Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
File: CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json)
Hash identifier: OCvsfIdgWSng6rnGWXsFwXi+wFc4WOM3FX6Qr0g/V/4=
Subject key identifier: 93:75:10:5C:EB:39:E4:92:B6:FC:3E:51:6C:CA:7E:33:2B:C4:51:C6
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Certificate issuer: /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial: 0195116BCA8F6BCAA646B0D3A4D326EEFD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
Manifest number: 02BE
Signing time: Mon 17 Feb 2025 01:00:31 +0000
Manifest this update: Mon 17 Feb 2025 01:00:31 +0000
Manifest next update: Tue 18 Feb 2025 01:00:31 +0000
Files and hashes: 1: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: GjQ1bowWWmuai8sw2Lpe7+Qz1ig/Nl7WdHy/KOkRca4=)
2: z81aD-MDwzkjF_KOvhdaxj86KX4.roa (hash: E1FgG/yobviIZfsUKtsw9yD/n1PK8j1TNBK/5+kRW/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:ca:8f:6b:ca:a6:46:b0:d3:a4:d3:26:ee:fd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
Validity
Not Before: Feb 17 01:00:31 2025 GMT
Not After : Feb 18 01:00:31 2025 GMT
Subject: CN=9375105ceb39e492b6fc3e516cca7e332bc451c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:16:9f:41:f5:bc:c5:55:68:09:52:d9:a9:2c:
30:0a:16:9c:d7:8a:a8:37:d8:e9:fa:ae:37:af:b2:
8d:24:07:cc:06:9d:6c:58:51:44:6a:18:e2:a6:eb:
c8:b1:4d:00:61:8d:75:c7:b7:90:c7:fd:12:f4:5c:
4f:5e:c7:1e:b0:93:d7:5d:dd:5c:29:51:eb:97:43:
5d:0c:2c:c0:e9:c6:eb:24:7a:ae:6c:b3:15:39:5c:
c1:49:e7:2a:04:78:9b:1e:ea:67:5e:81:53:96:a1:
c3:a4:49:a4:82:2b:6c:1d:fb:ed:b0:9b:de:31:f2:
2f:f3:57:69:c2:c0:9a:cc:3f:ba:eb:4e:5d:9f:c1:
7c:b7:d5:2e:b9:55:a0:14:b5:3a:74:32:87:7f:c0:
e6:98:99:26:78:31:bc:90:b1:c5:69:03:27:1d:06:
3b:f8:ad:af:9a:9c:e9:47:2f:06:af:e0:71:1e:06:
82:19:c0:a2:87:17:cc:be:e8:9c:7b:e2:94:1b:bd:
ff:9e:9b:4d:40:ea:37:d0:77:ae:3c:ef:ee:5e:13:
9e:89:76:ac:7c:ea:ae:15:b0:66:93:ae:90:a6:59:
a3:63:9e:fe:6d:ae:58:08:f9:b5:32:72:bf:a2:7d:
bc:88:9e:67:46:36:20:c2:46:59:8b:98:ff:32:c0:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:75:10:5C:EB:39:E4:92:B6:FC:3E:51:6C:CA:7E:33:2B:C4:51:C6
X509v3 Authority Key Identifier:
keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:1e:9d:a5:bb:4c:d9:24:7a:77:61:cc:61:2a:49:8d:6d:74:
b3:6b:82:14:c3:36:71:a4:fa:62:2c:b0:75:07:f1:a9:9a:6a:
52:ca:b9:e8:f3:eb:29:05:75:fd:8d:3a:55:84:a0:3d:4f:62:
1c:08:45:ab:0b:02:58:fe:e4:25:89:ae:bd:c5:05:83:dc:23:
18:2c:62:b6:5a:e7:65:47:7d:59:06:2b:5c:e3:73:8b:2c:d8:
63:68:00:1d:ed:30:9c:44:9c:2a:b7:1d:6e:3a:69:81:4b:7a:
b2:d8:2f:f9:1b:0a:39:b5:23:f8:88:4e:3b:21:8b:e3:6a:e7:
6a:97:5d:e4:4b:d2:8c:16:5e:7f:5c:c8:44:29:21:3d:d1:b5:
cb:02:6c:5f:10:71:6c:84:2b:f6:57:90:1b:70:70:bf:6e:17:
4e:fd:90:d2:f9:9e:71:67:22:1d:63:40:2d:a5:98:19:d5:fd:
26:a8:7e:81:9d:ca:cd:21:27:f8:64:8d:b4:e3:ef:a8:a0:68:
8e:4f:c6:b9:83:a6:62:73:6d:be:53:cb:3e:ce:0c:eb:e0:1a:
d1:67:0f:7b:d5:7a:7b:03:b8:b9:ba:f3:0c:3f:07:39:e7:ce:
46:09:ef:b3:5a:8b:a8:5f:0d:f6:ec:ea:1f:68:1c:87:e0:3e:
f4:30:4b:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa8qPa8qmRrDTpNMm7v1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4N2FhYzY3NGU0ZTU3OTYwMjAxYTM0YzJjMDQyNDg2MWE3
ZmIwNzcwHhcNMjUwMjE3MDEwMDMxWhcNMjUwMjE4MDEwMDMxWjAzMTEwLwYDVQQD
Eyg5Mzc1MTA1Y2ViMzllNDkyYjZmYzNlNTE2Y2NhN2UzMzJiYzQ1MWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xafQfW8xVVoCVLZqSwwChac14qo
N9jp+q43r7KNJAfMBp1sWFFEahjipuvIsU0AYY11x7eQx/0S9FxPXscesJPXXd1c
KVHrl0NdDCzA6cbrJHqubLMVOVzBSecqBHibHupnXoFTlqHDpEmkgitsHfvtsJve
MfIv81dpwsCazD+6605dn8F8t9UuuVWgFLU6dDKHf8DmmJkmeDG8kLHFaQMnHQY7
+K2vmpzpRy8Gr+BxHgaCGcCihxfMvuice+KUG73/nptNQOo30HeuPO/uXhOeiXas
fOquFbBmk66QplmjY57+ba5YCPm1MnK/on28iJ5nRjYgwkZZi5j/MsCxTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJN1EFzrOeSStvw+UWzKfjMrxFHGMB8GA1UdIwQY
MBaAFAh6rGdOTleWAgGjTCwEJIYaf7B3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNTgyZTgtMDY5OC00YmFmLTkwMjgt
ZGYwMmIxM2UyZTRhLzEvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNTgyZTgtMDY5OC00YmFmLTkwMjgtZGYwMmIxM2UyZTRh
LzEvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuB6dpbtM
2SR6d2HMYSpJjW10s2uCFMM2caT6YiywdQfxqZpqUsq56PPrKQV1/Y06VYSgPU9i
HAhFqwsCWP7kJYmuvcUFg9wjGCxitlrnZUd9WQYrXONziyzYY2gAHe0wnEScKrcd
bjppgUt6stgv+RsKObUj+IhOOyGL42rnapdd5EvSjBZef1zIRCkhPdG1ywJsXxBx
bIQr9leQG3Bwv24XTv2Q0vmecWciHWNALaWYGdX9Jqh+gZ3KzSEn+GSNtOPvqKBo
jk/GuYOmYnNtvlPLPs4M6+Aa0WcPe9V6ewO4ubrzDD8HOefORgnvs1qLqF8N9uzq
H2gch+A+9DBLsA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:38 2025 by rpki-client