Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
File: q5ddtDeN_KfClTuG07GNyLIY7Gs.mft (raw, json)
Hash identifier: ukbS1QygL6ZVLdPncQAH+ey73JxkGjSToV9UhECZhSY=
Subject key identifier: 44:74:4A:C4:39:13:B5:D6:1B:C3:77:2F:96:76:9E:54:1E:09:09:CE
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 0194BABB3B99327139C2814F07BE9A89D047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
Manifest number: 0BAE
Signing time: Fri 31 Jan 2025 05:00:20 +0000
Manifest this update: Fri 31 Jan 2025 05:00:20 +0000
Manifest next update: Sat 01 Feb 2025 05:00:20 +0000
Files and hashes: 1: RbouPlrvjxMByw-unVzRP4nNXJw.roa (hash: XJEjUdWYmJvOBDOP+ovs4X9aLXbBgk9gR+EZ+bBT2d8=)
2: f1kmm1viP1JpShChN2T-8khwmCE.roa (hash: oA16peDdFaNYYVYRr7l06EBaQutaxn0Ux8cCt1MZLyc=)
3: q5ddtDeN_KfClTuG07GNyLIY7Gs.crl (hash: oJ7Nc68wmzXcBPfbsG0B0UaHLeR8kbPmRgdwPrrOqrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:3b:99:32:71:39:c2:81:4f:07:be:9a:89:d0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Jan 31 05:00:20 2025 GMT
Not After : Feb 1 05:00:20 2025 GMT
Subject: CN=44744ac43913b5d61bc3772f96769e541e0909ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:03:af:4c:ab:38:be:0c:81:b2:2d:4c:dd:7a:
5a:31:80:c8:81:d8:ef:06:83:50:be:4b:5d:13:21:
d8:1c:a9:80:f5:aa:73:92:70:3d:46:da:6f:b6:dd:
a4:97:8d:2f:cf:5f:0f:11:2f:b6:df:71:ec:5c:15:
33:7d:23:12:8d:31:d2:a2:e1:2b:d3:21:b2:aa:b0:
67:5f:c1:2b:5d:d5:81:a1:d1:a1:34:2c:0e:d5:4e:
40:f7:6b:52:35:80:16:c0:e9:07:31:18:d8:b5:e1:
1e:d0:fc:eb:ce:17:16:77:95:4e:f5:b6:e5:5b:d7:
6a:23:4b:28:73:8e:bd:da:9f:da:80:71:ff:d7:de:
52:1e:52:93:f8:d1:3a:1e:da:8b:3b:c0:b7:d4:22:
50:25:0a:dd:6f:5b:35:3c:a4:4b:88:1e:14:1a:61:
ed:e4:85:f5:29:20:c6:f8:f5:5c:86:08:e7:a5:10:
af:45:41:f7:02:2e:52:03:c9:87:f6:4d:ef:21:b5:
21:93:4b:96:2c:70:42:4a:d2:dd:2b:7a:5b:cd:08:
42:15:de:0c:6d:0b:ad:da:7a:75:55:36:1d:fb:71:
ba:a4:94:7d:3f:5c:b1:11:9b:49:32:00:18:49:8b:
f3:98:c6:f4:d4:e9:36:79:52:fb:67:03:cb:7f:84:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:74:4A:C4:39:13:B5:D6:1B:C3:77:2F:96:76:9E:54:1E:09:09:CE
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9d:85:8c:d6:e9:35:e9:04:b3:a9:1a:11:45:84:07:83:fe:
b7:7f:b9:c8:03:9e:65:e9:1d:de:c3:75:23:7a:14:72:b2:5f:
0a:f5:2c:ea:cf:97:ea:d4:a3:9c:4b:bc:5e:48:4c:e6:dc:ae:
83:2d:1b:d0:16:40:3a:b4:b7:02:87:cf:bd:f2:b5:20:48:a8:
a8:8e:64:ec:aa:5b:06:ef:d6:c6:84:1b:9e:8d:14:9c:8f:cd:
c4:40:f0:0f:3b:77:9b:ba:ce:e7:8e:1d:40:f3:6a:07:ab:b4:
e0:8c:47:95:1d:09:a6:92:48:fc:b5:06:94:85:6c:99:d5:70:
3f:32:82:77:84:f1:12:4c:91:3c:12:9e:c7:dc:c1:fb:4f:43:
2f:a0:4c:40:91:a8:47:12:f6:20:2d:c6:f9:90:36:95:58:d2:
7a:9a:64:78:31:c4:2a:d1:97:2c:f1:66:b2:b6:57:3c:c5:61:
99:33:bf:dd:bc:50:38:80:d3:ee:02:fe:c9:b1:7d:b0:a7:ad:
bc:9f:0a:dc:f8:31:cf:3d:9f:fe:6d:20:d3:d3:6a:60:53:b9:
b7:93:c7:11:61:90:c4:9f:ea:26:bc:9a:bb:d5:30:d8:fc:20:
96:d6:5f:a1:97:77:5e:74:c5:9d:cf:e9:39:23:31:81:a3:4d:
08:7a:66:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:32 2025 by rpki-client on console-fra.rpki-client.org