNGIwMmEwMjJk
LzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6Gz0IlZ
VOoxQzEb1zjnfubwKBe1qby1VNX3MzcigWKTWlOobrvflvQdXLSEn+8lwztvNyo6
67lRUAfhJKqg7c5MHHy9Uy7l7QhM7tUyMDyrkAzZnf/DUv4OfZyxam0Z0/nSD37q
rTZ2AfE/fLpy56AJUncbUSN4uhpRRBAKwlXFftA5RbWzu8VFkpPpyP5Kg6ccX5eB
k3ujHpJkaW8ckfeD+iLRQMyjTzoillJyDG9DoVL0X637lpLh3fC9U7gd0ui4Fech
dcVY//0uL35eJoxWS7irODooyisnL4cPTMquq5GB7fAYp4Z9rWfkhgb4Xm0f0tJ8
dmuJv4X4+iJ5Yw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:12 2025 by rpki-client