Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier: pgAhE5tUt/nWKGCboZ1QJbZVTyFOz3cLRKA9nh5xpvw=
Subject key identifier: 34:EE:7A:26:43:E4:D5:55:88:2A:33:37:D1:DF:77:93:42:07:57:00
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 0194C4D16AC55850B7A1B7AF65AB50EC7FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number: 1435
Signing time: Sun 02 Feb 2025 04:00:46 +0000
Manifest this update: Sun 02 Feb 2025 04:00:46 +0000
Manifest next update: Mon 03 Feb 2025 04:00:46 +0000
Files and hashes: 1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=)
2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=)
3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: vpeSuNz5krshoK4t88+8lqySvGd9kn9VH/WLZg3M9G0=)
4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=)
5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=)
6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=)
7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=)
8: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=)
9: o6y2fyURWeu2t_DFurQx7USUPKs.roa (hash: kPReXruwGea93kBP9pEyd3hI0ZYY5dR0hxSQpsQ2xeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:6a:c5:58:50:b7:a1:b7:af:65:ab:50:ec:7f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Feb 2 04:00:46 2025 GMT
Not After : Feb 3 04:00:46 2025 GMT
Subject: CN=34ee7a2643e4d555882a3337d1df779342075700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:5c:ae:2f:34:6f:df:f0:b1:d0:bf:e6:58:
02:83:55:8f:d9:68:49:ce:ef:b9:cb:34:47:e0:62:
cf:fe:88:da:d4:72:ef:b5:61:a0:a9:d4:1c:bf:b0:
61:aa:b6:fe:dd:3a:90:6d:26:63:e0:e3:35:24:89:
2c:2e:ef:f1:46:9e:fd:0a:02:d2:d7:1c:a2:69:dc:
d4:1c:23:76:81:f7:79:ef:03:b0:9c:c5:35:7f:09:
9c:7f:3e:48:23:4d:01:6d:a1:71:2c:ad:58:d0:e3:
76:74:13:19:5c:e6:ac:01:40:5a:2b:32:9f:3b:63:
0b:61:43:d8:34:2e:31:ff:b8:73:0d:8b:93:e8:1b:
ec:d7:24:3c:5d:19:1b:06:a1:9a:66:97:f6:32:3e:
17:d7:98:87:df:ea:71:96:d6:de:da:86:c0:50:0b:
4d:c7:f0:e6:a2:47:88:ae:94:88:34:02:49:f4:64:
ff:8d:0b:23:87:db:d0:66:3a:d8:24:1c:44:0d:09:
fc:b3:4c:15:83:95:33:87:34:ed:f8:19:02:d4:74:
80:01:c7:8a:2f:c7:25:61:de:9c:69:68:a3:92:59:
53:9e:46:78:22:2f:89:51:c5:10:66:70:48:1d:05:
e3:3a:d6:25:b2:92:ae:75:f7:0f:34:8e:b2:bd:59:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EE:7A:26:43:E4:D5:55:88:2A:33:37:D1:DF:77:93:42:07:57:00
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f7:49:c0:8e:5d:db:a3:84:5e:25:e5:0a:7b:ec:82:36:b4:
2c:4a:a8:9e:ac:5b:19:16:b3:18:b6:45:6a:60:f0:30:53:d3:
cd:ac:30:02:ec:f3:7f:e4:da:2d:18:2b:31:95:91:14:ee:c9:
6b:36:b4:5d:58:20:3e:ee:ce:5b:4c:92:04:00:ad:76:ce:19:
e1:2f:b8:13:d0:f2:e5:ad:f3:49:c6:43:56:98:39:62:cb:de:
34:b9:b2:22:08:61:a5:f5:47:88:8e:1e:30:08:33:a1:08:54:
cd:cb:52:ac:5e:f7:bb:2c:2f:b2:4c:77:56:12:91:61:8e:30:
3c:f4:c7:d2:84:77:58:e2:99:0f:b4:7f:c2:6b:4e:27:04:d5:
55:72:3e:36:c7:01:b8:ef:7e:61:49:da:f9:50:2b:73:ff:69:
4a:0c:67:85:d8:da:19:95:98:e4:e9:7d:7e:40:9b:26:94:7e:
51:51:95:3f:c5:dc:41:be:e8:f1:90:93:53:9c:b9:ea:91:9b:
78:c5:de:2c:36:24:65:d0:e5:87:1e:f3:23:94:77:5b:93:e2:
51:31:68:1b:d2:06:f8:44:69:30:f3:b1:2a:01:63:04:88:05:
88:8c:a9:3c:d1:51:5d:95:a7:32:42:0c:99:e8:72:87:50:82:
a7:90:ef:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0WrFWFC3obevZatQ7H+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMGFkZTU0YzI3ZTZmY2RkYWNlMjYyYzRmZGY3OTBmMzIw
ZmVkOWMwHhcNMjUwMjAyMDQwMDQ2WhcNMjUwMjAzMDQwMDQ2WjAzMTEwLwYDVQQD
EygzNGVlN2EyNjQzZTRkNTU1ODgyYTMzMzdkMWRmNzc5MzQyMDc1NzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb1cri80b9/wsdC/5lgCg1WP2WhJ
zu+5yzRH4GLP/oja1HLvtWGgqdQcv7Bhqrb+3TqQbSZj4OM1JIksLu/xRp79CgLS
1xyiadzUHCN2gfd57wOwnMU1fwmcfz5II00BbaFxLK1Y0ON2dBMZXOasAUBaKzKf
O2MLYUPYNC4x/7hzDYuT6Bvs1yQ8XRkbBqGaZpf2Mj4X15iH3+pxltbe2obAUAtN
x/DmokeIrpSINAJJ9GT/jQsjh9vQZjrYJBxEDQn8s0wVg5UzhzTt+BkC1HSAAceK
L8clYd6caWijkllTnkZ4Ii+JUcUQZnBIHQXjOtYlspKudfcPNI6yvVkhQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTueiZD5NVViCozN9Hfd5NCB1cAMB8GA1UdIwQY
MBaAFE0K3lTCfm/N2s4mLE/feQ8yD+2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2It
ODkyOTZjY2IzNWY1LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84ZWZkOGItZTUxNi00YzQ5LTkyY2ItODkyOTZjY2IzNWY1
LzEvVFFyZVZNSi1iODNhemlZc1Q5OTVEeklQN1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfdJwI5d
26OEXiXlCnvsgja0LEqonqxbGRazGLZFamDwMFPTzawwAuzzf+TaLRgrMZWRFO7J
aza0XVggPu7OW0ySBACtds4Z4S+4E9Dy5a3zScZDVpg5YsveNLmyIghhpfVHiI4e
MAgzoQhUzctSrF73uywvskx3VhKRYY4wPPTH0oR3WOKZD7R/wmtOJwTVVXI+NscB
uO9+YUna+VArc/9pSgxnhdjaGZWY5Ol9fkCbJpR+UVGVP8XcQb7o8ZCTU5y56pGb
eMXeLDYkZdDlhx7zI5R3W5PiUTFoG9IG+ERpMPOxKgFjBIgFiIypPNFRXZWnMkIM
mehyh1CCp5Dvcw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:56 2025 by rpki-client