Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
File: xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft (raw, json)
Hash identifier: Td1LLwPxeeDUwGBH6OurHisEl2scDVY+cQsWf3Zx9ec=
Subject key identifier: 4E:47:D2:D8:16:BD:95:88:13:4E:13:6B:63:60:4F:17:95:A1:1D:CE
Authority key identifier: C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
Certificate issuer: /CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Certificate serial: 0194BABB1D58029925059060DD4F2E3EE437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 05:00:12 +0000
Manifest this update: Fri 31 Jan 2025 05:00:12 +0000
Manifest next update: Sat 01 Feb 2025 05:00:12 +0000
Files and hashes: 1: OvOkWatHrFgmj60O6Cjij4Ojo9Q.roa (hash: vl4YZSTqxlbqeunj3GnUeIqLip/YzNXqb6yP9ApEp70=)
2: W_HszaJ5NOP0MnKr_gX_tIwwzrM.roa (hash: KBxuRHIVq96Z+ZSk6DOhyPHLuGESXEU5ZMYMHCDEzBE=)
3: xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl (hash: qKuDYkFxEKtqzWKvLal/M/cf4dm7cdfh3H1ib0lj/YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:1d:58:02:99:25:05:90:60:dd:4f:2e:3e:e4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Validity
Not Before: Jan 31 05:00:12 2025 GMT
Not After : Feb 1 05:00:12 2025 GMT
Subject: CN=4e47d2d816bd9588134e136b63604f1795a11dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:06:c9:15:b3:9a:bf:82:36:b0:ba:bb:37:
e3:06:e4:52:79:a4:28:a7:c4:3b:48:4b:f5:33:2e:
19:c8:3e:56:f2:b3:b2:b9:5d:dd:8d:f0:53:93:1c:
b5:dc:ce:fd:be:63:a1:0f:ef:e0:5c:d9:19:62:a4:
65:c1:b0:f2:90:fe:d8:c9:a1:39:33:99:93:47:9f:
81:04:a9:85:bb:b5:66:6e:f3:8a:00:00:5b:18:fb:
7d:4a:d8:73:87:03:a0:69:29:8b:20:e2:3d:6b:fa:
94:91:97:3c:b9:cb:dc:80:db:fb:c0:84:2d:d7:af:
cf:1e:fe:12:72:90:01:b3:26:7b:f3:38:19:eb:ad:
24:23:d3:18:08:c7:42:56:12:fe:9a:0a:e3:d5:a5:
46:54:41:26:1d:71:ae:38:9e:ed:bb:45:0f:63:5e:
6e:3d:23:f2:ad:ca:d4:cd:ad:41:56:cb:1d:f5:8d:
40:03:fc:b0:eb:31:ba:d6:f1:03:5c:24:07:b3:c8:
96:62:40:46:76:6b:da:e6:16:64:07:7c:c5:eb:a5:
89:78:4f:bc:a4:16:2b:49:37:10:83:20:f5:b4:39:
d1:d3:6b:46:b2:a4:25:22:3c:ff:87:5e:33:03:9c:
9e:f2:96:85:0e:7d:24:0d:ad:34:8d:e2:f5:7c:f4:
81:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:47:D2:D8:16:BD:95:88:13:4E:13:6B:63:60:4F:17:95:A1:1D:CE
X509v3 Authority Key Identifier:
keyid:C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a8:8d:84:ce:65:ea:71:05:fa:ef:ce:13:79:dc:99:c8:c3:
37:6e:6c:97:62:59:d7:68:97:50:c0:16:f9:76:66:de:46:28:
