Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
File: QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft (raw, json)
Hash identifier: mxOee0syIf+ZO3W4pGeq/UuaOMLylIY3XnoNl9yWb1c=
Subject key identifier: 5E:07:F5:11:62:0C:00:A5:57:0D:91:F6:AD:ED:54:36:94:75:E3:C9
Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
Certificate issuer: /CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Certificate serial: 0195124749632120F55D5BE88D76BEBDB30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
Manifest number: 1103
Signing time: Mon 17 Feb 2025 05:00:16 +0000
Manifest this update: Mon 17 Feb 2025 05:00:16 +0000
Manifest next update: Tue 18 Feb 2025 05:00:16 +0000
Files and hashes: 1: QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl (hash: AnJCqcFiwn1zeIRpYeG3N8eKybzNyjMxOPDvfXh8SMM=)
2: ukNphFAe4cX3Zc-R26t80LykhN4.roa (hash: xXUTisVftHwOaoab4KLxi4q4wlsyXqJydXF1SwvOD0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:49:63:21:20:f5:5d:5b:e8:8d:76:be:bd:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Validity
Not Before: Feb 17 05:00:16 2025 GMT
Not After : Feb 18 05:00:16 2025 GMT
Subject: CN=5e07f511620c00a5570d91f6aded54369475e3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:9d:a6:12:6b:20:48:a1:53:61:9d:56:6f:
67:3a:dd:55:c6:ab:49:64:37:28:d8:8c:20:b0:89:
e8:02:7d:4f:7f:66:ae:61:4d:b9:41:75:86:04:6e:
f6:73:33:ea:ca:0d:07:38:38:6c:9c:3f:d3:8e:63:
e8:db:58:bb:fd:20:a4:ac:00:73:fb:f6:ae:5c:c4:
ba:71:ad:d5:19:3a:ea:c9:78:2f:b0:3e:f6:44:ff:
93:35:e0:8d:13:a5:2f:32:2d:91:65:32:0e:0c:19:
1b:ad:85:f6:f7:8e:c7:59:bc:fd:5e:00:ff:3d:f8:
3d:d1:b3:95:77:0d:0f:9a:b9:fc:df:5a:9d:50:7c:
03:ba:9e:c2:64:17:3e:e3:c5:d3:6a:f5:16:a7:b3:
47:c4:01:f1:c2:73:5a:12:de:b1:bd:c3:a1:bf:39:
27:b3:eb:5a:12:2d:a5:94:6a:4e:77:d1:9a:9d:a1:
69:47:8a:99:04:87:20:06:ab:94:0c:0b:ca:65:bb:
1b:2b:7b:ad:b5:8b:fe:0d:29:98:bf:15:9d:12:da:
c3:26:19:b9:35:3e:a3:88:7c:f6:56:3c:e3:17:45:
79:75:61:d0:1d:29:41:33:8d:61:08:c7:ac:3a:0e:
c3:0d:68:79:4c:c4:d4:65:6f:b1:66:1f:04:d7:c5:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:07:F5:11:62:0C:00:A5:57:0D:91:F6:AD:ED:54:36:94:75:E3:C9
X509v3 Authority Key Identifier:
keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:99:95:56:17:29:b2:0e:8e:7c:b2:cf:82:d1:5c:d6:4b:07:
3a:ee:01:e5:1b:10:4e:c1:71:24:97:e1:3b:a1:10:18:1b:59:
ca:cb:55:2c:20:1f:f1:0c:73:1f:43:66:e5:15:60:d0:29:be:
34:69:9e:4c:7d:88:ef:22:6b:44:c0:28:8a:5b:35:87:a0:0d:
44:00:c1:85:da:d1:79:5a:ac:d7:f8:ed:24:c8:77:0d:08:b8:
b2:2f:9f:0c:0b:e4:16:37:68:45:c1:2a:03:29:84:e4:a3:74:
90:03:f9:e5:a1:0c:d9:3a:a2:75:8a:b2:c5:91:50:67:92:35:
40:70:cd:cc:97:48:4b:4b:db:df:70:66:91:71:a5:19:f9:04:
5b:8b:16:05:3c:08:4f:71:0b:7b:51:e8:05:f7:76:57:a4:78:
ad:35:74:37:e9:7e:66:97:7f:73:72:71:39:f9:07:bf:fa:57:
cc:82:18:70:1a:eb:aa:ba:3c:1f:87:79:8c:be:9d:62:27:07:
85:87:c1:2a:cc:90:e3:ca:fc:d5:c9:15:f7:de:c5:dc:3a:86:
f3:3c:12:71:fa:f9:99:0e:b6:ab:a9:7a:e1:fc:46:9e:62:ec:
05:bc:ce:50:9d:78:1d:f0:62:41:53:7c:1f:aa:45:9a:f9:3a:
5d:a4:3e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSR0ljISD1XVvojXa+vbMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDMyOTIwNjhlYTNmYjg1YmM1ODk1Mzc5ZTIwZWRiZDBi
YzY1MDYwHhcNMjUwMjE3MDUwMDE2WhcNMjUwMjE4MDUwMDE2WjAzMTEwLwYDVQQD
Eyg1ZTA3ZjUxMTYyMGMwMGE1NTcwZDkxZjZhZGVkNTQzNjk0NzVlM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJudphJrIEihU2GdVm9nOt1VxqtJ
ZDco2IwgsInoAn1Pf2auYU25QXWGBG72czPqyg0HODhsnD/TjmPo21i7/SCkrABz
+/auXMS6ca3VGTrqyXgvsD72RP+TNeCNE6UvMi2RZTIODBkbrYX2947HWbz9XgD/
Pfg90bOVdw0Pmrn831qdUHwDup7CZBc+48XTavUWp7NHxAHxwnNaEt6xvcOhvzkn
s+taEi2llGpOd9GanaFpR4qZBIcgBquUDAvKZbsbK3uttYv+DSmYvxWdEtrDJhm5
NT6jiHz2VjzjF0V5dWHQHSlBM41hCMesOg7DDWh5TMTUZW+xZh8E18VeZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4H9RFiDAClVw2R9q3tVDaUdePJMB8GA1UdIwQY
MBaAFEEDKSBo6j+4W8WJU3niDtvQvGUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFNcElHanFQN2hieFlsVGVlSU8yOUM4WlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yNGM1NjYtYzc0ZS00MjMyLWEzNDQt
NjA3MmJiOGIyYmMwLzEvUVFNcElHanFQN2hieFlsVGVlSU8yOUM4WlFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yNGM1NjYtYzc0ZS00MjMyLWEzNDQtNjA3MmJiOGIyYmMw
LzEvUVFNcElHanFQN2hieFlsVGVlSU8yOUM4WlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZmVVhcp
sg6OfLLPgtFc1ksHOu4B5RsQTsFxJJfhO6EQGBtZystVLCAf8QxzH0Nm5RVg0Cm+
NGmeTH2I7yJrRMAoils1h6ANRADBhdrReVqs1/jtJMh3DQi4si+fDAvkFjdoRcEq
AymE5KN0kAP55aEM2TqidYqyxZFQZ5I1QHDNzJdIS0vb33BmkXGlGfkEW4sWBTwI
T3ELe1HoBfd2V6R4rTV0N+l+Zpd/c3JxOfkHv/pXzIIYcBrrqro8H4d5jL6dYicH
hYfBKsyQ48r81ckV997F3DqG8zwScfr5mQ62q6l64fxGnmLsBbzOUJ14HfBiQVN8
H6pFmvk6XaQ+ew==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:51 2025 by rpki-client