Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: NvQsLFtGcGJwzlkN7wn3M7eF5RbjLbZI/Wxua+LWuaM=
Subject key identifier: D7:11:65:00:C5:15:91:4C:5E:2A:2C:FA:D8:B1:C7:92:BE:32:03:60
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 019512474E560A2EE6E205FD9BC541F7BF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 13AE
Signing time: Mon 17 Feb 2025 05:00:17 +0000
Manifest this update: Mon 17 Feb 2025 05:00:17 +0000
Manifest next update: Tue 18 Feb 2025 05:00:17 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: Ui4AVRGlIXSmPzd0RlPG7vzcCK3mS+5kjaXa09DJUBc=)
2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:4e:56:0a:2e:e6:e2:05:fd:9b:c5:41:f7:bf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Feb 17 05:00:17 2025 GMT
Not After : Feb 18 05:00:17 2025 GMT
Subject: CN=d7116500c515914c5e2a2cfad8b1c792be320360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:66:65:fe:2f:3c:07:9a:43:53:d0:44:a4:
61:a3:80:ac:eb:2a:6b:f3:2f:68:23:5a:d9:ef:7e:
ce:f7:32:df:f5:6c:08:3d:cd:77:25:c4:85:7f:6b:
ca:36:e8:51:f9:0f:d5:32:95:14:1d:96:6a:7b:da:
6a:8a:d7:01:75:0c:af:12:9e:d9:94:6e:5a:23:6c:
bd:5c:e5:7a:15:60:09:c8:c2:7a:7b:c9:84:10:ae:
6d:14:23:c8:bf:0f:01:93:08:1d:c8:2e:b7:10:c2:
f3:da:60:9b:c9:e6:e2:de:02:43:d1:56:db:cb:ae:
d9:97:f2:b5:21:9b:a1:ff:8d:cb:49:e9:89:fb:70:
56:b7:3f:3d:78:35:01:10:49:29:33:48:29:8a:f3:
b3:20:e5:70:be:cd:58:f6:c3:bd:9f:cf:61:b8:7a:
74:ca:48:cd:49:cd:f4:39:67:6b:76:39:0f:f5:ad:
1f:5c:52:ba:2a:50:df:d9:6f:fd:41:96:2c:40:50:
34:96:71:57:46:ee:59:af:ba:f1:38:50:99:23:0a:
95:1b:aa:55:48:da:0e:45:74:96:39:80:1b:1c:d6:
62:12:d5:f6:68:5c:b9:29:80:c9:7c:13:97:60:1d:
9a:b4:e6:52:d5:d3:fa:ba:69:0e:c8:d3:6a:f4:45:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:65:00:C5:15:91:4C:5E:2A:2C:FA:D8:B1:C7:92:BE:32:03:60
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ec:66:43:01:e6:b5:e6:a4:1c:6c:44:62:2f:c1:05:ce:6c:
77:4c:69:c8:41:76:f7:42:cd:4d:1d:7d:df:de:ea:32:66:2b:
cd:0a:d9:f4:86:5d:49:48:93:4f:11:46:2b:71:54:ae:9b:37:
f7:1b:c3:14:d7:70:60:6c:3d:24:67:17:99:eb:42:3c:68:bd:
f4:c0:ae:45:b3:d6:ae:f0:dd:37:cb:d4:6c:34:d9:28:2f:9c:
9f:41:53:e8:25:e6:94:26:6c:a4:6b:b0:95:34:b9:c2:d1:6a:
87:49:eb:7a:79:d8:22:90:9f:76:12:25:4c:53:54:5c:2e:e7:
07:3f:fb:d1:9a:2e:1c:52:bf:3f:01:f9:52:26:c5:ca:dc:bf:
dd:1b:48:b2:97:fd:91:b2:f6:49:ed:6d:40:5f:3b:cf:e0:40:
e2:c7:6c:53:58:31:d7:41:54:f5:90:c8:04:c9:20:7d:39:af:
53:c6:97:1f:fd:30:5e:b1:ef:c1:f1:d4:90:64:77:e3:82:8e:
32:79:e6:19:64:17:1a:13:10:80:e7:c1:f6:7d:e6:f9:4f:b7:
e4:66:3e:6a:43:ce:a0:56:b4:92:e0:c1:77:42:54:a5:b9:bc:
13:ef:2e:1e:33:7c:30:f5:6f:34:85:db:e6:eb:6b:42:39:d3:
8c:c3:6a:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSR05WCi7m4gX9m8VB979cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YWIyYTM4Y2FhYzBjZTNjYTAxZmRiODdmZGY5NjM3MmU4
NTk4YjYwHhcNMjUwMjE3MDUwMDE3WhcNMjUwMjE4MDUwMDE3WjAzMTEwLwYDVQQD
EyhkNzExNjUwMGM1MTU5MTRjNWUyYTJjZmFkOGIxYzc5MmJlMzIwMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogFmZf4vPAeaQ1PQRKRho4Cs6ypr
8y9oI1rZ737O9zLf9WwIPc13JcSFf2vKNuhR+Q/VMpUUHZZqe9pqitcBdQyvEp7Z
lG5aI2y9XOV6FWAJyMJ6e8mEEK5tFCPIvw8BkwgdyC63EMLz2mCbyebi3gJD0Vbb
y67Zl/K1IZuh/43LSemJ+3BWtz89eDUBEEkpM0gpivOzIOVwvs1Y9sO9n89huHp0
ykjNSc30OWdrdjkP9a0fXFK6KlDf2W/9QZYsQFA0lnFXRu5Zr7rxOFCZIwqVG6pV
SNoORXSWOYAbHNZiEtX2aFy5KYDJfBOXYB2atOZS1dP6umkOyNNq9EXzawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcRZQDFFZFMXios+tixx5K+MgNgMB8GA1UdIwQY
MBaAFCarKjjKrAzjygH9uH/fljcuhZi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTkt
NWI5OTQ2ZGQxYmVhLzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTktNWI5OTQ2ZGQxYmVh
LzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARexmQwHm
teakHGxEYi/BBc5sd0xpyEF290LNTR19397qMmYrzQrZ9IZdSUiTTxFGK3FUrps3
9xvDFNdwYGw9JGcXmetCPGi99MCuRbPWrvDdN8vUbDTZKC+cn0FT6CXmlCZspGuw
lTS5wtFqh0nrennYIpCfdhIlTFNUXC7nBz/70ZouHFK/PwH5UibFyty/3RtIspf9
kbL2Se1tQF87z+BA4sdsU1gx10FU9ZDIBMkgfTmvU8aXH/0wXrHvwfHUkGR344KO
MnnmGWQXGhMQgOfB9n3m+U+35GY+akPOoFa0kuDBd0JUpbm8E+8uHjN8MPVvNIXb
5utrQjnTjMNqOw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:22 2025 by rpki-client