Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
File: Q0XQdzx63gjUSBnjthG9KXo5idM.mft (raw, json)
Hash identifier: eCcrQ5n7j51DjC78FJXstQBMuDCity9tj7hPOXypJJU=
Subject key identifier: D4:58:51:4B:2E:7D:B5:A1:6D:B1:96:0C:B5:14:01:7E:1E:0F:99:DC
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 0194BC04FEE083E557350D69D2FE5BD551B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
Manifest number: 1143
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: D7IbZMa3P-hRRIAm78DqK4wNZ34.roa (hash: 3Rvd3MmyWPzVOpIFhMlT5LNPsKGSgahML9FUxKiCMwI=)
2: O7r63uTdFaICg1i90uf5cyEl-h4.roa (hash: Efs34tr8Lub/IHxUGCrqJn6lA9J8HyHyjcZJAIyTZbQ=)
3: Q0XQdzx63gjUSBnjthG9KXo5idM.crl (hash: OAFdJbep3Zl6AfTedGeG2pBLXkhLXiZoNaMRgX1h60Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fe:e0:83:e5:57:35:0d:69:d2:fe:5b:d5:51:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=d458514b2e7db5a16db1960cb514017e1e0f99dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:c7:08:be:9d:ae:3b:5a:a8:61:5f:fd:d6:
3e:11:49:4f:37:d3:09:0f:08:0c:0c:a1:3c:dc:e9:
1c:46:ef:9f:7a:74:d8:ea:21:98:61:3d:ee:47:8f:
f1:f3:88:fa:1c:17:79:23:bc:b0:73:30:e6:5c:80:
d2:dc:66:93:e8:08:aa:10:16:55:d1:4b:da:42:78:
ad:99:0d:a7:d4:d7:7a:d7:a9:8f:40:02:a0:7f:a8:
a2:d4:13:28:f7:e4:68:d9:f9:9f:29:ed:fc:85:3d:
4d:8c:92:f7:06:c4:ff:56:bd:52:df:71:c7:df:fb:
31:ce:db:46:5c:19:0e:1b:2d:9a:a5:66:ac:f7:ee:
8a:03:af:01:a4:a1:62:d0:cc:bc:b7:a5:b5:0c:7b:
a2:b5:9f:cb:d3:8d:3a:d1:16:b1:76:03:3f:b9:f2:
e7:96:f3:44:20:7e:6c:57:7f:6a:09:2f:ce:3e:ca:
51:77:59:fa:d5:e5:fd:2c:89:37:f2:cd:bb:57:91:
ca:fe:48:2b:f3:f9:dd:67:81:3f:ba:d3:eb:b9:b0:
8e:0e:c2:5d:3f:b8:cd:b3:1d:bc:8e:84:b8:f6:85:
a0:f1:ef:71:6e:56:30:cf:9a:38:00:df:3e:4b:ec:
d6:e2:ee:21:7a:26:82:2f:c9:42:18:1c:7e:ae:22:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:58:51:4B:2E:7D:B5:A1:6D:B1:96:0C:B5:14:01:7E:1E:0F:99:DC
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a5:23:dc:2d:65:c5:7d:fc:2a:a3:ac:bd:ee:07:d9:a4:ae:
23:bb:2a:45:48:d4:a4:2e:58:be:f4:72:89:e1:46:9e:c8:6b:
87:b1:7e:ea:12:32:4d:a5:fd:0f:cf:09:8c:26:af:ef:47:7c:
1e:f5:a2:67:b6:de:e3:1b:a4:e3:c0:d2:68:ed:15:87:d4:d0:
78:06:9f:3a:7d:b7:8e:5b:a9:06:13:e2:99:38:38:02:0d:dc:
82:cd:14:69:86:37:4b:c1:d0:19:e8:0e:a5:43:59:07:fc:77:
df:80:3e:8c:22:eb:fb:d9:77:07:07:3e:a8:f0:2e:83:87:40:
20:02:d7:cf:9a:cd:9b:4e:87:53:86:9b:b0:00:82:55:23:50:
68:11:09:6d:ba:7c:0b:08:ae:1d:85:95:a5:52:a3:f9:2d:90:
78:93:08:7d:80:cc:7d:43:4b:a8:88:b0:ab:f0:d8:83:79:99:
1c:5f:62:d2:d3:dd:d3:a9:4b:d4:b7:68:59:89:25:b5:4f:3d:
6c:17:5f:50:f4:86:21:eb:a9:6f:25:22:3c:9a:65:4d:b5:ef:
bc:bf:66:44:f3:41:a7:75:bc:08:31:3f:b6:ce:18:3c:a3:31:
38:69:9f:23:99:ee:ab:28:49:f8:b4:b0:6e:83:1d:87:45:36:
22:21:d2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:44 2025 by rpki-client on console-fra.rpki-client.org