Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
File: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft (raw, json)
Hash identifier: YvD9VNsB9svmaTL6wqmvzpbmS1+mikPd286vsZPgb5A=
Subject key identifier: 0F:7F:38:D8:6A:D3:94:F8:89:08:A9:3B:2B:C2:58:87:6E:9D:B4:93
Authority key identifier: A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
Certificate issuer: /CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Certificate serial: 0194BABB125C29F226BD7FC2487A25F30DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
Manifest number: 04F8
Signing time: Fri 31 Jan 2025 05:00:09 +0000
Manifest this update: Fri 31 Jan 2025 05:00:09 +0000
Manifest next update: Sat 01 Feb 2025 05:00:09 +0000
Files and hashes: 1: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl (hash: C+ZrmObWqhva0x9SuQaEvB9rO61mwlWjvnY2uBiHq/c=)
2: vJJQ7dMyrgz7V87aem8R5eRT1tU.roa (hash: YVuwtpk4uTSArI127axgnPV75XcPEeuaWjYEyG0FBxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:12:5c:29:f2:26:bd:7f:c2:48:7a:25:f3:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Validity
Not Before: Jan 31 05:00:09 2025 GMT
Not After : Feb 1 05:00:09 2025 GMT
Subject: CN=0f7f38d86ad394f88908a93b2bc258876e9db493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ab:b1:ae:5e:9f:d1:c9:45:3b:0a:d4:c0:f3:
ad:99:90:e6:ef:ea:ab:6c:68:95:30:9a:2e:3a:8b:
07:ae:d0:c1:c2:0e:25:45:3a:01:cf:cb:0a:5e:6c:
ad:e7:87:de:d5:22:34:2d:7d:25:88:5d:5f:97:59:
3f:73:c5:b9:e1:3a:3b:13:21:2b:20:cb:b4:8f:5b:
2a:6d:67:bd:06:af:fd:3b:73:7d:ca:f8:e8:40:64:
59:09:5e:be:b7:c3:dc:86:91:27:8f:02:7d:8f:cc:
f4:f3:b0:bf:2e:90:aa:6d:5e:61:9f:c5:92:97:27:
06:b5:96:3b:7b:4b:37:e3:af:84:90:cf:d2:fa:8d:
56:55:0f:e7:20:8f:73:4c:84:6f:2e:bf:cf:69:a9:
54:55:06:d5:0f:ee:22:3d:61:45:28:d9:85:08:5c:
1b:02:82:9c:a5:4e:cb:06:f4:54:f7:91:bd:f9:d8:
cd:85:fb:cc:27:0f:ad:07:ad:0d:f0:f4:6a:80:16:
5c:71:bd:03:b7:95:fc:c2:5c:f6:29:3e:cd:b8:e5:
93:b8:da:1d:cf:b4:a9:e8:0f:03:31:41:5a:ca:c0:
fc:ab:d3:95:1b:08:1f:0a:b5:e7:fb:51:cc:e6:17:
fd:94:ef:37:ee:bf:75:0f:b3:bf:3e:31:45:9f:a2:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7F:38:D8:6A:D3:94:F8:89:08:A9:3B:2B:C2:58:87:6E:9D:B4:93
X509v3 Authority Key Identifier:
keyid:A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:59:8a:3b:d0:72:62:ee:7a:75:ec:54:e4:5a:d5:03:34:89:
e2:96:2a:c7:58:a9:0a:44:80:d8:37:7d:b5:79:8f:74:23:45:
f0:70:7f:11:2a:c8:a0:5c:fd:dc:5c:11:d7:89:2b:d0:04:84:
24:b4:a3:65:af:0b:5a:d1:76:48:9e:35:29:65:26:72:31:61:
e0:68:79:77:b7:19:a3:2e:e8:2f:01:7b:9d:92:cc:64:a0:4f:
51:89:f5:fb:a2:0c:80:a9:1f:ec:8d:8f:90:d6:21:a0:c7:4d:
63:1b:75:96:ae:01:cf:ac:c6:06:7e:8d:ab:99:7d:64:6b:f7:
f3:c5:89:0f:f7:5b:2f:84:72:1e:8b:a0:5e:d8:47:d8:7b:aa:
ad:27:ca:23:03:eb:b5:a7:e7:66:15:ed:16:ed:89:37:e6:41:
8e:73:cd:89:51:cc:ea:38:03:70:39:37:ab:d3:a6:a2:49:79:
6e:c1:e8:bc:0f:7b:00:5b:40:2b:60:33:ba:5f:83:aa:ed:e5:
d3:f7:6c:4a:f8:91:85:c9:fe:62:0d:58:06:2f:ba:20:f4:70:
27:80:0d:89:98:11:92:c8:0a:59:13:6c:d8:1e:1b:41:55:d7:
c0:60:60:1f:79:1b:05:16:f1:33:b1:4e:1c:55:91:79:ef:f8:
b3:ce:69:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:59 2025 by rpki-client on console-fra.rpki-client.org