Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File: jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier: ZeEpF2pnU+pQNxb9pyOksn7uF4OFlTyobyFdiKSr3dM=
Subject key identifier: 5E:38:66:E0:4A:AF:99:95:9E:42:26:B6:2C:68:8A:F8:B4:CA:42:5C
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial: 0194C42C59B87F91F5F9741CAAC91B2BBDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number: 1087
Signing time: Sun 02 Feb 2025 01:00:28 +0000
Manifest this update: Sun 02 Feb 2025 01:00:28 +0000
Manifest next update: Mon 03 Feb 2025 01:00:28 +0000
Files and hashes: 1: Lp4_8KBWJdha2Jzdhq102LYjczg.roa (hash: sRJMp6kjdQS4Uru55TcR1RrRtgv1vq1HoJumS3BQdg8=)
2: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: hiiFSSuqmslxPiK3Fc5wDBvB3gk6tPL9wt4b5YwnWGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:59:b8:7f:91:f5:f9:74:1c:aa:c9:1b:2b:bd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Validity
Not Before: Feb 2 01:00:28 2025 GMT
Not After : Feb 3 01:00:28 2025 GMT
Subject: CN=5e3866e04aaf99959e4226b62c688af8b4ca425c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7d:81:ba:ed:b9:84:37:10:ad:f9:d9:3f:af:
54:46:3d:fe:2e:b3:a6:ab:d9:42:7b:2b:34:fb:f4:
8c:eb:4e:24:4a:91:c4:33:9a:d8:a6:ff:0b:23:56:
9f:9a:ee:3d:1a:77:bd:fe:d9:f4:a6:7a:af:12:b5:
22:c0:b9:ec:5d:b9:bb:52:56:46:04:54:b2:3a:38:
a5:a2:48:6d:6c:c3:67:5a:2f:da:18:3d:6f:35:1d:
fa:72:64:5d:2c:80:dc:de:b4:10:1c:6e:cb:9e:32:
60:b6:7e:33:c7:15:de:1e:44:eb:a6:22:b8:1f:02:
fe:bf:ed:6b:bb:1c:74:b4:bd:85:54:c3:71:a4:f6:
0e:c1:70:05:84:e0:7a:76:e7:4f:c0:ff:4e:70:02:
00:ad:41:cf:fd:7b:f7:dd:04:e9:11:40:a2:0f:c2:
d3:ec:7d:b5:6e:df:46:2c:ee:c2:c5:ba:ff:c6:a5:
0d:db:2c:22:7f:88:2e:bc:dc:1a:63:0e:40:50:fb:
ec:70:8a:74:71:9a:8f:99:a0:b7:9e:b0:02:16:92:
be:8a:40:d7:e4:49:a1:5d:16:3c:f9:92:d1:8c:f5:
83:ac:32:58:2d:6d:09:3f:bd:8b:64:fc:e1:19:9e:
6f:d5:87:ca:24:7a:58:b0:35:b7:52:4e:94:22:95:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:38:66:E0:4A:AF:99:95:9E:42:26:B6:2C:68:8A:F8:B4:CA:42:5C
X509v3 Authority Key Identifier:
keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ca:fc:f7:e1:cc:93:48:ff:c6:e3:d7:78:fe:2f:c2:29:2c:
3b:0e:d3:42:1c:b6:df:64:2e:a9:6a:7b:45:d5:9c:79:36:d9:
96:ad:66:de:87:7c:f8:67:38:9b:26:11:48:1c:98:cb:f4:eb:
3b:a3:a8:04:f6:cf:0c:ff:56:5e:31:03:87:08:a4:08:c2:64:
1a:6a:73:34:9a:05:8c:e7:12:cb:9e:6b:6d:8d:7f:c5:54:b9:
38:af:83:d8:ae:2a:c0:43:89:59:5b:fb:44:f0:cf:e0:b9:45:
4a:75:22:ee:8c:cf:25:28:5c:54:7f:01:11:89:df:c6:ef:17:
9d:21:49:fa:6a:e6:fe:90:a9:d4:f4:e7:7b:db:04:ca:6a:11:
6c:f7:b4:0d:a6:10:8f:ac:7a:9a:5a:f7:a7:7d:8a:be:08:fc:
3a:18:06:1a:5d:99:81:e5:6c:6a:14:2a:69:75:dc:40:a1:cd:
08:fb:4a:b9:eb:46:d5:6a:32:04:4d:27:1a:fe:15:c2:40:1b:
19:be:cd:b3:28:b0:60:39:42:e8:93:4c:5e:7d:87:d1:af:25:
94:ba:77:79:03:58:94:dc:fd:44:8d:6d:ea:04:ce:c2:a1:ad:
4e:75:d0:a9:6f:0b:36:a3:40:fd:a3:66:51:85:e7:b4:2d:0a:
46:00:32:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELFm4f5H1+XQcqskbK72qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWMzNmZmNTMzZWI2ZjhmOGFhNjU5MjAyMjBjZmE0NzFl
NWEyYjEwHhcNMjUwMjAyMDEwMDI4WhcNMjUwMjAzMDEwMDI4WjAzMTEwLwYDVQQD
Eyg1ZTM4NjZlMDRhYWY5OTk1OWU0MjI2YjYyYzY4OGFmOGI0Y2E0MjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n2Buu25hDcQrfnZP69URj3+LrOm
q9lCeys0+/SM604kSpHEM5rYpv8LI1afmu49Gne9/tn0pnqvErUiwLnsXbm7UlZG
BFSyOjilokhtbMNnWi/aGD1vNR36cmRdLIDc3rQQHG7LnjJgtn4zxxXeHkTrpiK4
HwL+v+1ruxx0tL2FVMNxpPYOwXAFhOB6dudPwP9OcAIArUHP/Xv33QTpEUCiD8LT
7H21bt9GLO7Cxbr/xqUN2ywif4guvNwaYw5AUPvscIp0cZqPmaC3nrACFpK+ikDX
5EmhXRY8+ZLRjPWDrDJYLW0JP72LZPzhGZ5v1YfKJHpYsDW3Uk6UIpWiswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF44ZuBKr5mVnkImtixoivi0ykJcMB8GA1UdIwQY
MBaAFI6sNv9TPrb4+KplkgIgz6Rx5aKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUt
NTZiYTE5OGQxN2YwLzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUtNTZiYTE5OGQxN2Yw
LzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsr89+HM
k0j/xuPXeP4vwiksOw7TQhy232QuqWp7RdWceTbZlq1m3od8+Gc4myYRSByYy/Tr
O6OoBPbPDP9WXjEDhwikCMJkGmpzNJoFjOcSy55rbY1/xVS5OK+D2K4qwEOJWVv7
RPDP4LlFSnUi7ozPJShcVH8BEYnfxu8XnSFJ+mrm/pCp1PTne9sEymoRbPe0DaYQ
j6x6mlr3p32Kvgj8OhgGGl2ZgeVsahQqaXXcQKHNCPtKuetG1WoyBE0nGv4VwkAb
Gb7NsyiwYDlC6JNMXn2H0a8llLp3eQNYlNz9RI1t6gTOwqGtTnXQqW8LNqNA/aNm
UYXntC0KRgAyDQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:57 2025 by rpki-client