Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json)
Hash identifier: qcuvMoYmppE7pftMEcb5hq1LUT4yxWAZlYsbhYgBGYU=
Subject key identifier: 2A:A4:B3:B7:1E:C9:6A:E0:6C:78:6A:4B:EC:5E:D5:FC:B5:E0:1C:5E
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial: 019511A2CA2503DC2D068C9BA6D68427AF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 02:00:36 +0000
Manifest this update: Mon 17 Feb 2025 02:00:36 +0000
Manifest next update: Tue 18 Feb 2025 02:00:36 +0000
Files and hashes: 1: 0qda3zP6aWS1QmMsfKtgTS_B8vw.roa (hash: NDD2ZMdGd4Vw1apZklWLmjHBzI7LGvrNZrE04O9xutU=)
2: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: 0FYXPlbxX7ClsPtFyLhh9uV+xkNs263uQQZLwyygFD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ca:25:03:dc:2d:06:8c:9b:a6:d6:84:27:af:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Validity
Not Before: Feb 17 02:00:36 2025 GMT
Not After : Feb 18 02:00:36 2025 GMT
Subject: CN=2aa4b3b71ec96ae06c786a4bec5ed5fcb5e01c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:3c:a8:6d:8c:c7:45:d0:18:4a:9e:b6:cb:
3f:13:d4:72:74:b2:be:59:af:3a:cd:9f:18:7c:a8:
04:c4:b4:94:1b:76:6a:34:67:9f:94:2b:5a:71:9e:
9e:3a:54:13:00:23:c9:e3:53:7c:83:72:1c:36:0e:
bc:4b:a3:c4:3f:56:8d:01:91:ec:86:51:6c:99:7d:
84:1c:08:1b:8a:35:e5:c2:f7:80:3a:48:c6:d2:21:
fd:e6:39:da:42:66:4b:96:4c:94:e4:25:42:1a:8e:
e2:29:72:71:69:20:37:bd:48:19:1a:13:a5:bc:4f:
20:b9:7a:93:23:6d:76:c0:39:93:e1:9e:45:3d:a0:
91:8b:4a:31:41:07:99:2f:56:29:a7:b7:f8:53:a7:
a9:d1:82:63:99:c4:2b:7a:a0:1d:8a:df:64:f1:01:
1c:d0:c0:65:f6:b6:15:3c:42:5a:0b:cf:61:9a:cf:
be:32:e5:e4:d2:78:74:88:b7:bc:a3:46:cb:cf:88:
32:dc:e4:83:b2:b6:5e:24:c5:f5:cc:9b:6b:9e:53:
c7:4e:05:1e:4e:b8:64:96:f1:8c:cc:60:3d:b5:e6:
b8:fe:f0:10:f0:46:0a:74:de:43:b7:79:ff:59:eb:
e8:e7:de:ec:db:97:71:37:bc:d8:2c:38:12:51:d0:
ee:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A4:B3:B7:1E:C9:6A:E0:6C:78:6A:4B:EC:5E:D5:FC:B5:E0:1C:5E
X509v3 Authority Key Identifier:
keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ba:77:f5:b6:7b:db:8d:cc:bb:99:a1:92:13:b7:44:77:1a:
9b:ba:6f:21:b0:68:2a:65:e2:ca:10:c4:f2:41:9c:61:ab:2b:
12:03:0a:78:90:95:4b:2a:bb:5f:92:5c:ab:17:9d:6e:bc:4e:
a5:ac:4d:98:85:e9:ab:2c:db:36:ce:da:2f:d2:f4:1e:9e:7a:
da:8c:d8:fe:bc:39:14:6d:2f:1e:8b:6b:ac:8c:ae:cf:d9:ac:
03:01:31:ab:70:22:f8:14:74:89:a0:35:96:7e:f8:6a:d4:81:
4e:58:5a:60:b4:4a:0a:4d:9c:28:34:d0:2a:4c:0a:75:cc:5b:
d7:b9:a5:fe:6f:e2:2f:b1:5b:0f:a6:e5:0c:a7:7d:4a:e3:2c:
44:87:03:f7:61:b6:e2:43:21:84:9c:b3:71:e1:0c:97:f8:42:
d4:41:40:0f:65:48:9b:4d:f2:53:77:bf:c9:5b:4d:d8:75:9f:
30:d9:62:bf:9c:33:68:83:f0:98:c2:c8:34:88:e6:cb:18:43:
28:3c:e2:b1:15:fc:e6:b5:e8:d8:bb:fd:6c:2a:8a:4c:2a:ca:
95:d2:50:8b:fa:76:76:e6:bd:a0:50:2d:71:a8:7a:a7:d4:8a:
23:39:2d:b8:39:85:b6:93:79:9e:94:bd:eb:4c:e8:06:2e:18:
9f:eb:5a:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURosolA9wtBoybptaEJ69gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxM2ZmYTEwNmFlM2ZlZTZiZTg3YmFjMDZhODdiYTU3ZWQx
YzExNDAwHhcNMjUwMjE3MDIwMDM2WhcNMjUwMjE4MDIwMDM2WjAzMTEwLwYDVQQD
EygyYWE0YjNiNzFlYzk2YWUwNmM3ODZhNGJlYzVlZDVmY2I1ZTAxYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBE8qG2Mx0XQGEqetss/E9RydLK+
Wa86zZ8YfKgExLSUG3ZqNGeflCtacZ6eOlQTACPJ41N8g3IcNg68S6PEP1aNAZHs
hlFsmX2EHAgbijXlwveAOkjG0iH95jnaQmZLlkyU5CVCGo7iKXJxaSA3vUgZGhOl
vE8guXqTI212wDmT4Z5FPaCRi0oxQQeZL1Ypp7f4U6ep0YJjmcQreqAdit9k8QEc
0MBl9rYVPEJaC89hms++MuXk0nh0iLe8o0bLz4gy3OSDsrZeJMX1zJtrnlPHTgUe
TrhklvGMzGA9tea4/vAQ8EYKdN5Dt3n/Wevo597s25dxN7zYLDgSUdDuSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqks7ceyWrgbHhqS+xe1fy14BxeMB8GA1UdIwQY
MBaAFEE/+hBq4/7mvoe6wGqHulftHBFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMt
ZmEyNmVjMzlmYWJhLzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMtZmEyNmVjMzlmYWJh
LzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrp39bZ7
243Mu5mhkhO3RHcam7pvIbBoKmXiyhDE8kGcYasrEgMKeJCVSyq7X5JcqxedbrxO
paxNmIXpqyzbNs7aL9L0Hp562ozY/rw5FG0vHotrrIyuz9msAwExq3Ai+BR0iaA1
ln74atSBTlhaYLRKCk2cKDTQKkwKdcxb17ml/m/iL7FbD6blDKd9SuMsRIcD92G2
4kMhhJyzceEMl/hC1EFAD2VIm03yU3e/yVtN2HWfMNliv5wzaIPwmMLINIjmyxhD
KDzisRX85rXo2Lv9bCqKTCrKldJQi/p2dua9oFAtcah6p9SKIzktuDmFtpN5npS9
60zoBi4Yn+ta+A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:31 2025 by rpki-client