Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json)
Hash identifier: TRhBpkF0pc3bkIoUlahEpcYg4+n3mAcT1G9tbb+xiPo=
Subject key identifier: C6:FA:BB:47:B6:41:9F:A6:19:FC:80:2E:D4:9C:06:8A:07:28:AE:56
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial: 0194BB96C0B395CF82DE900DB47409D4291D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 09:00:06 +0000
Manifest this update: Fri 31 Jan 2025 09:00:06 +0000
Manifest next update: Sat 01 Feb 2025 09:00:06 +0000
Files and hashes: 1: qlMDWlG-JNx16-NWJFTyN9idn8E.roa (hash: E945kOZUUQnkihDV8A7yVqNkz5KAfzQzs4QO1zB4q98=)
2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: vXGqoJTECiLrupYVwQqSqLEeXaWFL9WpRT1JErCRrfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:c0:b3:95:cf:82:de:90:0d:b4:74:09:d4:29:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Validity
Not Before: Jan 31 09:00:06 2025 GMT
Not After : Feb 1 09:00:06 2025 GMT
Subject: CN=c6fabb47b6419fa619fc802ed49c068a0728ae56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ed:99:79:ca:18:43:b3:59:90:45:50:a2:22:
a7:53:57:66:1c:c3:cd:b5:74:d0:14:d9:83:13:92:
7c:26:fa:56:99:a7:d1:17:2e:ef:09:09:c1:ed:57:
a8:0b:76:25:eb:4c:7c:a4:87:56:ad:81:46:18:87:
f8:50:b9:3f:9e:2e:eb:c3:a5:e9:c7:74:a0:75:3f:
70:b2:0e:e0:ab:3d:98:95:13:fb:f3:24:7f:04:ee:
b8:a8:21:d4:ad:97:5c:67:6a:8a:fd:65:5e:4b:85:
13:14:94:76:b6:29:69:96:b8:1a:e2:6f:5d:9d:78:
ca:61:12:af:c6:9c:be:09:45:1d:b2:ac:47:36:b2:
cb:17:eb:01:4f:f7:f9:a2:fe:d5:70:70:62:74:96:
3e:40:02:d7:10:86:71:8b:7b:d9:32:bd:f7:42:a0:
74:1b:39:79:4c:b7:85:cd:7e:6f:de:be:f3:e4:81:
90:0d:fa:77:21:35:26:b6:8a:f2:ab:8d:a3:95:d9:
64:f2:c3:c8:41:22:11:a9:3c:0e:f2:03:66:45:56:
51:e6:ef:14:12:29:49:80:f7:3e:0f:0d:88:71:7a:
a3:cb:1e:d1:5d:d5:3a:7e:3a:76:52:e9:7c:3c:46:
e5:88:7f:a6:92:03:3a:d4:e0:c4:a7:4d:29:db:a1:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FA:BB:47:B6:41:9F:A6:19:FC:80:2E:D4:9C:06:8A:07:28:AE:56
X509v3 Authority Key Identifier:
keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:17:26:7c:25:9d:43:28:f4:a2:50:82:cd:23:23:bf:a9:b7:
4d:b0:af:3f:03:ca:81:6d:6a:a5:0a:a8:31:1c:85:f1:a2:e4:
7c:03:d2:5d:10:61:2a:2f:6e:f1:89:ab:10:fe:39:49:fc:42:
a5:b5:52:aa:07:b5:e4:e5:61:33:1f:b1:ac:23:14:23:a6:45:
67:9b:01:03:6b:08:33:2c:9f:76:94:ee:a5:d6:a0:f9:40:12:
88:9f:12:d7:6a:57:4a:3b:12:53:79:c0:ab:83:a2:da:45:a6:
41:a6:fb:83:19:05:ac:74:ad:58:4f:bf:a9:df:7b:21:e1:fb:
f9:6b:f8:a8:ca:da:86:30:07:aa:d2:d0:8c:a6:56:5d:7d:1a:
b6:84:99:f0:f5:cd:75:9c:24:9d:c8:f3:51:f4:89:e2:0b:64:
7c:fa:0f:62:87:0c:37:3c:33:30:00:c6:f0:a2:35:71:9e:55:
4e:93:a7:4c:8e:89:2e:3c:1e:fb:03:77:a2:5d:6d:9c:f8:a9:
af:60:92:b7:09:82:86:be:d6:a9:65:95:dc:c2:49:c1:1f:e4:
65:9e:f8:bd:69:24:b3:27:ee:e8:46:e2:14:d3:11:05:ae:9a:
02:30:cd:a6:bc:dc:b7:9b:58:03:e6:7d:a5:80:8a:48:0d:4f:
6c:61:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:07 2025 by rpki-client on console-fra.rpki-client.org