Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File: Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier: nDKsVQlaHTMqESU72V1De9lBip9qbYHRT1eWkyhLu9M=
Subject key identifier: C1:36:63:45:56:33:85:EC:B0:A0:55:BA:5A:1C:5A:E5:C5:51:F1:59
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial: 0194BB60482065F4E0D740E063BEEEC0B07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number: 0F2C
Signing time: Fri 31 Jan 2025 08:00:36 +0000
Manifest this update: Fri 31 Jan 2025 08:00:36 +0000
Manifest next update: Sat 01 Feb 2025 08:00:36 +0000
Files and hashes: 1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: GxuAJzGcYHDr7IT34J/13SEBsjqhSVEtRfxeqD6UYCs=)
2: TAMhyO_TxaxCZl8ndF5QQYJ7fSc.roa (hash: fwo98qFwUrEP75fKt0AHaKO4fww5cOw9kGra/QKoqNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:48:20:65:f4:e0:d7:40:e0:63:be:ee:c0:b0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Validity
Not Before: Jan 31 08:00:36 2025 GMT
Not After : Feb 1 08:00:36 2025 GMT
Subject: CN=c1366345563385ecb0a055ba5a1c5ae5c551f159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:47:2b:1f:8e:5f:3b:bc:21:22:90:c0:d1:
ee:0b:aa:07:61:24:72:71:36:e4:76:ab:0a:05:e9:
9f:09:a9:b5:b0:3e:ff:f4:27:8a:c0:cd:48:1b:26:
12:c7:83:ee:20:93:e0:50:2f:a5:1a:ed:a1:de:67:
3a:7c:bf:53:00:74:50:76:3c:f5:1e:cf:9f:ff:92:
b5:1e:bf:45:14:44:13:dd:27:b1:25:5d:70:3c:21:
6f:c3:df:60:ab:28:ad:d5:1b:46:61:45:f1:5e:f1:
e9:92:2e:7c:58:4c:b4:b7:0b:0f:be:02:f5:31:41:
b5:66:40:11:35:bf:33:8e:de:a8:f4:06:1e:41:b6:
68:f8:74:9d:19:29:89:93:ef:a6:f6:61:ee:cc:7f:
22:4d:c6:87:2b:2f:c1:5d:24:ca:db:7c:84:fa:4a:
f9:06:39:69:cc:d9:1e:2f:e7:34:76:17:b0:ff:2b:
6a:8c:32:09:c3:fa:9c:6a:fc:62:24:39:68:80:bc:
54:1f:66:e0:1b:2c:84:c3:3b:41:3b:30:07:be:f2:
25:9d:f7:12:2f:f6:fe:7d:d6:bd:22:01:0d:72:40:
54:f9:17:a0:13:94:ed:8f:98:0b:bd:6a:a8:d8:f9:
ce:8f:82:6e:75:7e:c2:72:33:ec:4b:89:8d:26:7e:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:63:45:56:33:85:EC:B0:A0:55:BA:5A:1C:5A:E5:C5:51:F1:59
X509v3 Authority Key Identifier:
keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f6:14:d4:bc:f6:72:ee:cf:ad:1a:11:38:6e:48:81:fe:d1:
11:29:cc:35:3a:41:a3:86:ad:15:1d:30:82:7e:45:c0:1f:df:
27:05:68:2b:3f:21:8e:06:e4:d0:16:4b:9b:27:0f:e7:7f:07:
25:26:13:72:5d:36:a9:9a:f3:26:40:f3:fe:f4:6a:34:43:ea:
b3:72:fa:e1:c0:73:52:b7:b0:6a:67:5d:8b:ec:05:f9:95:f9:
cf:f0:e1:56:fc:c2:80:59:f0:49:46:39:9e:0c:93:48:aa:40:
1d:86:65:77:12:12:2f:2b:29:27:54:74:70:84:88:01:09:fc:
8f:dd:33:6d:b3:1f:4e:ac:8b:8c:ba:0c:80:3c:9c:19:38:4c:
a2:ca:a4:f2:cd:30:b5:48:d9:a8:74:8c:6d:22:f6:7f:5b:be:
ed:2d:5d:b4:e0:7a:d0:ce:bc:10:09:b5:af:c5:0d:6e:b4:96:
b7:36:e5:25:2a:14:a5:3f:b8:b7:22:29:93:19:7e:16:5f:d4:
ae:09:af:52:f4:5f:f5:a1:84:b3:e7:03:a5:b7:06:cc:90:ad:
8a:d7:2e:66:c2:a7:6d:16:e0:8c:d4:6d:1b:ef:e4:18:a3:99:
33:88:3e:f8:02:6b:4d:5d:73:67:f9:4d:6a:bd:ce:4c:b0:73:
3f:fe:0b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:04 2025 by rpki-client on console-fra.rpki-client.org