Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: z5jA6ux5IORFxWZJ9Kl73tf9c6QbM8B3P+9BPk/90YE=
Subject key identifier: B9:53:91:34:D1:38:9E:94:84:5E:3A:3A:E3:FF:38:4E:68:80:D9:FB
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 019510C7CAB879CEE7EE6917A56905080C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 22:01:23 +0000
Manifest this update: Sun 16 Feb 2025 22:01:23 +0000
Manifest next update: Mon 17 Feb 2025 22:01:23 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: BJMaTQ/jQ4mYsz2xApq25h3+86BCNfXORP9KJrS/5HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:ca:b8:79:ce:e7:ee:69:17:a5:69:05:08:0c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Feb 16 22:01:23 2025 GMT
Not After : Feb 17 22:01:23 2025 GMT
Subject: CN=b9539134d1389e94845e3a3ae3ff384e6880d9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:32:6a:16:52:bc:07:f9:d0:2f:61:bc:df:
75:ae:eb:c5:36:b7:6b:7f:09:d4:63:fb:09:eb:fd:
b1:31:6b:a3:6a:c9:d3:a3:cc:c9:9d:01:30:fd:05:
7b:26:08:03:bb:e9:8a:9b:0a:7e:bc:ee:66:ab:d7:
8f:d8:6d:ea:c5:81:4c:16:ce:fc:e9:9e:2b:89:40:
59:1f:3a:a0:03:07:25:09:0f:0c:96:d1:2a:f4:f0:
c6:f1:fc:88:6a:b1:57:23:c5:64:df:f1:63:cb:e7:
70:3e:7f:05:6e:f9:ee:f9:03:39:ae:e8:99:53:14:
32:19:f8:a3:7f:46:13:af:ea:85:62:4f:ad:b3:5b:
ea:d9:a9:ac:ee:15:d4:d6:cf:9e:24:92:33:15:55:
bf:46:2d:b6:be:84:9f:fe:6f:f6:c5:1e:f1:2e:9b:
52:57:a3:d6:83:dc:2c:69:45:d2:46:ce:86:92:15:
81:5c:d7:16:d6:ad:ad:75:f6:d9:2f:31:49:09:89:
41:ed:e8:72:bd:3e:f2:e4:72:18:59:8d:4e:93:5b:
18:f6:92:9e:16:89:7d:c7:db:28:2a:ae:a1:47:e6:
57:0e:c2:f0:a6:05:40:75:42:fa:72:9b:49:f1:b3:
e3:b3:73:cc:54:78:c1:99:af:f8:59:76:2c:73:9e:
8e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:53:91:34:D1:38:9E:94:84:5E:3A:3A:E3:FF:38:4E:68:80:D9:FB
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:95:aa:d0:8e:a3:34:3d:f5:ee:96:36:20:cd:37:6b:cd:c7:
f6:14:16:9a:28:e6:4b:71:f6:ee:5c:13:34:1c:d9:59:de:18:
b1:39:8c:7e:34:18:f9:a5:a7:69:f4:e1:da:bd:6a:43:3e:06:
ed:15:7f:92:f1:d7:d7:7a:2d:52:f5:9e:9a:92:6d:f7:df:db:
79:d7:9d:d2:0e:e8:4b:ad:17:db:80:2f:8f:f0:e4:7e:34:b3:
f2:7e:2b:36:27:4f:78:cc:97:39:b4:fd:e0:82:89:62:a2:db:
fc:cf:e4:e6:d5:9f:0d:4a:d8:70:33:d4:2d:b8:2f:17:7e:88:
6d:d8:f7:99:07:6f:4c:fb:e2:96:af:30:c7:4a:97:60:1f:e7:
24:0b:be:87:c6:76:ca:e4:55:31:b9:ab:c7:0b:dc:a7:19:5d:
6f:08:79:5d:7f:3e:6e:fc:ba:82:75:f4:d2:27:45:b3:5c:df:
a6:b1:3c:72:14:2f:59:2e:5e:22:eb:c7:18:9c:73:37:73:00:
17:40:0d:fe:5a:94:37:a5:ce:ce:2c:36:cd:e4:3a:f8:a5:d4:
6c:9c:5f:ee:e7:29:4a:02:b5:4e:9d:71:80:87:33:0f:ed:8e:
ef:b6:aa:d1:84:5f:09:f5:95:e2:e7:3b:8b:d9:4b:54:20:a3:
58:ca:fe:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx8q4ec7n7mkXpWkFCAw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzVmOTA3ZWM3ZGJmOWM2NWI4MTVhYTNkNzIwMmI2ZGZh
ZTMxNDgwHhcNMjUwMjE2MjIwMTIzWhcNMjUwMjE3MjIwMTIzWjAzMTEwLwYDVQQD
EyhiOTUzOTEzNGQxMzg5ZTk0ODQ1ZTNhM2FlM2ZmMzg0ZTY4ODBkOWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq8yahZSvAf50C9hvN91ruvFNrdr
fwnUY/sJ6/2xMWujasnTo8zJnQEw/QV7JggDu+mKmwp+vO5mq9eP2G3qxYFMFs78
6Z4riUBZHzqgAwclCQ8MltEq9PDG8fyIarFXI8Vk3/Fjy+dwPn8Fbvnu+QM5ruiZ
UxQyGfijf0YTr+qFYk+ts1vq2ams7hXU1s+eJJIzFVW/Ri22voSf/m/2xR7xLptS
V6PWg9wsaUXSRs6GkhWBXNcW1q2tdfbZLzFJCYlB7ehyvT7y5HIYWY1Ok1sY9pKe
Fol9x9soKq6hR+ZXDsLwpgVAdUL6cptJ8bPjs3PMVHjBma/4WXYsc56ODwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlTkTTROJ6UhF46OuP/OE5ogNn7MB8GA1UdIwQY
MBaAFKo1+Qfsfb+cZbgVqj1yArbfrjFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMt
YjZmMWNmYWE2OTg1LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMtYjZmMWNmYWE2OTg1
LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZWq0I6j
ND317pY2IM03a83H9hQWmijmS3H27lwTNBzZWd4YsTmMfjQY+aWnafTh2r1qQz4G
7RV/kvHX13otUvWempJt99/beded0g7oS60X24Avj/DkfjSz8n4rNidPeMyXObT9
4IKJYqLb/M/k5tWfDUrYcDPULbgvF36Ibdj3mQdvTPvilq8wx0qXYB/nJAu+h8Z2
yuRVMbmrxwvcpxldbwh5XX8+bvy6gnX00idFs1zfprE8chQvWS5eIuvHGJxzN3MA
F0AN/lqUN6XOziw2zeQ6+KXUbJxf7ucpSgK1Tp1xgIczD+2O77aq0YRfCfWV4uc7
i9lLVCCjWMr+Dg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:35 2025 by rpki-client