Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json)
Hash identifier: VIKOyn1UtDSYDHU3cLINdLUmpTsxLgi5a3/3q9aAQRw=
Subject key identifier: C8:E8:CC:0A:ED:2B:A7:EC:0A:FD:62:8D:B4:87:85:AF:7A:F6:D7:B4
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 0194C49A317826F8BF0712661A01435B575E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
Manifest number: 0191
Signing time: Sun 02 Feb 2025 03:00:26 +0000
Manifest this update: Sun 02 Feb 2025 03:00:26 +0000
Manifest next update: Mon 03 Feb 2025 03:00:26 +0000
Files and hashes: 1: gMn3NAKyq7saXpkPxZO8WkflotA.roa (hash: C/YIIPIOL8M4KETXlzNgei6yxSKu/8PUoNYZn01EOkY=)
2: rvEqkaSx88Mofyvgjk106t2jfIQ.roa (hash: Mt/fOTdq8tI+LHmhZzATBBPg2EKFAQ2gQnysBrQ+MLM=)
3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: f5PaOt/6WBvf1pTxDpTOG+B4woFv2DiOmCb6m3G7BXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:31:78:26:f8:bf:07:12:66:1a:01:43:5b:57:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Feb 2 03:00:26 2025 GMT
Not After : Feb 3 03:00:26 2025 GMT
Subject: CN=c8e8cc0aed2ba7ec0afd628db48785af7af6d7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:1c:d1:4f:dd:3c:4c:6c:0f:9e:b4:6f:bf:
e0:a1:8e:04:3d:91:e2:88:99:0e:06:63:d8:78:2a:
8c:cf:01:49:a9:4e:50:79:ee:94:a1:2c:1b:d7:95:
3d:98:be:1c:8c:a6:ec:1d:e6:69:dc:c0:db:a3:f5:
27:74:74:85:7a:c7:c0:23:5b:88:37:41:4f:b2:90:
58:df:f0:09:9f:4d:73:8b:19:7b:20:c1:44:1e:0e:
c7:d5:a3:16:ae:25:8f:64:e3:5e:b6:a8:5e:97:88:
1f:05:5f:84:90:52:78:59:cf:73:7d:d7:ac:4e:f6:
b0:8d:c2:ca:d6:f7:d4:df:51:2e:4b:b5:3a:7d:96:
e9:07:1a:f5:2a:fc:66:83:7a:2f:9f:56:42:57:ec:
41:aa:c8:07:0f:62:3a:c8:0f:20:67:76:86:d0:8b:
76:bc:a0:ca:4f:ee:6d:78:03:2a:3b:b6:ab:49:cd:
c7:8f:bf:62:33:76:d2:6e:84:e9:9a:2a:98:1e:b2:
ec:2a:b4:9d:e6:e2:14:58:cd:aa:a8:0e:59:32:88:
0c:8e:2d:5b:6c:53:cb:26:57:95:d3:04:b4:6a:4d:
79:87:77:67:7f:08:1a:f7:3e:a0:c5:64:f8:06:aa:
d9:a5:3d:ca:81:11:e4:8d:bc:33:27:c8:eb:39:04:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E8:CC:0A:ED:2B:A7:EC:0A:FD:62:8D:B4:87:85:AF:7A:F6:D7:B4
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:00:37:62:c3:c3:86:89:4f:5a:76:69:ea:fc:83:55:f8:90:
d4:5f:d0:f8:90:1b:00:00:8f:97:2b:82:8d:eb:fb:9e:b5:2e:
b2:96:da:10:7a:89:61:d0:be:e3:34:38:10:8e:10:bb:4a:a0:
b4:fc:42:c2:73:0b:9b:2f:2b:57:2a:ac:60:c9:9b:72:c2:95:
5c:78:09:d9:4b:07:ed:e2:7a:52:22:ff:7e:90:a0:6b:bc:16:
b4:38:e4:ee:53:78:46:06:30:67:ba:54:99:a4:fc:b9:4e:99:
08:5b:45:f4:da:a7:11:f6:b9:f0:da:a4:87:f1:a6:38:2b:89:
b7:20:58:73:3f:cd:e1:07:5d:b7:ba:c7:33:50:38:9d:9f:3a:
1c:b3:e8:dd:f7:de:78:d0:e6:a3:ce:31:44:c8:1a:1e:75:8b:
d5:be:2b:53:bb:de:bb:24:e6:d7:3b:23:78:03:6b:35:dd:33:
2a:29:d5:53:a8:d2:28:18:48:c0:b9:bd:f6:e6:80:6e:f7:cf:
16:39:9f:10:75:3c:a2:65:de:55:43:31:e9:c9:92:a0:61:16:
31:38:57:c3:84:c2:cc:c1:15:35:19:8b:d7:31:33:1c:ff:65:
1f:19:a1:a9:90:74:23:58:12:f9:33:85:ae:7d:af:d9:a6:d4:
cb:9d:6f:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEmjF4Jvi/BxJmGgFDW1deMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGVlYTEzMDcyMWU5Y2QxOTc2ZmQ3ZTBmMzRjOTZkZjZl
YWM2YjAwHhcNMjUwMjAyMDMwMDI2WhcNMjUwMjAzMDMwMDI2WjAzMTEwLwYDVQQD
EyhjOGU4Y2MwYWVkMmJhN2VjMGFmZDYyOGRiNDg3ODVhZjdhZjZkN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd0c0U/dPExsD560b7/goY4EPZHi
iJkOBmPYeCqMzwFJqU5Qee6UoSwb15U9mL4cjKbsHeZp3MDbo/UndHSFesfAI1uI
N0FPspBY3/AJn01zixl7IMFEHg7H1aMWriWPZONetqhel4gfBV+EkFJ4Wc9zfdes
TvawjcLK1vfU31EuS7U6fZbpBxr1Kvxmg3ovn1ZCV+xBqsgHD2I6yA8gZ3aG0It2
vKDKT+5teAMqO7arSc3Hj79iM3bSboTpmiqYHrLsKrSd5uIUWM2qqA5ZMogMji1b
bFPLJleV0wS0ak15h3dnfwga9z6gxWT4BqrZpT3KgRHkjbwzJ8jrOQRQAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjozArtK6fsCv1ijbSHha969te0MB8GA1UdIwQY
MBaAFMUO6hMHIenNGXb9fg80yW326sawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQt
NjNmNWZlMTEwZTc2LzEveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQtNjNmNWZlMTEwZTc2
LzEveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAA3YsPD
holPWnZp6vyDVfiQ1F/Q+JAbAACPlyuCjev7nrUuspbaEHqJYdC+4zQ4EI4Qu0qg
tPxCwnMLmy8rVyqsYMmbcsKVXHgJ2UsH7eJ6UiL/fpCga7wWtDjk7lN4RgYwZ7pU
maT8uU6ZCFtF9NqnEfa58Nqkh/GmOCuJtyBYcz/N4Qddt7rHM1A4nZ86HLPo3ffe
eNDmo84xRMgaHnWL1b4rU7veuyTm1zsjeANrNd0zKinVU6jSKBhIwLm99uaAbvfP
FjmfEHU8omXeVUMx6cmSoGEWMThXw4TCzMEVNRmL1zEzHP9lHxmhqZB0I1gS+TOF
rn2v2abUy51vbg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:36 2025 by rpki-client