Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier: 6yyKrIwgh13Of+PgTdpdZlqgR6ygv0I1x8/67qQKP4s=
Subject key identifier: 82:EE:72:34:03:92:82:A5:5A:5E:C6:C4:84:EC:43:79:A5:FF:B1:AA
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial: 0194C4D10A1621F0335616B7EE0A2EBF5C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number: 0FE5
Signing time: Sun 02 Feb 2025 04:00:21 +0000
Manifest this update: Sun 02 Feb 2025 04:00:21 +0000
Manifest next update: Mon 03 Feb 2025 04:00:21 +0000
Files and hashes: 1: NNmIvWC2aG45EdXCFQyfOgMs8UM.roa (hash: dgfGD7cFEmQYML/LCfaIOvrAjQWUEzucY+z8ExOp2jM=)
2: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: D2jzRbgMN7VmL/A82P7ON/MDduQ7b/fC6k/67nmXdXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:0a:16:21:f0:33:56:16:b7:ee:0a:2e:bf:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Validity
Not Before: Feb 2 04:00:21 2025 GMT
Not After : Feb 3 04:00:21 2025 GMT
Subject: CN=82ee7234039282a55a5ec6c484ec4379a5ffb1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1b:35:3e:c9:5a:a7:9a:4d:b3:f7:f0:6a:21:
82:c6:84:01:85:f4:a4:4c:ef:3a:4f:fd:73:7c:38:
1b:76:3d:8a:d5:78:87:56:12:9c:6d:62:e7:8c:55:
f0:32:38:74:90:29:05:f6:c4:e9:99:72:e2:09:cc:
96:00:57:83:f1:21:16:06:b9:b3:04:fe:00:da:66:
30:99:46:db:de:50:5a:4a:2f:e5:83:e1:0c:f3:d2:
f1:bf:37:d9:d0:3f:e9:3a:cf:70:50:43:cc:f1:99:
01:00:4f:e2:d3:fb:60:13:2e:44:c4:d3:86:ea:dc:
32:a3:ac:98:34:8d:69:de:41:01:3a:bf:e1:5a:7c:
52:86:fc:b6:76:a4:81:a4:12:f8:35:01:0f:dd:15:
13:70:f8:f6:da:fa:5d:f9:67:9b:d2:f2:53:c7:2a:
97:7b:7b:64:02:a0:67:0a:5b:ba:e5:92:7a:6c:32:
67:0f:8b:9d:a1:50:4b:38:2f:05:44:b1:c9:4b:86:
39:ea:4f:72:e2:0c:a2:bf:f3:4c:26:ce:66:95:0b:
7a:b6:22:fb:74:8d:1b:2b:90:1a:0d:cc:5d:e0:ec:
78:f2:f9:8a:16:82:30:4c:74:bc:f9:fa:31:74:f5:
96:cd:50:c9:b5:98:db:45:64:06:35:22:1b:46:c1:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EE:72:34:03:92:82:A5:5A:5E:C6:C4:84:EC:43:79:A5:FF:B1:AA
X509v3 Authority Key Identifier:
keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3f:a0:f1:75:23:97:12:7b:ce:eb:4d:30:63:09:6d:2f:04:
3d:8e:71:ed:a4:7b:b0:fe:09:34:eb:49:fe:ef:03:96:04:e5:
bb:d7:8b:44:0b:9c:35:6e:83:98:ec:33:9d:0b:b5:3d:19:d7:
b5:d5:9b:a1:6e:1c:4e:95:50:5d:6d:b3:5b:02:5c:12:9e:79:
c6:cf:68:ee:d4:54:2c:d7:58:0c:b4:09:6b:ed:70:4c:10:32:
e4:fb:50:d0:98:d8:8f:05:6c:5e:f0:f0:f5:5e:bb:01:e2:68:
80:e4:86:aa:11:66:d4:85:bc:27:b3:60:d5:b5:99:cb:0c:cf:
22:9b:4f:75:c7:0a:e8:5c:b1:71:62:94:14:89:c7:c3:5f:46:
2d:72:4b:5a:ad:7b:5d:d4:22:bd:c6:3c:c8:5a:d0:76:fa:69:
6f:c1:3a:b5:f9:cd:9b:71:0b:44:20:59:6f:8e:1f:bf:96:06:
53:11:9c:d6:c2:0d:ea:06:59:d7:94:e8:ee:a5:91:bc:39:25:
6c:65:37:72:32:fc:96:75:7a:c6:2d:78:75:2e:98:f8:c5:27:
c7:e9:53:23:91:37:09:a8:cb:94:ec:12:c6:51:54:35:8a:f8:
bb:ed:29:70:b3:5a:30:4f:68:38:43:75:e6:cd:43:6f:da:f0:
ce:44:bb:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0QoWIfAzVha37gouv1yAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDg4ZGRiN2FlZDcyZGVhM2ZmOGQ2OWNlZDY1MzFhNTI3
OTRhYTcwHhcNMjUwMjAyMDQwMDIxWhcNMjUwMjAzMDQwMDIxWjAzMTEwLwYDVQQD
Eyg4MmVlNzIzNDAzOTI4MmE1NWE1ZWM2YzQ4NGVjNDM3OWE1ZmZiMWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxs1Pslap5pNs/fwaiGCxoQBhfSk
TO86T/1zfDgbdj2K1XiHVhKcbWLnjFXwMjh0kCkF9sTpmXLiCcyWAFeD8SEWBrmz
BP4A2mYwmUbb3lBaSi/lg+EM89LxvzfZ0D/pOs9wUEPM8ZkBAE/i0/tgEy5ExNOG
6twyo6yYNI1p3kEBOr/hWnxShvy2dqSBpBL4NQEP3RUTcPj22vpd+Web0vJTxyqX
e3tkAqBnClu65ZJ6bDJnD4udoVBLOC8FRLHJS4Y56k9y4gyiv/NMJs5mlQt6tiL7
dI0bK5AaDcxd4Ox48vmKFoIwTHS8+foxdPWWzVDJtZjbRWQGNSIbRsFfiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILucjQDkoKlWl7GxITsQ3ml/7GqMB8GA1UdIwQY
MBaAFEDYjdt67XLeo/+Nac7WUxpSeUqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUt
MzdhMjRlMDgxZjY4LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUtMzdhMjRlMDgxZjY4
LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfz+g8XUj
lxJ7zutNMGMJbS8EPY5x7aR7sP4JNOtJ/u8DlgTlu9eLRAucNW6DmOwznQu1PRnX
tdWboW4cTpVQXW2zWwJcEp55xs9o7tRULNdYDLQJa+1wTBAy5PtQ0JjYjwVsXvDw
9V67AeJogOSGqhFm1IW8J7Ng1bWZywzPIptPdccK6FyxcWKUFInHw19GLXJLWq17
XdQivcY8yFrQdvppb8E6tfnNm3ELRCBZb44fv5YGUxGc1sIN6gZZ15To7qWRvDkl
bGU3cjL8lnV6xi14dS6Y+MUnx+lTI5E3CajLlOwSxlFUNYr4u+0pcLNaME9oOEN1
5s1Db9rwzkS7bA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:40 2025 by rpki-client