Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: GwtjW3vw9Ho9zH7/m8O9eCwbKY35Qz29dmawMwkly3o=
Subject key identifier: F3:E3:09:C2:E7:DE:D0:0F:E9:00:AE:A0:FF:DD:1C:A3:AB:8D:10:8F
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 0194C350CDF906C06FC296BE8C607AE8C3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: B8
Signing time: Sat 01 Feb 2025 21:00:40 +0000
Manifest this update: Sat 01 Feb 2025 21:00:40 +0000
Manifest next update: Sun 02 Feb 2025 21:00:40 +0000
Files and hashes: 1: EpeCh_PHvVwvR1jtfMGPQVrMsrQ.roa (hash: XKVWPCeZYhwf3z1v0hUSbNv7x/hm4cVMh5YcJnXqtvg=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: 4iIXECvtCfc1sBXnxDXo5HabucMl+njg8Uvbcy8IEtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:cd:f9:06:c0:6f:c2:96:be:8c:60:7a:e8:c3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Feb 1 21:00:40 2025 GMT
Not After : Feb 2 21:00:40 2025 GMT
Subject: CN=f3e309c2e7ded00fe900aea0ffdd1ca3ab8d108f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:21:8b:27:3a:27:eb:bd:7f:80:2a:89:cc:
4b:57:93:76:9a:d0:2c:31:e1:e9:82:ea:c2:45:cd:
23:c8:d6:71:33:e9:b0:1e:ad:de:3d:c2:4b:9d:db:
5f:4b:8c:ab:e4:26:17:05:73:df:e3:8b:29:9f:dc:
e1:d1:fa:9f:1d:2d:b2:37:f3:b2:95:33:a2:0c:09:
2d:94:96:e5:ef:a5:c3:4e:c0:70:8d:70:bf:30:60:
29:b5:b5:e5:84:29:e3:3c:48:92:5e:75:51:18:e1:
3e:bf:dd:d2:3c:29:9b:89:d1:32:28:34:68:e5:9f:
b4:6e:a3:28:ed:02:14:d1:05:29:67:c6:10:35:72:
10:db:15:e3:8c:c0:31:ff:c1:93:e2:b9:ac:e9:ca:
9d:1a:5d:ba:53:97:f5:75:3a:96:69:ff:de:67:70:
45:30:1a:44:a5:39:bc:96:a4:2f:26:52:59:29:ef:
e0:20:9e:46:5b:94:cb:9b:01:e2:11:95:97:31:01:
c1:87:70:99:8d:41:3f:c4:c0:7c:88:9f:c0:b8:67:
a0:15:c1:3d:d5:70:4a:bc:d3:51:24:bc:73:62:14:
bc:f9:79:e2:46:43:62:ba:e0:87:6d:3e:07:b7:1b:
7d:0a:00:69:4a:cf:79:4d:a3:7c:f1:bf:9f:05:24:
cf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:09:C2:E7:DE:D0:0F:E9:00:AE:A0:FF:DD:1C:A3:AB:8D:10:8F
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:00:35:ff:2a:06:39:6f:8c:aa:03:1d:1b:bb:d5:c6:85:95:
d7:e7:ea:e5:1c:ae:b0:4c:dc:8c:a7:fc:1d:f4:a3:f2:3a:1f:
75:27:ba:38:a8:69:79:21:37:68:ca:cd:37:8a:9d:37:4c:a7:
d2:a8:64:dc:6a:66:24:4f:6f:63:a0:9b:30:24:73:58:82:6f:
fe:74:41:f6:95:06:b3:51:0f:bb:95:4e:58:33:fd:a8:03:c8:
8b:bb:f9:d8:86:e0:0f:4c:35:e9:40:9f:fa:a2:20:e5:c0:03:
ce:63:86:da:00:f9:39:89:3f:ed:ca:aa:99:59:f4:ef:06:ee:
c7:3d:c4:2e:d2:17:8d:b8:57:3a:7c:9b:ff:e1:59:63:4f:0c:
da:3a:b7:fd:51:2e:3b:12:2d:46:10:52:c2:48:b5:44:07:4f:
e3:35:65:d1:60:e7:f8:23:be:30:03:a8:ba:25:95:67:d2:e4:
dc:02:d8:14:55:0c:84:b3:f1:b4:b7:29:b1:b0:91:45:87:55:
9a:ac:39:72:f5:78:00:fc:c9:e9:82:57:a6:8e:42:2b:7a:f0:
5e:2f:46:c1:89:52:4f:f6:5d:eb:96:66:cb:d1:08:12:b9:94:
d7:ee:03:67:79:26:f1:f2:41:42:50:0f:d3:de:bc:12:f8:69:
a5:28:ae:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDUM35BsBvwpa+jGB66MP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYzk2NDkyYzAwNDA4YWQ1NGQ3MzBjMGViNjI5ZTNhMGI1
MGQ4MGYwHhcNMjUwMjAxMjEwMDQwWhcNMjUwMjAyMjEwMDQwWjAzMTEwLwYDVQQD
EyhmM2UzMDljMmU3ZGVkMDBmZTkwMGFlYTBmZmRkMWNhM2FiOGQxMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CQhiyc6J+u9f4AqicxLV5N2mtAs
MeHpgurCRc0jyNZxM+mwHq3ePcJLndtfS4yr5CYXBXPf44spn9zh0fqfHS2yN/Oy
lTOiDAktlJbl76XDTsBwjXC/MGAptbXlhCnjPEiSXnVRGOE+v93SPCmbidEyKDRo
5Z+0bqMo7QIU0QUpZ8YQNXIQ2xXjjMAx/8GT4rms6cqdGl26U5f1dTqWaf/eZ3BF
MBpEpTm8lqQvJlJZKe/gIJ5GW5TLmwHiEZWXMQHBh3CZjUE/xMB8iJ/AuGegFcE9
1XBKvNNRJLxzYhS8+XniRkNiuuCHbT4Htxt9CgBpSs95TaN88b+fBSTP4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPjCcLn3tAP6QCuoP/dHKOrjRCPMB8GA1UdIwQY
MBaAFEHJZJLABAitVNcwwOtinjoLUNgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWNsa2tzQUVDSzFVMXpEQTYyS2VPZ3RRMkE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xOWQwOTAtMTAzYi00M2RiLWIwNzQt
YTRlMzdjODY3YjA5LzEvUWNsa2tzQUVDSzFVMXpEQTYyS2VPZ3RRMkE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xOWQwOTAtMTAzYi00M2RiLWIwNzQtYTRlMzdjODY3YjA5
LzEvUWNsa2tzQUVDSzFVMXpEQTYyS2VPZ3RRMkE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwA1/yoG
OW+MqgMdG7vVxoWV1+fq5RyusEzcjKf8HfSj8jofdSe6OKhpeSE3aMrNN4qdN0yn
0qhk3GpmJE9vY6CbMCRzWIJv/nRB9pUGs1EPu5VOWDP9qAPIi7v52IbgD0w16UCf
+qIg5cADzmOG2gD5OYk/7cqqmVn07wbuxz3ELtIXjbhXOnyb/+FZY08M2jq3/VEu
OxItRhBSwki1RAdP4zVl0WDn+CO+MAOouiWVZ9Lk3ALYFFUMhLPxtLcpsbCRRYdV
mqw5cvV4APzJ6YJXpo5CK3rwXi9GwYlST/Zd65Zmy9EIErmU1+4DZ3km8fJBQlAP
0968EvhppSiuEw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:20 2025 by rpki-client