Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json)
Hash identifier: hFUEaMCxnw/umXYGY78FSX8TlYBDQTVaO5AA0Sg12qY=
Subject key identifier: 7B:0E:DD:3C:B0:F8:FD:DE:1E:49:22:6C:C9:B1:6E:9F:20:57:F3:DA
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 0194BB6035B46C349EB20702B18C9E435F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
Manifest number: 0DD6
Signing time: Fri 31 Jan 2025 08:00:32 +0000
Manifest this update: Fri 31 Jan 2025 08:00:32 +0000
Manifest next update: Sat 01 Feb 2025 08:00:32 +0000
Files and hashes: 1: Y18PuvKbRb3I33NFZERrmAggZBw.roa (hash: ulNop87p1OPj11wBSOeR/0XOStdPoDj14N+Cgskicec=)
2: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: yOfEJ3gs/YiDt1s8ajasDm2i6nSOaviVL8ldST8bpys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:35:b4:6c:34:9e:b2:07:02:b1:8c:9e:43:5f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Jan 31 08:00:32 2025 GMT
Not After : Feb 1 08:00:32 2025 GMT
Subject: CN=7b0edd3cb0f8fdde1e49226cc9b16e9f2057f3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:4c:24:94:bc:20:26:44:43:da:3d:71:b2:
a5:45:30:e9:3c:d6:96:0f:9c:d7:1d:79:f2:4c:6c:
6d:92:08:4f:6a:03:30:a0:ec:59:66:4a:22:82:13:
e3:49:d5:95:08:b1:0c:bf:11:9c:12:55:7a:93:5e:
53:c1:29:d5:d0:11:c7:ac:ce:d8:ef:73:fa:4a:00:
70:26:9d:d0:d3:ee:a6:c3:19:94:3c:c3:7c:e5:54:
ad:25:89:91:ad:fc:b3:18:2c:fc:4c:b9:db:8e:56:
d7:f6:c7:0a:3b:de:64:bc:7f:60:4b:8b:fa:27:1b:
07:02:11:12:a3:86:a8:98:81:e5:ca:04:7d:b8:0f:
09:9b:6b:12:13:ab:9c:4b:d1:63:ee:b9:d9:cd:6e:
ef:09:b2:75:7c:d2:7f:59:7f:b8:04:11:8a:52:49:
0e:50:64:33:83:86:5b:1f:b8:0a:20:0e:18:ea:9e:
6a:a5:47:46:42:8d:ea:c4:5a:6d:35:c1:e3:23:17:
05:c9:d3:2e:9c:75:64:8e:fe:f1:39:e6:14:18:57:
9e:5e:a8:74:0d:3e:92:ca:6a:a6:24:19:bb:21:2a:
d9:b9:26:ea:c0:c6:4f:3c:4d:0d:24:f9:28:d5:38:
46:d2:d9:78:6d:3d:1a:f3:28:fd:20:cd:f1:dc:19:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:DD:3C:B0:F8:FD:DE:1E:49:22:6C:C9:B1:6E:9F:20:57:F3:DA
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:65:e8:22:55:cb:a2:da:38:63:7c:3d:03:c3:f1:02:22:ef:
0d:7a:cf:83:23:a6:18:ec:55:38:ed:c7:ed:a7:74:80:06:8b:
d3:bd:7e:2f:19:e2:71:a3:79:ba:e2:89:80:74:e5:3b:51:01:
30:4c:f5:10:60:b4:49:e6:6a:4b:c2:be:74:fa:01:c6:a0:0a:
12:06:ec:28:44:53:d8:43:0b:e0:fc:55:1b:ed:7c:34:0b:51:
29:4e:95:6f:bd:83:6a:e0:39:fc:08:78:cc:bc:6d:e5:55:b1:
42:0d:d2:d0:c8:b9:9b:1d:f8:28:51:1b:39:6c:f6:28:1b:7c:
26:88:bf:60:a5:6d:d4:ed:31:ef:23:45:3b:bc:f9:7d:e5:70:
27:72:05:66:f0:f8:a3:8f:f6:af:ad:cf:18:51:c2:a9:9c:a7:
6e:12:ee:30:8a:b6:98:d8:d7:db:e8:80:cf:df:1f:3d:92:68:
45:2a:5b:85:29:ee:b3:46:5f:97:6b:d7:1a:6d:f6:66:5e:41:
da:ed:e2:68:f6:79:82:61:7a:93:ff:99:1e:71:95:6f:be:19:
b4:a0:95:f5:0b:cd:dd:f3:06:89:ab:9c:dd:d9:e4:48:14:52:
14:b5:96:a4:e8:32:05:1c:ad:dc:58:25:da:e1:80:39:a2:dc:
be:c2:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:09 2025 by rpki-client on console-fra.rpki-client.org