Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: B9PJloA5lTsiAjdpdq2OeFgaWJY7eIOz2b5Wg4znIz8=
Subject key identifier: 2D:B8:CA:DB:FE:77:E7:84:97:25:9B:5C:A6:76:91:88:15:A7:69:82
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 0194BABB67D736E78785F174802B7C5A74BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 0468
Signing time: Fri 31 Jan 2025 05:00:31 +0000
Manifest this update: Fri 31 Jan 2025 05:00:31 +0000
Manifest next update: Sat 01 Feb 2025 05:00:31 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: bLLRCDaDVxcGem1JgmD5efLGp3RFoDJZT/MLMm4WWYQ=)
2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=)
3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:67:d7:36:e7:87:85:f1:74:80:2b:7c:5a:74:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Jan 31 05:00:31 2025 GMT
Not After : Feb 1 05:00:31 2025 GMT
Subject: CN=2db8cadbfe77e78497259b5ca676918815a76982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:b5:25:ed:6d:74:a0:1d:c4:97:10:9b:48:
3d:cb:2b:76:1f:32:32:56:d3:8f:78:97:e2:03:0b:
4d:ad:cf:3f:4c:77:28:a4:90:fd:31:05:c8:a8:6a:
91:ce:ca:f3:7e:69:be:57:bf:77:24:e6:bf:a4:a2:
a3:4c:c1:f6:88:06:f2:a4:79:0c:56:ed:78:ab:c4:
78:ce:aa:a7:65:f4:e8:cd:00:92:4b:7a:33:db:87:
fd:34:7e:1d:b4:b3:fa:73:84:68:d8:bc:b6:e4:f5:
ff:de:12:f8:55:31:d3:fc:3d:b5:2d:b9:7e:ba:0e:
69:2e:41:49:d1:0e:a7:cd:47:c6:41:37:10:7b:9a:
53:5b:3a:74:e2:62:b2:b1:9b:9a:7c:30:76:3e:4b:
d4:0e:c8:79:4d:6d:f2:d8:58:75:38:14:b3:77:ac:
72:16:ef:67:b5:6e:5b:9d:00:3d:ac:c8:93:5d:74:
09:6f:0a:ba:cd:a4:43:75:8e:71:d8:6e:d6:33:98:
35:94:cc:fb:4e:aa:3a:df:66:ec:32:81:d4:83:67:
12:48:a7:c9:b9:1b:af:4f:42:73:a7:4c:9b:0a:8a:
91:20:39:ff:de:78:8c:de:dd:b5:24:c5:ea:c6:ee:
d2:9b:0c:8d:97:8f:51:8a:8e:08:ae:33:c8:d5:c0:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B8:CA:DB:FE:77:E7:84:97:25:9B:5C:A6:76:91:88:15:A7:69:82
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ed:23:f5:10:3e:73:fa:3f:a0:47:06:ee:1e:bf:89:b9:67:
c8:51:c7:c3:c5:de:f0:91:51:45:d8:64:a9:5d:0a:9a:3a:a6:
bc:86:65:2d:9a:ac:a9:41:4d:85:0e:3f:65:bf:45:b5:d1:26:
b2:3c:0a:3c:4f:96:39:a6:5c:ef:7b:80:16:ec:6f:88:d0:7b:
29:ce:5a:6a:8e:49:60:1f:01:9e:e0:72:f7:fe:43:74:ad:00:
2d:32:3d:e0:64:85:82:c5:c3:cc:d0:4f:6c:55:03:d9:d2:0e:
e6:f5:aa:a5:9f:2a:de:7f:ef:7f:a2:41:0d:69:28:23:b6:3f:
09:5b:6c:0f:3d:7c:5f:03:db:50:86:51:3d:cd:25:f5:89:d4:
c0:4d:5e:36:56:b0:e7:be:d6:de:d0:b1:8b:41:8f:70:e6:98:
4b:90:6b:d3:18:cb:2c:8e:63:b5:ee:13:a6:a2:aa:17:0a:4e:
41:d0:da:99:56:91:62:f7:9c:b3:a6:87:0f:69:4c:d4:74:4a:
ca:fc:a4:b4:9a:3b:00:53:b6:7a:d5:a8:49:a1:0d:65:77:61:
6c:d2:b8:23:0e:24:47:08:ad:1f:1b:19:04:7c:48:72:a3:19:
91:ac:f2:cf:17:ad:11:c6:71:a1:84:ee:be:55:d0:2a:40:2c:
d2:17:43:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:20 2025 by rpki-client on console-fra.rpki-client.org