Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json)
Hash identifier: RTnkOxyWeWBAbo0cV+RSTX8xNsTGOr95yLUinjL4/Rc=
Subject key identifier: C8:78:AF:1A:0C:58:77:89:23:D7:3E:41:B7:00:7F:27:F9:09:FA:78
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 0194BB97485D5B3EFC75CF74CCB4D472C6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
Manifest number: 031E
Signing time: Fri 31 Jan 2025 09:00:41 +0000
Manifest this update: Fri 31 Jan 2025 09:00:41 +0000
Manifest next update: Sat 01 Feb 2025 09:00:41 +0000
Files and hashes: 1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: ZRPPb5HoB6ozlEINwJYJgZo9aeQYxbiysD46q5I9qgk=)
2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:48:5d:5b:3e:fc:75:cf:74:cc:b4:d4:72:c6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: Jan 31 09:00:41 2025 GMT
Not After : Feb 1 09:00:41 2025 GMT
Subject: CN=c878af1a0c58778923d73e41b7007f27f909fa78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:61:ae:6f:2d:b2:78:32:c5:33:3a:33:c4:
6e:39:56:6b:22:04:31:a4:82:9a:0c:2e:e7:ca:55:
c1:7c:5d:d0:2b:10:06:c7:41:c1:19:f4:a9:80:f5:
68:9e:5a:ff:b7:3e:59:51:1b:81:58:d7:f9:ce:01:
4d:8f:10:8d:9b:0b:8e:37:06:8e:27:bf:8d:5b:92:
3d:43:88:97:2d:3b:7d:25:e0:ff:77:ff:e9:6a:5b:
7a:05:ac:c8:f2:fc:c1:ff:c6:7e:6d:17:d9:ef:75:
6f:58:a5:20:f0:a0:69:fa:52:31:00:86:a8:c7:7c:
64:01:de:7b:b7:a0:99:f5:a3:f1:7d:93:1b:6c:2a:
ed:a3:16:74:07:7e:8e:99:2e:76:54:15:35:49:38:
99:4a:40:54:b8:aa:35:aa:41:96:cd:ad:3f:8f:35:
43:0e:9d:89:e1:dc:75:68:e7:4c:51:43:0a:e6:83:
fc:7a:1d:5c:4d:70:62:2f:6f:b2:67:f0:0e:91:06:
34:4b:fa:7f:e0:76:0c:23:3a:dc:57:63:94:a9:33:
3e:e3:62:06:b9:79:2a:e0:fb:da:fb:31:3d:bc:d3:
9e:07:68:4e:9b:76:61:75:57:27:1d:3f:bb:f1:c9:
49:4e:55:d2:79:3c:25:31:80:b1:73:07:84:4c:05:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:78:AF:1A:0C:58:77:89:23:D7:3E:41:B7:00:7F:27:F9:09:FA:78
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:09:3d:90:6d:ab:51:3a:05:89:a2:46:7b:ed:ab:b7:3e:c0:
2b:a3:4b:ed:f2:32:a1:93:49:5c:0f:52:6f:a9:db:e3:82:8e:
db:17:b5:69:05:c7:a8:43:f0:27:8f:07:41:03:58:fe:74:c7:
1e:1e:78:48:8a:5b:df:6b:7c:4f:ac:3c:43:6b:a0:98:9a:cd:
d0:f9:77:58:a6:eb:66:e4:52:d1:9b:7e:e3:9e:f6:db:83:8d:
10:e5:79:de:61:d0:27:ed:8b:44:c6:9f:47:ec:02:74:c1:04:
f8:58:47:94:f9:95:be:01:6d:e5:28:e5:66:da:96:e0:c7:71:
ad:a6:12:c3:a0:f1:f8:be:f0:50:64:ed:df:5b:ec:c3:89:43:
3e:a7:e5:b8:75:02:a7:d0:21:c4:e8:b5:ed:18:75:99:6e:1b:
3e:ea:32:a5:60:c5:44:4c:be:7d:db:89:f5:34:b2:e7:0a:48:
95:d3:56:4e:2a:d8:91:f1:4f:c5:a8:04:e7:af:85:7c:43:c6:
3f:79:83:b6:32:91:34:37:dc:61:a3:2f:f3:6b:00:68:fc:7d:
fc:e0:fd:0a:f0:d6:a7:57:0c:b5:f9:fa:a4:0c:c6:d4:75:26:
38:74:60:51:ba:32:be:6f:b5:c4:97:5e:18:14:47:f7:33:9f:
1e:f6:90:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:34 2025 by rpki-client on console-fra.rpki-client.org