Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
File: QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft (raw, json)
Hash identifier: Ac6KIEiLjEke8qKsjYySqbPDmy9BoXmakYMS9Uk+PXI=
Subject key identifier: 77:D0:32:2A:A0:E0:78:B0:52:80:C8:69:3D:CF:32:74:60:0D:EC:F1
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial: 0194BA84428DDABB8341B17FD1CE2A8E195D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
Manifest number: 05E8
Signing time: Fri 31 Jan 2025 04:00:17 +0000
Manifest this update: Fri 31 Jan 2025 04:00:17 +0000
Manifest next update: Sat 01 Feb 2025 04:00:17 +0000
Files and hashes: 1: 7pmvBHJbdwVqFyqKem89BSyuKvk.roa (hash: yz/z7MiR6pHVCBirN+J/dsbi3QYekD7/Z8ghjQadQLE=)
2: LA-cz5sVCzNk_tA4a42FeutMowQ.roa (hash: uiKIsaEo4/vDsaJKzBGvYmUH1yNN4/rpS3B9ab7S0rw=)
3: QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl (hash: fIPd5j03ni70CpnIhMTgPiQ25IYKVIWMj2zVtLBVQVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:42:8d:da:bb:83:41:b1:7f:d1:ce:2a:8e:19:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Validity
Not Before: Jan 31 04:00:17 2025 GMT
Not After : Feb 1 04:00:17 2025 GMT
Subject: CN=77d0322aa0e078b05280c8693dcf3274600decf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:f6:af:9d:57:47:55:bb:04:c1:e5:3b:fe:
91:2a:d0:6f:e6:2f:c0:6e:26:d5:b6:56:90:ea:dc:
f2:81:6b:37:cb:26:af:c9:6c:da:2b:fd:5a:5f:a3:
36:50:5d:71:88:ba:22:ac:de:fe:83:c5:9b:34:84:
a2:db:29:ff:4f:9c:78:7c:81:11:de:40:60:50:c5:
82:b2:7d:ad:b1:04:8e:f5:85:90:81:c6:a3:3a:09:
9c:92:55:63:46:45:dc:cd:4e:ba:b6:c9:29:f0:f6:
0d:bf:74:1c:b0:f3:3f:2a:52:67:7d:c9:a9:f1:37:
90:d4:ca:fe:df:9d:06:b4:15:ee:30:77:30:d4:57:
ab:ce:bf:7b:67:1a:2d:f6:f1:1f:5a:72:f5:2a:62:
f6:1d:80:fd:e7:a1:d0:6a:f7:f9:7c:67:ec:6b:6f:
11:6d:72:4a:7d:bd:e6:23:f3:b4:2c:ab:f4:1f:91:
f1:82:3c:d4:f4:0f:11:91:33:3c:d4:ca:0f:8e:ea:
b3:2c:5d:32:cf:d7:c4:ce:10:d0:61:42:9a:60:af:
20:46:28:97:db:79:54:d1:56:99:c0:00:f2:cb:0b:
5e:d3:7a:d3:3d:53:3e:4a:f1:f9:c9:97:87:10:92:
2b:69:6e:3d:9e:36:0a:1d:62:fc:58:5b:4e:e4:14:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D0:32:2A:A0:E0:78:B0:52:80:C8:69:3D:CF:32:74:60:0D:EC:F1
X509v3 Authority Key Identifier:
keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bd:d9:b9:d7:aa:f8:4a:c5:0d:59:5b:8b:72:da:08:da:37:
19:ef:59:0b:01:75:02:46:b1:77:fa:f5:ff:78:9d:5a:6e:59:
97:44:80:56:a8:8a:33:f7:e6:b4:79:f5:83:94:2a:58:93:7c:
63:fb:4b:1f:ac:4e:8d:78:64:76:fe:99:d2:28:4f:e6:59:18:
55:45:bc:f1:a5:f1:fd:58:a5:00:8f:2f:ef:9b:fd:2b:da:53:
84:b2:e0:20:15:ea:d6:f5:8c:6e:65:f4:49:a6:9b:47:c7:c9:
37:b7:66:d1:6b:e3:fb:f3:bf:6b:f4:08:9f:09:eb:0d:d7:ed:
8a:00:fb:f0:36:c1:3c:ab:43:96:4f:fb:45:7e:b6:dd:4b:3f:
b4:9d:e3:13:ad:ba:48:ca:e4:37:ea:9a:dd:1c:6b:30:06:54:
12:78:e6:3d:e4:a6:18:2f:58:af:96:3a:05:21:bb:6e:65:31:
2d:09:69:de:7a:8a:b7:40:57:8d:ff:f6:60:7c:7a:d8:ae:5c:
e2:50:44:c6:83:77:87:9b:ab:66:ca:9f:ac:be:d5:97:99:bf:
99:9d:95:08:5a:43:fc:8a:97:d2:79:13:04:34:c9:59:a3:ae:
8b:b8:7b:b3:07:cf:0f:3d:15:b2:b8:a8:b0:4a:e0:0a:bf:7a:
e4:58:78:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:59 2025 by rpki-client on console-fra.rpki-client.org