Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: BUyjmVKN15MAEhbS2xWxPjl+TZy8dTUO/eReoTGwz14=
Subject key identifier: 79:63:A6:AD:CC:77:F2:22:55:BB:9D:29:60:79:FC:E0:E4:FA:B7:D2
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 0194C463A5C73E530F7E66632858C4B53452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 030F
Signing time: Sun 02 Feb 2025 02:00:52 +0000
Manifest this update: Sun 02 Feb 2025 02:00:52 +0000
Manifest next update: Mon 03 Feb 2025 02:00:52 +0000
Files and hashes: 1: 3ZVx610sqQi3jR1aN5jm4CubkNI.roa (hash: ailedL7i/J97fdockeVNWVcnZPHz5O3htVX32ZMAjHU=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: S1DpadnYBtuD+uZJ5Mv+cCJlcAxbrSxJkjVk2nN05/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:a5:c7:3e:53:0f:7e:66:63:28:58:c4:b5:34:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Feb 2 02:00:52 2025 GMT
Not After : Feb 3 02:00:52 2025 GMT
Subject: CN=7963a6adcc77f22255bb9d296079fce0e4fab7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:87:ea:fe:d7:4e:b9:3f:c0:ba:a3:cd:e0:
64:8b:0a:08:54:bf:c1:a0:9b:18:b1:7c:c3:16:1a:
ba:c1:b5:bd:b0:4d:cc:2b:a9:31:3a:18:85:7f:dd:
5b:20:52:d2:1b:7c:c4:39:bb:4e:48:8a:23:bc:df:
d3:b0:4f:7a:b8:db:f6:6a:4e:7c:88:f4:6a:74:5b:
b8:cd:98:11:08:38:99:d3:e0:14:33:c7:31:0b:50:
f9:ee:ea:27:a1:7c:bc:dd:39:1a:8d:ad:54:e9:90:
ca:34:b2:18:dd:af:4d:7d:78:d7:b4:37:15:59:87:
77:b8:56:90:ba:fc:b9:4a:29:38:96:b5:52:db:24:
09:ff:e4:47:ef:51:25:12:9b:9a:5a:46:55:4c:67:
d8:46:2e:a0:40:f8:b3:91:63:73:65:69:21:7c:dd:
a4:1e:0b:73:b2:ca:04:e2:9a:45:14:48:16:71:2a:
16:b6:5a:8d:7b:02:dd:43:ef:79:b2:c1:17:c0:59:
b0:de:e4:04:cc:30:51:c8:b9:8c:4c:e1:8d:86:83:
65:47:c7:35:a0:52:42:c4:0a:2d:a5:5d:1d:e9:04:
f1:2d:49:5f:2d:ce:df:cf:49:90:2d:80:dd:ea:de:
a8:3b:23:dd:b2:7f:11:64:28:d6:e6:f8:87:14:dd:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:63:A6:AD:CC:77:F2:22:55:BB:9D:29:60:79:FC:E0:E4:FA:B7:D2
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3b:90:10:3a:41:35:a3:a8:70:09:05:b9:4c:15:09:5f:81:
67:ae:42:03:12:07:81:e7:0e:b7:71:51:d2:b0:92:d1:99:20:
dc:f6:85:d5:d9:5c:37:69:98:9b:c1:b7:45:59:50:66:4e:b6:
81:c2:e8:4e:87:1b:a0:2e:fd:19:2e:7a:c9:87:cf:de:fc:46:
10:56:f6:4f:00:cf:f4:09:f6:d8:c6:97:9b:41:5e:35:3b:63:
f6:4a:e3:96:eb:12:8f:5f:98:41:e7:e3:db:ef:9a:17:95:d5:
64:bc:b4:90:12:d8:f4:48:bf:95:d2:80:81:55:fc:f3:a0:98:
ff:1a:34:d5:ed:0c:b2:f4:dd:ac:0e:c6:5b:e1:c7:66:57:10:
54:35:5e:b7:b9:34:a4:01:9e:0c:c3:5f:c5:46:fe:4b:ad:94:
70:d1:99:bc:fc:f4:89:77:c0:35:8b:85:b6:89:95:79:7e:b4:
80:7d:e0:86:f8:a5:ac:81:e4:35:44:12:b8:b3:ee:d3:25:09:
95:23:e1:61:4b:ad:c5:ba:fd:f2:2d:41:8f:7b:f2:aa:03:5c:
7c:98:6b:60:35:f6:87:a2:e4:8c:f1:ee:1b:a2:ed:aa:85:6a:
6e:6e:36:99:cc:26:44:31:6d:0f:c9:90:80:8c:cd:b3:8d:4d:
fb:ad:63:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY6XHPlMPfmZjKFjEtTRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMWYxNDgwNjUxZjFiMzM4YmUyNjM0MWUyZGIzYTBhYTNi
MzQ0ZWIwHhcNMjUwMjAyMDIwMDUyWhcNMjUwMjAzMDIwMDUyWjAzMTEwLwYDVQQD
Eyg3OTYzYTZhZGNjNzdmMjIyNTViYjlkMjk2MDc5ZmNlMGU0ZmFiN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRGH6v7XTrk/wLqjzeBkiwoIVL/B
oJsYsXzDFhq6wbW9sE3MK6kxOhiFf91bIFLSG3zEObtOSIojvN/TsE96uNv2ak58
iPRqdFu4zZgRCDiZ0+AUM8cxC1D57uonoXy83Tkaja1U6ZDKNLIY3a9NfXjXtDcV
WYd3uFaQuvy5Sik4lrVS2yQJ/+RH71ElEpuaWkZVTGfYRi6gQPizkWNzZWkhfN2k
HgtzssoE4ppFFEgWcSoWtlqNewLdQ+95ssEXwFmw3uQEzDBRyLmMTOGNhoNlR8c1
oFJCxAotpV0d6QTxLUlfLc7fz0mQLYDd6t6oOyPdsn8RZCjW5viHFN37rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHljpq3Md/IiVbudKWB5/ODk+rfSMB8GA1UdIwQY
MBaAFEMfFIBlHxszi+JjQeLbOgqjs0TrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODUzN2MtMDI2Yy00NzZiLTgwNTYt
NGUwMDA5NDMxNDlmLzEvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wODUzN2MtMDI2Yy00NzZiLTgwNTYtNGUwMDA5NDMxNDlm
LzEvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDuQEDpB
NaOocAkFuUwVCV+BZ65CAxIHgecOt3FR0rCS0Zkg3PaF1dlcN2mYm8G3RVlQZk62
gcLoTocboC79GS56yYfP3vxGEFb2TwDP9An22MaXm0FeNTtj9krjlusSj1+YQefj
2++aF5XVZLy0kBLY9Ei/ldKAgVX886CY/xo01e0MsvTdrA7GW+HHZlcQVDVet7k0
pAGeDMNfxUb+S62UcNGZvPz0iXfANYuFtomVeX60gH3ghvilrIHkNUQSuLPu0yUJ
lSPhYUutxbr98i1Bj3vyqgNcfJhrYDX2h6LkjPHuG6LtqoVqbm42mcwmRDFtD8mQ
gIzNs41N+61jeg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:58:57 2025 by rpki-client