Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier: e17DIqfDGl7ZKdglsVFsNMhx38gxmvrSVxI/T4S2BPE=
Subject key identifier: 53:BA:55:B0:B8:4F:2C:6A:81:35:1F:53:4E:12:FC:92:32:9F:8F:ED
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 0194BA844978D2FFB3D47678A8614227B30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number: 0AB6
Signing time: Fri 31 Jan 2025 04:00:19 +0000
Manifest this update: Fri 31 Jan 2025 04:00:19 +0000
Manifest next update: Sat 01 Feb 2025 04:00:19 +0000
Files and hashes: 1: PIFbvqZsTCVITsXCVJp94hRSd40.roa (hash: cQLvhNHJgfoGCqvXulMMhioH9SATxRMjiGUXlSo7XxA=)
2: oHZuZKLdIqX9TZjhMfxVImyzxr8.roa (hash: 3RagyetzMFETxC4N1pLRK9iNlu+vVXTBppJLVU5AMlY=)
3: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: G4KzBQZr8gSIf5700rkrXsg7CdSMhjm36cV1W5cydZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:49:78:d2:ff:b3:d4:76:78:a8:61:42:27:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Jan 31 04:00:19 2025 GMT
Not After : Feb 1 04:00:19 2025 GMT
Subject: CN=53ba55b0b84f2c6a81351f534e12fc92329f8fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:07:ae:9b:28:34:49:53:00:c5:1d:a1:db:
46:77:54:38:27:42:33:52:9f:38:4d:44:aa:95:53:
f1:b8:8b:61:65:fe:9e:00:10:05:03:45:41:07:de:
fc:2f:2c:0f:35:3b:55:ae:6d:69:9d:8f:75:fa:fd:
6c:71:12:8a:bb:bf:9f:f8:b6:00:fa:1b:31:2e:02:
91:18:65:c0:da:f0:ee:f0:6a:15:eb:8a:f1:10:ff:
06:5d:d0:3e:28:d7:35:af:8c:1d:56:98:c8:e5:59:
b2:59:50:66:46:ee:1d:20:54:1b:0a:24:2d:c5:c8:
d0:16:9c:a9:ba:e3:5c:fe:3a:18:ea:f2:e4:3c:31:
75:f2:5f:fe:35:50:40:9f:50:29:10:fb:97:30:e4:
3a:d5:2d:24:da:01:3d:8f:d0:63:cb:42:d1:f0:c6:
25:f4:3a:08:bf:df:cf:6d:5f:f8:a5:43:d2:09:aa:
14:a5:d2:54:6e:88:6f:2e:a2:f2:20:19:0d:d5:41:
b5:37:3a:ab:ca:3f:fe:8f:3f:4c:3d:bb:ae:85:d5:
dd:d0:27:6d:7c:a3:5c:ec:ff:9c:77:19:25:0d:5f:
28:11:94:66:bb:56:5f:33:7a:ee:ab:d0:a0:36:00:
9d:c1:08:c5:cd:06:61:31:a1:0f:93:7a:5b:fa:4c:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BA:55:B0:B8:4F:2C:6A:81:35:1F:53:4E:12:FC:92:32:9F:8F:ED
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:01:6a:25:bb:d7:e3:e5:a6:6b:eb:f6:7a:f8:5b:c3:2e:3f:
58:98:1e:f3:36:43:c0:26:33:be:05:38:33:b5:b8:36:43:9c:
e6:48:35:43:47:a4:d9:ac:f9:b9:6c:f0:48:ac:d4:61:8a:aa:
d4:36:a9:a3:21:7a:86:46:ea:95:81:f6:8c:fc:aa:df:1a:c6:
85:ba:c5:09:eb:ef:41:1c:41:95:6f:56:ca:77:cd:06:25:50:
31:48:2c:57:e3:e3:2f:0a:03:59:e0:36:8b:75:da:8d:21:c7:
d5:42:a8:2f:1f:6f:c2:4b:79:cf:6a:d6:f7:9e:ab:df:7b:b8:
d9:4d:ae:41:16:00:f3:4a:96:10:cd:9a:80:c5:bd:2e:81:b4:
89:c3:84:b8:28:2d:d3:36:bc:77:ee:83:75:1c:c6:36:c0:fe:
db:48:d0:5b:62:a0:9c:7a:9c:96:21:56:0d:59:c2:7f:6e:fc:
bb:d2:96:7f:20:ed:ca:13:f7:5c:79:ad:c9:4b:5b:37:c7:a4:
a7:e7:3a:39:ab:8b:c9:6a:b8:09:95:b2:5f:38:4b:6d:65:bf:
2b:b4:23:49:cf:20:b3:28:f1:c2:e0:05:63:1d:03:3d:90:98:
4c:92:59:e1:f9:fd:fa:81:77:7e:fd:50:31:43:cf:fa:78:2f:
92:a8:ed:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:33 2025 by rpki-client on console-fra.rpki-client.org