7f:7f:1c:9d:49:22:4c:6a:0f:dd:a9:ff:70:16:2c:0f:95:a2:
c7:90:46:c5:4d:f5:16:5a:86:52:24:92:76:4d:5c:36:55:c1:
c4:ea:44:e7:de:06:bd:a2:78:7c:ba:f8:5e:0b:fe:7d:0c:20:
c2:c5:c1:2e:93:06:29:18:32:b2:4b:76:3c:64:6a:70:83:22:
32:9f:91:d0:a5:b5:26:c6:33:c3:20:68:4b:9d:b4:76:2f:d0:
99:92:81:43:b8:72:c9:4b:96:a4:1b:c4:5b:8d:26:9c:b2:fd:
83:28:00:14:40:e0:80:07:d6:02:cd:00:a6:b7:bd:83:3c:7d:
47:58:d5:d3:34:08:a7:bf:c1:51:6c:af:99:7c:c9:fd:96:33:
6a:e2:5c:30:b4:1f:c6:71:f8:f4:1b:92:58:24:c9:a7:ec:cf:
69:f8:d7:dd:45:53:df:7d:ae:b6:a4:60:1b:c6:c9:43:2c:d4:
75:88:80:f0:0a:04:41:f7:7b:6d:32:58:92:85:b1:0c:1f:03:
3e:60:bd:b7:20:87:77:74:d0:be:ea:17:c3:b8:91:6e:7f:6b:
6d:36:ea:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6ux1YApklBZBg3U8uPuQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MmFhOWVhODRkYjQxYWQ5ZjA0NTA0OWQ4ZTE0NmY5NzVl
NDJmY2IwHhcNMjUwMTMxMDUwMDEyWhcNMjUwMjAxMDUwMDEyWjAzMTEwLwYDVQQD
Eyg0ZTQ3ZDJkODE2YmQ5NTg4MTM0ZTEzNmI2MzYwNGYxNzk1YTExZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9sGyRWzmr+CNrC6uzfjBuRSeaQo
p8Q7SEv1My4ZyD5W8rOyuV3djfBTkxy13M79vmOhD+/gXNkZYqRlwbDykP7YyaE5
M5mTR5+BBKmFu7VmbvOKAABbGPt9SthzhwOgaSmLIOI9a/qUkZc8ucvcgNv7wIQt
16/PHv4ScpABsyZ78zgZ660kI9MYCMdCVhL+mgrj1aVGVEEmHXGuOJ7tu0UPY15u
PSPyrcrUza1BVssd9Y1AA/yw6zG61vEDXCQHs8iWYkBGdmva5hZkB3zF66WJeE+8
pBYrSTcQgyD1tDnR02tGsqQlIjz/h14zA5ye8paFDn0kDa00jeL1fPSB3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5H0tgWvZWIE04Ta2NgTxeVoR3OMB8GA1UdIwQY
MBaAFMUqqeqE20GtnwRQSdjhRvl15C/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFNxcDZvVGJRYTJmQkZCSjJPRkctWFhrTDhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hYjg1NDUtZjhiNy00YzVlLTk4ZmYt
MjUwMzVjMWQxNGRjLzEveFNxcDZvVGJRYTJmQkZCSjJPRkctWFhrTDhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hYjg1NDUtZjhiNy00YzVlLTk4ZmYtMjUwMzVjMWQxNGRj
LzEveFNxcDZvVGJRYTJmQkZCSjJPRkctWFhrTDhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKiNhM5l
6nEF+u/OE3ncmcjDN25sl2JZ12iXUMAW+XZm3kYof38cnUkiTGoP3an/cBYsD5Wi
x5BGxU31FlqGUiSSdk1cNlXBxOpE594GvaJ4fLr4Xgv+fQwgwsXBLpMGKRgyskt2
PGRqcIMiMp+R0KW1JsYzwyBoS520di/QmZKBQ7hyyUuWpBvEW40mnLL9gygAFEDg
gAfWAs0Apre9gzx9R1jV0zQIp7/BUWyvmXzJ/ZYzauJcMLQfxnH49BuSWCTJp+zP
afjX3UVT332utqRgG8bJQyzUdYiA8AoEQfd7bTJYkoWxDB8DPmC9tyCHd3TQvuoX
w7iRbn9rbTbq/Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:33 2025 by rpki-client on console-fra.rpki-client.org