Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
File: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json)
Hash identifier: WmRMm959ewWIEoCV0xZQBbF82O7+hz8Q/qcpt8kgoAk=
Subject key identifier: 58:38:25:49:AE:4D:91:88:13:E4:38:EA:7E:C7:8B:A0:72:99:20:56
Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
Certificate issuer: /CN=43a3517606989eb352f699976f219faec8e350e7
Certificate serial: 0194C388144263782AFF131E46AB3277CF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
Manifest number: 142B
Signing time: Sat 01 Feb 2025 22:01:02 +0000
Manifest this update: Sat 01 Feb 2025 22:01:02 +0000
Manifest next update: Sun 02 Feb 2025 22:01:02 +0000
Files and hashes: 1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: Axn0S1DgSAvzaAvEKLw/wEN233ebRuqGcs+31ExZVJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:14:42:63:78:2a:ff:13:1e:46:ab:32:77:cf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a3517606989eb352f699976f219faec8e350e7
Validity
Not Before: Feb 1 22:01:02 2025 GMT
Not After : Feb 2 22:01:02 2025 GMT
Subject: CN=58382549ae4d918813e438ea7ec78ba072992056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ac:88:2a:2e:f2:b1:85:fb:b0:f8:f9:66:f0:
72:44:5d:25:47:ee:82:1d:59:a4:f2:3a:5c:d4:01:
8c:b3:d2:45:83:35:b9:8c:03:29:0e:26:aa:68:c1:
d1:bb:b8:99:85:3f:a2:7e:c9:9b:74:04:27:c9:54:
36:7d:d9:9e:58:63:c3:3d:04:da:ea:8d:4c:1e:d4:
43:72:76:bc:e5:76:cf:96:27:45:9c:97:07:4d:fb:
73:25:b1:9f:78:80:29:81:7a:97:5c:e2:79:e8:06:
ea:57:ac:ad:81:70:e5:3e:20:de:22:6b:af:f4:01:
e6:1e:72:8e:69:37:a5:a3:8e:21:59:c7:f6:0a:06:
59:f2:d0:dc:b0:0e:d4:5e:6c:61:d0:d8:bf:21:fb:
7e:87:a5:5b:4c:1c:1e:e4:c7:6f:bb:96:ed:16:ed:
d1:ba:db:d7:9f:ce:b7:6b:70:c0:c9:a1:52:77:ae:
1a:d5:74:6e:c0:ff:f6:9d:b0:e0:75:36:0a:17:75:
e5:71:b9:a4:4e:ff:bb:66:af:17:21:b3:33:08:f5:
e4:68:47:a8:ca:c1:af:b9:dd:96:9e:86:21:78:0a:
2b:0e:7f:d0:71:1c:40:24:15:0e:8f:f9:1b:ac:d3:
5c:42:c4:a2:47:d4:7b:94:49:a7:53:21:9d:4c:b4:
c0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:38:25:49:AE:4D:91:88:13:E4:38:EA:7E:C7:8B:A0:72:99:20:56
X509v3 Authority Key Identifier:
keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c0:8e:7f:4d:fa:2b:d3:5a:45:d4:dc:69:53:af:0a:47:55:
f9:a3:0f:8e:eb:23:32:ae:b2:27:d2:15:f3:fe:85:9b:42:de:
7e:1d:75:fa:1f:49:b2:cd:82:58:e9:ae:29:94:2c:f0:5b:b3:
0d:0d:09:2e:a4:73:5e:96:03:08:1b:47:3c:bc:27:d4:d4:87:
79:dd:51:bf:ff:23:dd:b2:ea:4b:d7:e1:c8:25:fd:b5:da:d3:
05:e0:d2:ac:d3:42:43:b9:09:1b:fa:e6:2d:d7:13:cd:a4:53:
7d:ed:9e:f6:88:ac:13:85:20:6e:8c:54:6c:11:d7:45:61:38:
07:6b:cc:c7:ea:2d:0c:47:e3:96:72:d1:56:6a:70:17:cc:fe:
55:d6:ed:ea:cb:3e:a1:7c:9e:b3:3e:dc:d6:8c:4d:09:ca:9f:
89:d3:66:a4:17:23:ec:62:1e:cf:47:68:f5:70:78:07:46:de:
83:4e:c6:25:57:17:af:25:5b:49:57:19:cb:b3:5e:44:e4:48:
be:3b:4a:7d:75:de:f4:00:10:1c:c9:66:1d:86:fe:de:a0:be:
1a:7d:ae:06:2c:3b:06:c8:a1:ab:63:68:3d:e8:3b:9c:47:8c:
82:f7:da:08:af:8c:dd:04:b3:b7:72:e3:12:d2:d1:c1:39:0d:
4a:97:63:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDiBRCY3gq/xMeRqsyd89wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTM1MTc2MDY5ODllYjM1MmY2OTk5NzZmMjE5ZmFlYzhl
MzUwZTcwHhcNMjUwMjAxMjIwMTAyWhcNMjUwMjAyMjIwMTAyWjAzMTEwLwYDVQQD
Eyg1ODM4MjU0OWFlNGQ5MTg4MTNlNDM4ZWE3ZWM3OGJhMDcyOTkyMDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhayIKi7ysYX7sPj5ZvByRF0lR+6C
HVmk8jpc1AGMs9JFgzW5jAMpDiaqaMHRu7iZhT+ifsmbdAQnyVQ2fdmeWGPDPQTa
6o1MHtRDcna85XbPlidFnJcHTftzJbGfeIApgXqXXOJ56AbqV6ytgXDlPiDeImuv
9AHmHnKOaTelo44hWcf2CgZZ8tDcsA7UXmxh0Ni/Ift+h6VbTBwe5Mdvu5btFu3R
utvXn863a3DAyaFSd64a1XRuwP/2nbDgdTYKF3XlcbmkTv+7Zq8XIbMzCPXkaEeo
ysGvud2WnoYheAorDn/QcRxAJBUOj/kbrNNcQsSiR9R7lEmnUyGdTLTAXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFg4JUmuTZGIE+Q46n7Hi6BymSBWMB8GA1UdIwQY
MBaAFEOjUXYGmJ6zUvaZl28hn67I41DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZjZmOTUtMzI5YS00NjUyLWJlMjIt
YjBhMmRlZGM2NWE2LzEvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xZjZmOTUtMzI5YS00NjUyLWJlMjItYjBhMmRlZGM2NWE2
LzEvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsCOf036
K9NaRdTcaVOvCkdV+aMPjusjMq6yJ9IV8/6Fm0Lefh11+h9Jss2CWOmuKZQs8Fuz
DQ0JLqRzXpYDCBtHPLwn1NSHed1Rv/8j3bLqS9fhyCX9tdrTBeDSrNNCQ7kJG/rm
LdcTzaRTfe2e9oisE4UgboxUbBHXRWE4B2vMx+otDEfjlnLRVmpwF8z+Vdbt6ss+
oXyesz7c1oxNCcqfidNmpBcj7GIez0do9XB4B0beg07GJVcXryVbSVcZy7NeRORI
vjtKfXXe9AAQHMlmHYb+3qC+Gn2uBiw7Bsihq2NoPeg7nEeMgvfaCK+M3QSzt3Lj
EtLRwTkNSpdjAw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:51 2025 by rpki-client