Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File: QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier: 4q0K2cCIONY5TLQ9niywraGMiGNueQ61UGz+6ug7On8=
Subject key identifier: 0D:8B:A3:90:E8:45:CC:D2:B0:EF:70:DE:8A:25:74:A3:E9:BF:96:24
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer: /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial: 0194BB291F8019802A8F6FD263985811214B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number: 137E
Signing time: Fri 31 Jan 2025 07:00:21 +0000
Manifest this update: Fri 31 Jan 2025 07:00:21 +0000
Manifest next update: Sat 01 Feb 2025 07:00:21 +0000
Files and hashes: 1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: kgFlDvNA0H2R1e82I30EZOBKdyqCUFBYvVQqU3plgYA=)
2: fDR4cU3XqJg4t0VKZWBpSExwqRA.roa (hash: sdNAH+4UVUlBbNGnVcweAz337i8Vp0M6ubrDrxe2cuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:1f:80:19:80:2a:8f:6f:d2:63:98:58:11:21:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
Validity
Not Before: Jan 31 07:00:21 2025 GMT
Not After : Feb 1 07:00:21 2025 GMT
Subject: CN=0d8ba390e845ccd2b0ef70de8a2574a3e9bf9624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:4a:f9:b5:4e:ed:68:f1:c4:30:61:67:15:
bf:92:a6:82:8e:bb:be:35:98:9e:65:1d:31:4b:ae:
98:dd:e6:0a:bd:50:b4:14:d6:f0:cd:52:18:91:65:
74:4c:68:e4:cb:7a:93:75:b6:e3:78:e8:7b:9d:e3:
31:d2:80:68:da:d7:2f:86:63:55:f6:ff:fa:a9:11:
b8:6d:54:46:3c:d0:11:2a:0e:8b:ac:5b:a2:ee:8a:
fe:eb:23:e0:16:d6:7d:ff:d4:11:44:a8:80:82:4d:
80:33:99:6f:93:54:6c:7d:84:15:b5:18:57:fc:87:
8f:66:e6:08:36:ab:8c:36:17:3d:e9:c0:5b:82:ad:
23:29:d5:5c:da:b1:1b:d1:d9:3e:b6:a7:15:6f:a7:
be:ec:4a:64:2b:a7:31:90:47:60:21:5e:39:e4:49:
55:78:5c:72:8c:dc:e4:cb:55:aa:f1:12:fd:0f:96:
a0:86:99:a6:06:b0:ba:f4:d0:33:06:9b:d9:e6:c1:
d4:e7:ff:d0:3b:e0:37:99:01:ba:c6:8f:cc:d0:1a:
75:5e:66:b1:cd:fb:4c:d4:2b:29:67:e2:d5:df:8c:
97:6f:dd:f7:9a:25:7c:84:c7:a7:dc:07:b9:c7:ba:
cd:33:36:a5:c5:b8:08:79:d9:10:48:28:72:5f:5b:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8B:A3:90:E8:45:CC:D2:B0:EF:70:DE:8A:25:74:A3:E9:BF:96:24
X509v3 Authority Key Identifier:
keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:32:40:46:cb:a4:35:e6:79:24:6d:ec:43:82:d2:14:5f:b2:
62:25:93:86:f9:3f:48:18:dc:25:32:91:6b:2a:94:86:2a:83:
4d:56:bd:fa:05:d2:53:07:4e:d5:fe:72:72:86:be:e4:4d:69:
cc:a0:a8:3a:71:fa:35:1f:83:b9:13:8f:48:1e:69:15:6b:ba:
e4:70:5c:d7:79:42:cf:ed:ca:d8:ae:cd:b5:59:3b:a9:57:d5:
93:5d:ec:f4:88:17:22:ef:bd:03:57:41:e1:75:66:92:7b:a9:
56:bd:d7:5e:30:5a:77:83:04:96:4b:73:6a:39:90:31:b4:2e:
c0:63:ba:11:fd:a8:df:d7:83:88:a9:3d:1a:6c:02:8c:66:65:
d2:4f:e9:5e:1a:37:d4:17:0c:e9:2e:e1:f3:bd:d2:98:6b:14:
d7:9d:cf:13:ab:41:4e:ad:af:54:ed:31:90:90:03:b0:87:2c:
49:51:b9:bf:fb:22:63:33:41:91:29:9f:03:41:de:91:c9:ba:
a1:6e:7a:ed:2d:56:af:70:6b:05:02:21:3c:8f:a6:40:fa:ff:
f7:e8:a9:f6:ae:72:7b:58:c0:3e:07:e0:39:51:0d:cd:dc:7f:
79:97:9e:71:94:c1:6a:fd:4f:c3:9a:a0:46:5c:ef:cf:77:85:
2f:5b:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:28 2025 by rpki-client on console-fra.rpki-client.org