Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: 2C6MUsHYP9WarAFg/iUov8CKJVMFqw9JprDnc6w87NA=
Subject key identifier: 83:62:9F:A5:3E:89:A6:08:CD:24:0A:E1:7D:6C:3D:8C:8F:E4:7A:A3
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 0194BABBBAD0E85C0F41CDD8512E15376DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:52 +0000
Manifest this update: Fri 31 Jan 2025 05:00:52 +0000
Manifest next update: Sat 01 Feb 2025 05:00:52 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: auJ3YhhAUyNHM2SQo2AK2eyf2qvBAvsOd7SEo9S9kBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:ba:d0:e8:5c:0f:41:cd:d8:51:2e:15:37:6d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jan 31 05:00:52 2025 GMT
Not After : Feb 1 05:00:52 2025 GMT
Subject: CN=83629fa53e89a608cd240ae17d6c3d8c8fe47aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:4c:8c:3c:ad:88:94:a0:32:5b:6e:7e:b1:
13:19:4b:56:10:c2:6f:74:90:c3:1f:23:a7:79:a1:
f2:60:51:31:2f:80:84:03:a0:cd:e5:b7:6a:5b:38:
41:1b:d8:51:6e:5b:9a:08:34:29:09:57:b9:55:f4:
1f:72:1f:4b:91:ed:9a:01:af:0d:35:7d:14:be:7c:
12:9b:0a:78:0f:7e:57:43:14:55:09:8d:14:2a:90:
f5:f3:22:aa:4e:17:32:0a:d6:21:8f:34:17:0d:07:
0b:7b:78:e5:2b:be:87:fe:58:e2:c2:db:e1:f7:2d:
dc:04:af:01:e7:b5:02:3e:42:c5:93:95:60:f3:27:
d9:9a:99:5d:b0:f8:da:a0:d4:7e:21:af:3e:36:c7:
85:01:b9:1e:87:3c:79:fc:bd:6e:a9:7b:4e:ee:12:
7a:b5:49:34:e9:d2:0c:2b:5c:95:69:9e:97:1d:63:
2e:c9:ed:67:1a:8b:e8:96:84:be:47:97:32:d9:5f:
00:09:e6:78:59:97:f6:68:84:4f:6a:0b:f6:7f:00:
70:17:6c:ff:25:bc:85:b5:80:dd:00:4c:57:df:71:
3c:9b:1f:01:a4:2c:d0:67:53:9a:ab:72:80:a4:73:
8f:76:f2:f1:57:8b:82:b9:2c:4e:8d:d7:46:28:7c:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:62:9F:A5:3E:89:A6:08:CD:24:0A:E1:7D:6C:3D:8C:8F:E4:7A:A3
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f1:ed:b6:e0:b8:f1:29:c6:91:8e:03:11:7d:ed:6a:89:9d:
bd:11:e9:4f:09:b7:00:a1:eb:0c:f0:ce:ea:ae:1f:bd:5b:8c:
dd:e0:40:d0:ba:e9:c7:6b:9f:97:a4:be:e3:7c:2c:70:3e:01:
b2:69:fb:3a:d2:05:f5:c8:4b:fd:38:ae:20:63:e4:9a:24:32:
b1:a3:26:93:c1:8d:b5:ec:26:67:f2:7e:9f:52:b5:a3:00:a1:
52:77:56:fa:17:1e:2c:86:03:cd:c7:34:81:11:82:58:b8:62:
7b:3f:d4:08:2c:ce:c5:3e:b6:a8:6b:b3:fa:a8:f7:4d:bb:15:
c0:73:e6:e0:c4:c9:62:7c:e5:d4:09:ac:87:0f:0b:74:92:36:
da:61:2e:66:c6:a9:60:18:74:52:37:33:88:3c:65:a4:45:d3:
45:b9:03:50:39:cb:c3:a4:0e:ac:3e:20:ee:4e:8c:f1:75:ac:
40:17:f9:0e:b8:e0:03:54:83:03:22:88:e4:30:fb:3c:b7:30:
8f:05:34:b8:f9:9a:d6:54:ea:d3:73:2a:7a:2f:a6:fd:fd:2e:
a2:9c:dc:d2:4c:0a:75:c8:20:d7:96:58:20:e0:2a:d1:3a:b7:
b1:aa:ff:4d:db:17:87:b2:7d:af:1b:f2:59:fd:a7:b6:7c:1e:
c6:aa:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:44 2025 by rpki-client on console-fra.rpki-client.org