Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
File: PqGMkbK-KKB0uaOHSpC0RgE84b4.mft (raw, json)
Hash identifier: cZl0rBuNyELh75jGgXP1JXcYa/uw7PUuNij9RZx7gvY=
Subject key identifier: 57:99:D0:7C:53:F7:2C:E2:F5:C0:DF:94:B6:C5:3D:F7:47:F4:EA:8B
Authority key identifier: 3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
Certificate issuer: /CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Certificate serial: 0194BB96E1148C01DCD4EE70C2D35D12A57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
Manifest number: 01BF
Signing time: Fri 31 Jan 2025 09:00:14 +0000
Manifest this update: Fri 31 Jan 2025 09:00:14 +0000
Manifest next update: Sat 01 Feb 2025 09:00:14 +0000
Files and hashes: 1: PqGMkbK-KKB0uaOHSpC0RgE84b4.crl (hash: mmjOUeg2W1e5Bv8cg2IZwG9A02FwyW0OKWdT9wKs0Ls=)
2: w78-PkWjkmBWzXnYfu0GZ4j6LVI.roa (hash: BzBqUt4k6YCYPQ6Nn7PdPu+ICTIm/5kh0/Z+KfmEAhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:e1:14:8c:01:dc:d4:ee:70:c2:d3:5d:12:a5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Validity
Not Before: Jan 31 09:00:14 2025 GMT
Not After : Feb 1 09:00:14 2025 GMT
Subject: CN=5799d07c53f72ce2f5c0df94b6c53df747f4ea8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:de:fb:ae:be:69:7c:c1:4f:9c:8b:0e:53:
92:2c:29:54:0e:72:64:28:00:16:5b:89:ca:e8:91:
7f:6e:a1:e2:f9:30:d8:36:dd:6d:1a:7f:e3:d9:47:
88:87:4e:dd:9e:77:33:f0:90:80:0d:2c:36:f1:32:
b1:c2:43:b8:e5:2d:af:26:03:55:a2:a7:ec:5d:26:
97:ff:30:7e:21:f0:20:f1:94:64:13:b8:cf:82:6d:
e3:36:fd:f8:82:56:ba:8b:44:a3:8b:b3:ed:ec:4b:
aa:78:f2:fe:05:47:1b:6f:9c:59:d3:0b:ee:e8:e7:
93:64:c8:bf:56:f4:52:df:a4:08:c3:15:43:44:c3:
06:21:e3:85:7d:c1:83:79:84:e6:31:57:99:e3:eb:
6a:62:2f:11:91:89:88:45:cf:0b:9e:8d:73:15:b8:
1b:0b:e8:e3:6b:14:3a:1e:8c:50:61:a7:1f:69:33:
1b:82:5a:bc:81:de:15:0b:24:6a:5d:70:4e:fd:e4:
f2:27:c5:90:36:41:37:59:c7:50:8a:bb:e4:8b:08:
ec:4a:82:93:d0:ed:5c:c7:9b:9e:bb:08:c7:01:ad:
7c:1f:83:53:3c:3d:d2:cb:a2:1a:12:e5:68:e1:8b:
af:99:3b:4b:23:a0:ad:47:e0:2d:da:49:33:c9:c8:
83:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:99:D0:7C:53:F7:2C:E2:F5:C0:DF:94:B6:C5:3D:F7:47:F4:EA:8B
X509v3 Authority Key Identifier:
keyid:3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:42:83:11:56:b3:57:e5:45:b1:bb:68:46:a6:20:0e:f4:94:
