Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: dccTCyrYB4odPd8U3Qc7q9Ix7hxJeD7im4dzuJbC6ug=
Subject key identifier: 39:0F:AE:D4:52:50:53:2F:AB:3D:E9:45:72:B5:AD:2D:EF:B3:DF:33
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 0194C42C8033EBB8DE937811CD063347CEC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 19
Signing time: Sun 02 Feb 2025 01:00:38 +0000
Manifest this update: Sun 02 Feb 2025 01:00:38 +0000
Manifest next update: Mon 03 Feb 2025 01:00:38 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: gZLZzQ9Xs7klG/tBGB+d7TnQcRLHor0+ZkCWZCRc5HM=)
2: wVZ7Q_yh7vY87ipQHKXps_Y5QUU.roa (hash: F0pmi/wk6PrJmlY3U42fDKf/ChECXrlPOqHq8mmS3J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:80:33:eb:b8:de:93:78:11:cd:06:33:47:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Feb 2 01:00:38 2025 GMT
Not After : Feb 3 01:00:38 2025 GMT
Subject: CN=390faed45250532fab3de94572b5ad2defb3df33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:21:a6:12:0d:d9:e7:6b:18:d9:e6:f2:49:
38:eb:84:75:55:51:4e:9e:90:df:0a:1b:e8:7d:0e:
92:b7:e7:15:7c:44:dc:a6:e8:99:f8:5f:cb:3d:a6:
4d:98:37:16:07:36:4d:e4:a2:38:40:be:06:f7:39:
c8:62:4c:82:50:84:27:75:22:d6:06:b6:0a:23:a3:
11:0b:12:1e:04:ff:3f:6b:ff:cc:06:10:52:33:85:
14:f4:3f:9d:35:31:4a:b3:85:fa:2f:2e:41:68:32:
9c:1e:e8:c2:7b:fc:70:8b:20:ec:16:55:d7:d5:76:
b0:e7:a6:6c:e6:cf:1a:44:c9:22:94:50:4c:cf:2d:
2c:ba:44:c1:53:f0:7a:ea:ae:3e:8a:58:b0:4f:db:
90:8c:ff:45:a7:02:d3:b3:f4:67:85:d1:b8:64:0a:
19:a3:50:64:c5:5c:7f:1b:7f:3f:12:24:46:2b:21:
76:f1:48:24:f5:c3:2f:aa:75:da:67:1e:6b:97:ed:
8e:85:74:ee:e6:54:14:1b:6b:30:46:71:7b:dd:5c:
a0:15:fb:04:ce:a5:f8:ff:ee:77:3c:56:33:ed:b5:
5e:c5:64:63:02:b7:9b:7c:80:55:f8:c5:1f:fe:8c:
02:05:5b:7f:b7:84:d8:e5:4c:a2:b6:2d:f5:e5:6e:
2f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0F:AE:D4:52:50:53:2F:AB:3D:E9:45:72:B5:AD:2D:EF:B3:DF:33
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3a:77:4e:37:d0:56:fd:7a:82:73:9a:4f:7d:a9:7a:b4:27:
6f:f5:b3:30:03:6a:10:06:ec:95:a2:ef:e9:b8:69:50:a7:48:
50:92:51:c0:13:b2:d8:d4:b6:c8:01:21:8b:0d:3a:56:26:54:
53:85:1c:8e:18:f7:fc:aa:3b:4d:c1:ec:a5:f1:ea:65:5a:7b:
3d:df:b2:9e:29:38:64:d0:53:ad:f7:fe:43:78:c2:fe:5e:82:
f1:12:d6:08:a6:15:69:d5:5c:e9:07:98:28:3a:46:09:85:13:
74:28:a8:a8:0a:72:fa:b9:86:29:5a:22:02:42:71:c9:2f:90:
de:7a:93:fe:dc:e2:5c:00:97:06:d7:0a:97:f1:ca:44:18:76:
f9:dc:f3:b1:19:c9:f1:d6:80:26:68:86:1f:d0:40:7a:0c:8c:
36:3a:76:58:22:f3:b9:2e:6d:0b:4d:ae:53:0f:ba:34:8b:9a:
e0:9e:ab:aa:19:7a:d6:e0:1a:40:98:63:c5:96:87:25:38:40:
2a:57:76:85:40:d1:44:1e:ed:c4:e3:37:14:0f:76:5e:be:f7:
d7:64:87:20:ef:0f:87:c8:3b:d8:e4:2d:63:c5:0e:32:34:77:
19:1a:bd:1a:5d:06:55:c1:12:ba:87:9e:a3:9b:ba:61:87:74:
a2:95:ac:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELIAz67jek3gRzQYzR87AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOTEzN2JlZmU4YmM1NTkwMzY5MGM3YzQ2YWYxOTdjYzkx
YTcwM2MwHhcNMjUwMjAyMDEwMDM4WhcNMjUwMjAzMDEwMDM4WjAzMTEwLwYDVQQD
EygzOTBmYWVkNDUyNTA1MzJmYWIzZGU5NDU3MmI1YWQyZGVmYjNkZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLkhphIN2edrGNnm8kk464R1VVFO
npDfChvofQ6St+cVfETcpuiZ+F/LPaZNmDcWBzZN5KI4QL4G9znIYkyCUIQndSLW
BrYKI6MRCxIeBP8/a//MBhBSM4UU9D+dNTFKs4X6Ly5BaDKcHujCe/xwiyDsFlXX
1Xaw56Zs5s8aRMkilFBMzy0sukTBU/B66q4+iliwT9uQjP9FpwLTs/RnhdG4ZAoZ
o1BkxVx/G38/EiRGKyF28Ugk9cMvqnXaZx5rl+2OhXTu5lQUG2swRnF73VygFfsE
zqX4/+53PFYz7bVexWRjArebfIBV+MUf/owCBVt/t4TY5Uyiti315W4vlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkPrtRSUFMvqz3pRXK1rS3vs98zMB8GA1UdIwQY
MBaAFEORN77+i8VZA2kMfEavGXzJGnA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQt
MGY1MmQ4MjhmZDRmLzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQtMGY1MmQ4MjhmZDRm
LzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtTp3TjfQ
Vv16gnOaT32perQnb/WzMANqEAbslaLv6bhpUKdIUJJRwBOy2NS2yAEhiw06ViZU
U4Ucjhj3/Ko7TcHspfHqZVp7Pd+ynik4ZNBTrff+Q3jC/l6C8RLWCKYVadVc6QeY
KDpGCYUTdCioqApy+rmGKVoiAkJxyS+Q3nqT/tziXACXBtcKl/HKRBh2+dzzsRnJ
8daAJmiGH9BAegyMNjp2WCLzuS5tC02uUw+6NIua4J6rqhl61uAaQJhjxZaHJThA
Kld2hUDRRB7txOM3FA92Xr7312SHIO8Ph8g72OQtY8UOMjR3GRq9Gl0GVcESuoee
o5u6YYd0opWs0A==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:43 2025 by rpki-client