Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier: SgCld+AwNvaDpIoo0tVPbhPyhcJKRBH1ZR9+b/OqzcE=
Subject key identifier: 67:1D:3E:BD:C3:FF:8F:10:FF:4A:D0:8E:98:B6:F5:68:36:69:08:44
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 0194BAF2011A4D581FF2DFB53DC4DFE50AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 06:00:09 +0000
Manifest this update: Fri 31 Jan 2025 06:00:09 +0000
Manifest next update: Sat 01 Feb 2025 06:00:09 +0000
Files and hashes: 1: HM44YU_keUzYw0-k8-_A-z_iUEg.roa (hash: SXS4UlPdGWp6+QLYLhTDdcpIKj693zGOOUmfQDbJfCI=)
2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: eigYgL/xGJEsYS2rxS/qR/Yb7qGQcrqbe7wubuMJBYU=)
3: kh936l2vxgccX_jvVlzYGLxpdnk.roa (hash: 1aSc0Ne3PFeWf8CzHXerC/R90wO3YKjdcfKwJxtbP2I=)
4: yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa (hash: iQ1t4A53B7El/PSKuRvXWWegJvuT/fcPU9ZHNFZ4LFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:01:1a:4d:58:1f:f2:df:b5:3d:c4:df:e5:0a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Jan 31 06:00:09 2025 GMT
Not After : Feb 1 06:00:09 2025 GMT
Subject: CN=671d3ebdc3ff8f10ff4ad08e98b6f56836690844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:26:f4:f4:6e:82:57:68:c5:f3:da:9b:3f:68:
63:84:5c:c7:65:d3:3d:a5:63:7c:26:d1:c8:8c:3b:
32:2a:66:ab:68:3d:82:29:47:2e:90:9a:c9:14:be:
d1:39:ec:38:a2:47:b3:83:41:e7:8a:0e:13:3f:d2:
35:52:71:aa:0e:e6:8f:9a:8e:3e:d4:d2:d2:d9:98:
b1:d7:f5:c3:8a:8e:d6:42:26:5c:d6:3c:11:22:cd:
bf:99:c4:6b:a9:83:09:d4:7d:c9:c0:d9:7e:4d:3a:
3a:64:0e:7a:62:1e:20:65:14:b0:73:37:ee:b2:1f:
63:30:a2:a6:30:95:98:f5:7a:c5:3e:68:d7:f4:56:
f0:06:b4:bc:c3:1c:a3:17:a1:aa:81:0a:48:2a:be:
48:c9:09:9e:fa:ea:20:37:cc:41:87:ea:b1:05:b9:
d7:e6:e5:ef:a6:87:a3:b6:e9:45:b5:77:c9:5c:3e:
67:3b:4d:38:44:6e:65:cb:ed:b1:1b:2d:e7:99:1e:
c7:81:56:04:9d:46:bd:fe:d8:c0:ab:e9:36:8e:73:
74:54:3e:0f:63:51:21:c7:37:51:1c:2d:1e:8d:cf:
24:ab:64:02:6d:5b:9c:3a:e6:b6:bc:28:31:7e:40:
ba:e8:bb:63:d5:b2:83:ba:5b:7a:48:6e:08:60:c6:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1D:3E:BD:C3:FF:8F:10:FF:4A:D0:8E:98:B6:F5:68:36:69:08:44
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b7:21:c5:d5:4b:1f:8d:ec:64:49:33:47:53:d7:97:c1:59:
7b:36:00:a8:c6:f4:04:35:8b:73:b4:9c:6e:b7:47:80:d7:a5:
67:f0:a9:81:76:7c:a9:94:f5:65:8b:c2:3a:fb:61:ca:2c:fc:
1e:1c:8e:21:1f:45:9d:8a:aa:d4:4d:f2:9f:29:83:73:4a:79:
85:41:58:1b:fe:0f:2c:92:07:e0:28:0e:cd:e0:0b:81:0a:b9:
07:a8:11:52:4b:6c:50:c9:78:10:0a:03:89:01:24:38:1d:45:
97:17:cb:e4:ba:b7:c5:63:47:ae:56:93:f7:aa:b8:61:13:a2:
9e:51:57:ab:cf:1f:ff:86:f1:fe:aa:9f:4b:58:54:fa:b8:45:
b9:2a:3f:30:0c:70:c8:48:70:0a:fc:4b:dc:60:14:b2:46:08:
0b:77:bd:3e:93:3d:25:98:8a:28:e8:ef:ee:1f:e6:bf:76:21:
fd:98:61:94:2d:19:4b:0b:89:aa:4e:69:77:e9:cb:ed:8c:da:
d0:3e:4a:63:23:fe:57:51:0c:e6:07:73:b9:b3:36:97:b8:23:
44:36:63:71:c2:40:d7:c3:34:f7:39:31:36:e4:87:8d:8a:8c:
cf:ee:26:e8:18:cb:50:72:1b:72:f1:58:15:ea:05:19:74:62:
04:e7:99:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:08 2025 by rpki-client on console-fra.rpki-client.org