d1:73:4f:f2:5e:ba:50:09:ae:dc:5b:7b:96:7c:eb:2b:2c:59:
18:b3:20:66:79:fd:86:61:e9:e1:0f:2b:58:e0:55:d8:8a:8b:
65:6b:a3:0e:e4:72:e9:ff:e3:fe:e7:46:d7:00:38:07:37:88:
af:d9:f3:ba:1e:ac:83:05:a7:fc:6d:06:45:26:5e:9a:ca:0a:
6f:17:15:26:1e:d6:6c:37:1b:b5:ae:a1:5e:3a:1e:98:30:7e:
e1:1c:1a:39:22:a6:60:4a:c1:64:72:8e:24:a4:98:66:e1:9d:
a6:fe:16:88:af:db:88:b5:af:10:5f:bd:7c:21:a6:41:2f:38:
4a:c4:d7:eb:c7:b1:cf:b3:e7:26:18:c0:5f:1c:30:29:5b:b8:
36:cd:93:cb:b6:43:7f:6b:b8:53:d5:11:27:3b:9a:d4:37:cd:
f9:07:dd:03:21:37:3f:81:4e:d7:eb:1d:b6:0d:78:4a:84:37:
40:cf:b0:c9:30:bb:1c:d0:9f:b2:4e:90:93:dd:c4:38:63:ca:
2e:51:f2:e6:d3:85:98:44:dc:39:89:ed:e7:27:d9:50:76:c0:
d5:c7:0f:47:bc:0d:ba:fc:a1:0c:4b:fd:ff:3b:b0:f7:8c:cc:
2f:38:7f:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7luEUjAHc1O5wwtNdEqV9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTE4YzkxYjJiZTI4YTA3NGI5YTM4NzRhOTBiNDQ2MDEz
Y2UxYmUwHhcNMjUwMTMxMDkwMDE0WhcNMjUwMjAxMDkwMDE0WjAzMTEwLwYDVQQD
Eyg1Nzk5ZDA3YzUzZjcyY2UyZjVjMGRmOTRiNmM1M2RmNzQ3ZjRlYThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLLe+66+aXzBT5yLDlOSLClUDnJk
KAAWW4nK6JF/bqHi+TDYNt1tGn/j2UeIh07dnncz8JCADSw28TKxwkO45S2vJgNV
oqfsXSaX/zB+IfAg8ZRkE7jPgm3jNv34gla6i0Sji7Pt7EuqePL+BUcbb5xZ0wvu
6OeTZMi/VvRS36QIwxVDRMMGIeOFfcGDeYTmMVeZ4+tqYi8RkYmIRc8Lno1zFbgb
C+jjaxQ6HoxQYacfaTMbglq8gd4VCyRqXXBO/eTyJ8WQNkE3WcdQirvkiwjsSoKT
0O1cx5ueuwjHAa18H4NTPD3Sy6IaEuVo4YuvmTtLI6CtR+At2kkzyciDoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeZ0HxT9yzi9cDflLbFPfdH9OqLMB8GA1UdIwQY
MBaAFD6hjJGyviigdLmjh0qQtEYBPOG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9jYTM2NDktYzI5Zi00ZTkwLTg4MjIt
YmM2NWVmNmIyN2I2LzEvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9jYTM2NDktYzI5Zi00ZTkwLTg4MjItYmM2NWVmNmIyN2I2
LzEvUHFHTWtiSy1LS0IwdWFPSFNwQzBSZ0U4NGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUKDEVaz
V+VFsbtoRqYgDvSU0XNP8l66UAmu3Ft7lnzrKyxZGLMgZnn9hmHp4Q8rWOBV2IqL
ZWujDuRy6f/j/udG1wA4BzeIr9nzuh6sgwWn/G0GRSZemsoKbxcVJh7WbDcbta6h
XjoemDB+4RwaOSKmYErBZHKOJKSYZuGdpv4WiK/biLWvEF+9fCGmQS84SsTX68ex
z7PnJhjAXxwwKVu4Ns2Ty7ZDf2u4U9URJzua1DfN+QfdAyE3P4FO1+sdtg14SoQ3
QM+wyTC7HNCfsk6Qk93EOGPKLlHy5tOFmETcOYnt5yfZUHbA1ccPR7wNuvyhDEv9
/zuw94zMLzh/nA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:49 2025 by rpki-client on console-fra.rpki-client.org