Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
File: QpXD7wDP_s4vcbYZkcbG09pJwRA.mft (raw, json)
Hash identifier: GETEoip+bBzO2YVwNnMgC4JfClXAHueneXBaSFO5N2k=
Subject key identifier: AF:08:47:26:69:4E:F4:D9:F6:F4:DF:62:8D:F1:F9:D2:1F:BB:5A:BB
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 0194BB29688063338ED4E17A3718CC19FA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
Manifest number: 0113
Signing time: Fri 31 Jan 2025 07:00:40 +0000
Manifest this update: Fri 31 Jan 2025 07:00:40 +0000
Manifest next update: Sat 01 Feb 2025 07:00:40 +0000
Files and hashes: 1: QpXD7wDP_s4vcbYZkcbG09pJwRA.crl (hash: qqce3MDFQGWy8/wNxd6IbahE4pCmHj21CZYAcN2NhJ4=)
2: SGxwV5wEplv2xVzvW6jMMH0Hi4k.roa (hash: p0OjWToBEfnkzQw/yjz+AdE3+kwiUg0q1pmwBXRywUk=)
3: eC0FosjTUlbZcnWZVWIH359Lcd8.roa (hash: qDWdvtB5VIYnR+iPBmUfW1ayU92Br+j2BjK1vo1fUg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:68:80:63:33:8e:d4:e1:7a:37:18:cc:19:fa:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Jan 31 07:00:40 2025 GMT
Not After : Feb 1 07:00:40 2025 GMT
Subject: CN=af084726694ef4d9f6f4df628df1f9d21fbb5abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:6c:2d:3b:13:df:7d:fa:31:58:eb:6e:71:
15:79:1e:25:29:d9:f7:53:17:59:a5:87:8d:36:9f:
23:ab:7a:67:db:da:a6:56:db:84:20:f6:b1:20:b3:
9f:4c:ae:c0:3c:05:36:79:ee:50:3b:12:e9:ba:d8:
bc:49:9d:69:80:49:fd:c5:60:2f:1d:95:08:c3:b7:
03:28:95:74:3c:a8:76:aa:08:5f:36:6a:bd:b6:92:
eb:28:82:5d:a3:80:5c:4d:19:a3:a5:af:f3:5f:ff:
6c:b9:90:3c:16:ef:f8:93:fe:c4:a0:4d:73:3b:22:
86:ce:01:75:47:38:e4:70:7c:07:b2:8f:4e:6a:8f:
bc:00:36:cd:83:cf:94:5b:19:51:6e:65:6d:4e:82:
0f:59:75:b0:e6:94:8d:b5:d7:62:6b:21:60:52:d4:
05:1e:e3:ab:92:a4:be:b2:be:04:fb:7a:7f:f1:39:
44:e3:6f:c9:67:a7:76:40:43:14:90:fc:62:25:d0:
3c:0b:e3:fe:d8:66:75:2a:31:50:3b:62:6d:66:7b:
1f:a4:58:5e:7d:41:80:83:3e:0f:5c:99:8e:99:cf:
2a:7b:a7:e4:1d:99:18:a5:35:37:da:eb:68:2d:05:
ce:b1:d4:77:bb:a2:46:20:19:3e:e4:85:ac:77:7e:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:08:47:26:69:4E:F4:D9:F6:F4:DF:62:8D:F1:F9:D2:1F:BB:5A:BB
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a5:63:19:e7:18:fb:aa:ae:22:f6:9e:8b:c4:a7:81:7c:2b:
66:69:35:8d:64:1d:f8:f3:91:df:33:3b:97:f7:0f:5b:e3:45:
e1:ea:59:a1:a3:ad:fd:dd:35:60:06:27:1a:f5:75:7c:2b:0e:
66:3b:0f:cc:23:26:c9:64:ee:04:c1:73:52:4d:0d:59:93:96:
43:14:2b:03:66:97:a2:72:f7:b8:9c:68:28:08:20:3e:80:85:
e7:c7:e3:cd:fb:ea:02:10:54:81:1a:79:4d:41:e4:1a:f1:6e:
76:c0:43:f9:33:30:d4:2b:9c:0a:ac:77:7b:cf:40:95:2b:24:
e2:d3:6a:91:8a:43:88:e2:b3:c4:fc:e1:40:39:bc:d3:41:67:
40:bc:ba:51:ab:d7:f8:ee:7b:2b:04:6d:c1:7c:8f:b2:f4:aa:
2a:87:6b:16:0f:79:dc:d1:00:4c:59:34:37:4b:95:35:b6:57:
6e:d6:19:6f:93:8e:f4:6c:0f:ba:6a:ba:46:47:44:5b:60:30:
2e:fd:b8:80:76:13:fb:13:87:14:e4:a9:50:3d:9f:c7:8a:1c:
7c:0d:3b:b9:30:dc:e9:25:cf:24:4c:d6:e8:1a:cb:f1:91:70:
e8:c5:11:18:e3:21:f7:3f:8f:b0:a5:f4:62:9c:8d:af:1a:e5:
dd:37:97:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:59 2025 by rpki-client on console-fra.rpki-client.org