Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: 6lPhHEfGBO17uj6X+HocAOjajvhHDhMylTWsdjTSJc8=
Subject key identifier: DB:60:29:8F:CA:7A:B5:58:EA:9F:29:44:8E:DF:F3:46:E0:1C:04:11
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 019512106C0D4BE17C5140FD4DC600F85178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 1229
Signing time: Mon 17 Feb 2025 04:00:20 +0000
Manifest this update: Mon 17 Feb 2025 04:00:20 +0000
Manifest next update: Tue 18 Feb 2025 04:00:20 +0000
Files and hashes: 1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: SgxqnTfgKSor8L9btF/iiiVaACe947TmQFzyWnZGcIA=)
3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:6c:0d:4b:e1:7c:51:40:fd:4d:c6:00:f8:51:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Feb 17 04:00:20 2025 GMT
Not After : Feb 18 04:00:20 2025 GMT
Subject: CN=db60298fca7ab558ea9f29448edff346e01c0411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:91:ed:65:64:77:22:7c:60:d8:d2:c0:25:
4d:01:3e:9d:65:30:99:d1:40:a9:8d:1c:08:96:73:
79:5d:cc:88:c0:60:ec:74:34:e4:af:d8:27:19:51:
94:1c:05:f4:3b:e6:82:ef:5e:0d:eb:61:35:b6:92:
fa:35:68:d3:dc:22:6f:ec:fb:16:49:42:49:3b:ce:
8c:ca:e5:9a:3a:b4:d6:97:8b:d2:86:4c:ea:46:39:
bf:fe:65:96:a8:82:17:57:bb:36:ad:c2:a3:b8:a2:
5a:5a:7c:2c:3d:fa:6c:1a:23:cb:69:82:ab:b1:3e:
3b:ac:fe:b8:63:ab:7e:b9:94:c0:a2:cb:ed:77:95:
9c:7e:b4:d6:c1:4c:a9:f3:09:02:4f:51:e4:ab:84:
4c:a9:9f:c7:c7:30:32:d3:f5:92:c2:47:d7:f0:52:
a0:f8:65:3e:0e:04:0a:04:d3:3b:8b:36:54:88:06:
93:26:e8:39:e8:f5:ac:39:77:39:6b:3d:35:e5:30:
a3:f5:8e:b6:50:95:68:8b:b5:5f:ea:e3:b0:b9:92:
ad:12:5f:d9:c5:37:d0:4f:4c:28:a0:43:e0:08:50:
b6:33:0c:56:db:50:38:8e:60:8d:02:b9:62:a9:0f:
b3:b2:1c:e6:65:13:33:bf:f7:54:2c:95:9b:c1:22:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:60:29:8F:CA:7A:B5:58:EA:9F:29:44:8E:DF:F3:46:E0:1C:04:11
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:34:2f:ce:e4:3c:c3:83:f7:63:e3:a8:27:34:7d:93:fc:de:
eb:5a:8a:29:20:13:a6:55:54:ae:6c:e0:9c:d4:b8:3c:55:b9:
6c:09:73:56:13:de:63:41:c5:4e:0b:4b:d1:6a:59:dd:ac:d9:
cc:72:fb:aa:70:2f:66:13:88:e5:5c:ad:57:57:44:1a:ff:bc:
30:bb:d3:64:4a:66:95:a2:c6:00:78:30:a0:19:e7:7b:a8:09:
be:40:36:1f:85:5e:e1:48:ee:f7:51:c4:2a:84:a6:f4:84:98:
56:0f:a6:20:b3:f6:d3:fb:94:3f:cc:9c:2a:7a:a0:2f:db:3d:
7f:85:00:8a:76:20:76:41:6c:5a:0c:fa:4f:61:ae:6f:c6:a0:
ed:74:1e:1e:fe:14:f0:7e:7d:04:dd:3c:5a:6d:ea:59:74:40:
40:69:1d:97:51:13:60:14:33:96:3f:e4:85:c3:6c:fd:35:a5:
eb:4e:fa:42:8b:8f:3c:8c:d5:be:e8:01:a9:5d:b7:3b:22:3e:
3f:cd:6a:08:ed:39:b7:38:1a:21:89:d2:3f:4f:df:40:28:53:
f6:1f:f2:f6:7c:3b:65:3c:64:80:e4:f8:ce:3b:fe:6a:d3:d4:
16:96:b9:db:6b:d3:c0:79:7e:2d:61:2d:5e:fa:8b:1d:e6:60:
c7:4b:25:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEGwNS+F8UUD9TcYA+FF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjU0ZDRhNzY3YWQwOTk2MDZlNDQyZTA5MmY5MTI0MWEz
NjM2NzAwHhcNMjUwMjE3MDQwMDIwWhcNMjUwMjE4MDQwMDIwWjAzMTEwLwYDVQQD
EyhkYjYwMjk4ZmNhN2FiNTU4ZWE5ZjI5NDQ4ZWRmZjM0NmUwMWMwNDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU6R7WVkdyJ8YNjSwCVNAT6dZTCZ
0UCpjRwIlnN5XcyIwGDsdDTkr9gnGVGUHAX0O+aC714N62E1tpL6NWjT3CJv7PsW
SUJJO86MyuWaOrTWl4vShkzqRjm//mWWqIIXV7s2rcKjuKJaWnwsPfpsGiPLaYKr
sT47rP64Y6t+uZTAosvtd5WcfrTWwUyp8wkCT1Hkq4RMqZ/HxzAy0/WSwkfX8FKg
+GU+DgQKBNM7izZUiAaTJug56PWsOXc5az015TCj9Y62UJVoi7Vf6uOwuZKtEl/Z
xTfQT0wooEPgCFC2MwxW21A4jmCNArliqQ+zshzmZRMzv/dULJWbwSLSKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtgKY/KerVY6p8pRI7f80bgHAQRMB8GA1UdIwQY
MBaAFEAlTUp2etCZYG5ELgkvkSQaNjZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2Ut
YmJlOTEyZWVjNzNlLzEvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2UtYmJlOTEyZWVjNzNl
LzEvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDQvzuQ8
w4P3Y+OoJzR9k/ze61qKKSATplVUrmzgnNS4PFW5bAlzVhPeY0HFTgtL0WpZ3azZ
zHL7qnAvZhOI5VytV1dEGv+8MLvTZEpmlaLGAHgwoBnne6gJvkA2H4Ve4Uju91HE
KoSm9ISYVg+mILP20/uUP8ycKnqgL9s9f4UAinYgdkFsWgz6T2Gub8ag7XQeHv4U
8H59BN08Wm3qWXRAQGkdl1ETYBQzlj/khcNs/TWl6076QouPPIzVvugBqV23OyI+
P81qCO05tzgaIYnSP0/fQChT9h/y9nw7ZTxkgOT4zjv+atPUFpa522vTwHl+LWEt
XvqLHeZgx0slrA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:49 2025 by rpki-client