Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
File: vqTtMeEp6Vu17P2FdXyddNO-42g.mft (raw, json)
Hash identifier: GjxZLlDqaAb1kO1zjNmfVGTUHv7ypRx/WesIj4Qj2SY=
Subject key identifier: 94:D3:BD:ED:DE:CA:B0:A9:89:03:80:EE:1A:DB:3F:6C:29:CD:CE:8A
Authority key identifier: BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68
Certificate issuer: /CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
Certificate serial: 0194C4635081A1327C5653F2FE5A427D4841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
Manifest number: 0829
Signing time: Sun 02 Feb 2025 02:00:30 +0000
Manifest this update: Sun 02 Feb 2025 02:00:30 +0000
Manifest next update: Mon 03 Feb 2025 02:00:30 +0000
Files and hashes: 1: vqTtMeEp6Vu17P2FdXyddNO-42g.crl (hash: VmPSvKoP+Bu481JgefLjTigz+3DZJcNP5QlwoV9KXFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:50:81:a1:32:7c:56:53:f2:fe:5a:42:7d:48:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
Validity
Not Before: Feb 2 02:00:30 2025 GMT
Not After : Feb 3 02:00:30 2025 GMT
Subject: CN=94d3bdeddecab0a9890380ee1adb3f6c29cdce8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f9:1f:2b:cd:b8:23:bc:40:ec:25:1e:36:56:
ee:06:c6:86:f0:82:b9:b7:d0:4b:c1:96:d2:b3:a1:
68:aa:ea:ba:08:11:07:45:d6:64:cf:9e:89:ba:58:
a0:92:31:87:36:75:46:f3:a5:9b:c6:31:bc:52:4f:
93:dc:49:1c:68:fb:6b:36:ff:8c:82:b8:43:80:82:
3f:2d:22:4d:f2:ef:0e:e3:6b:c8:af:c9:dc:ef:ba:
a7:2f:a8:23:04:f0:b3:4c:1f:48:94:f1:74:cd:37:
e6:87:0f:bc:f6:52:64:60:8a:a2:af:88:1f:48:9a:
d7:ad:82:87:18:44:21:b1:45:77:c7:35:76:3e:03:
74:ca:9e:0c:65:ad:2e:f9:5e:67:a3:8c:b9:6c:63:
5d:18:2e:75:a3:61:00:72:0c:ab:d4:33:44:0c:fb:
3f:0a:68:1d:26:4a:83:5c:71:53:b6:35:76:ec:d1:
d0:03:fd:fc:05:fa:55:02:d2:53:88:94:7d:38:e1:
39:9c:6e:f4:be:c2:74:b2:7e:90:e9:8d:54:e1:ab:
4b:2c:a5:cf:e3:e9:0d:bb:1e:64:e2:e7:ca:24:35:
a9:6a:15:cb:2c:f4:fe:b6:c4:e7:12:be:7d:6b:2b:
9d:63:b2:74:d4:67:01:d2:04:67:c3:59:24:13:c7:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D3:BD:ED:DE:CA:B0:A9:89:03:80:EE:1A:DB:3F:6C:29:CD:CE:8A
X509v3 Authority Key Identifier:
keyid:BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d0:f7:2d:aa:11:c3:3d:1a:23:80:ff:0c:3d:7e:6b:c9:22:
87:1d:93:8c:c1:37:ea:6f:57:13:ca:5c:8f:27:72:7b:3c:44:
a0:49:de:c7:bf:88:74:4c:f8:2b:95:c3:80:39:8e:18:16:ed:
66:76:0b:e4:4b:9b:af:48:e1:ab:c9:dd:26:7b:3f:c2:7d:17:
e9:d9:37:ed:5c:e5:12:29:8a:5a:35:70:f1:72:79:f4:89:b6:
81:99:48:32:97:53:8e:1a:30:35:62:ed:6c:31:14:9f:e7:e1:
35:27:65:a6:27:ff:a0:aa:29:fc:03:95:d9:90:70:be:4e:0a:
14:4b:60:1d:ce:93:93:e3:05:32:cb:ef:e5:1a:b2:37:a2:09:
6f:51:13:44:02:21:0a:32:ac:14:bf:54:f9:7b:9e:02:73:3b:
bc:1e:c0:84:91:63:3d:2a:cf:d8:2c:f0:1f:e0:9e:71:f7:1e:
7e:32:ef:ed:15:19:e4:bd:0d:c4:33:02:e4:b5:57:c2:e9:34:
b8:cb:93:e9:79:fa:40:99:b0:c8:71:1f:d7:42:7d:0f:0c:43:
58:ce:ca:3b:c9:e6:af:6b:ac:93:35:46:4f:4a:b1:ae:75:2f:
1a:6b:75:49:83:e2:d0:b4:33:64:ca:58:f8:e1:32:7f:cf:6b:
a9:2d:51:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY1CBoTJ8VlPy/lpCfUhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTRlZDMxZTEyOWU5NWJiNWVjZmQ4NTc1N2M5ZDc0ZDNi
ZWUzNjgwHhcNMjUwMjAyMDIwMDMwWhcNMjUwMjAzMDIwMDMwWjAzMTEwLwYDVQQD
Eyg5NGQzYmRlZGRlY2FiMGE5ODkwMzgwZWUxYWRiM2Y2YzI5Y2RjZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fkfK824I7xA7CUeNlbuBsaG8IK5
t9BLwZbSs6Foquq6CBEHRdZkz56JuligkjGHNnVG86WbxjG8Uk+T3EkcaPtrNv+M
grhDgII/LSJN8u8O42vIr8nc77qnL6gjBPCzTB9IlPF0zTfmhw+89lJkYIqir4gf
SJrXrYKHGEQhsUV3xzV2PgN0yp4MZa0u+V5no4y5bGNdGC51o2EAcgyr1DNEDPs/
CmgdJkqDXHFTtjV27NHQA/38BfpVAtJTiJR9OOE5nG70vsJ0sn6Q6Y1U4atLLKXP
4+kNux5k4ufKJDWpahXLLPT+tsTnEr59ayudY7J01GcB0gRnw1kkE8cLewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTTve3eyrCpiQOA7hrbP2wpzc6KMB8GA1UdIwQY
MBaAFL6k7THhKelbtez9hXV8nXTTvuNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTIt
OGM0YzY0MDUyNTFlLzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTItOGM0YzY0MDUyNTFl
LzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeND3LaoR
wz0aI4D/DD1+a8kihx2TjME36m9XE8pcjydyezxEoEnex7+IdEz4K5XDgDmOGBbt
ZnYL5Eubr0jhq8ndJns/wn0X6dk37VzlEimKWjVw8XJ59Im2gZlIMpdTjhowNWLt
bDEUn+fhNSdlpif/oKop/AOV2ZBwvk4KFEtgHc6Tk+MFMsvv5RqyN6IJb1ETRAIh
CjKsFL9U+XueAnM7vB7AhJFjPSrP2CzwH+CecfcefjLv7RUZ5L0NxDMC5LVXwuk0
uMuT6Xn6QJmwyHEf10J9DwxDWM7KO8nmr2uskzVGT0qxrnUvGmt1SYPi0LQzZMpY
+OEyf89rqS1RDg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:08 2025 by rpki-client