Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
File: QWUyQgoh5CuK0w2iTr9DR96V7zU.mft (raw, json)
Hash identifier: bEW8ywYhnRyyXx0FgF1ERZDVpsu6o0xg8VxJjuGigiQ=
Subject key identifier: 38:B9:D1:2C:EB:D4:EF:A4:2D:D6:2D:A3:73:42:FC:96:D4:F6:C2:1E
Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
Certificate issuer: /CN=416532420a21e42b8ad30da24ebf4347de95ef35
Certificate serial: 0194BB5FD2C1325A4DA7EC05128C3E7B6BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
Manifest number: 0F32
Signing time: Fri 31 Jan 2025 08:00:06 +0000
Manifest this update: Fri 31 Jan 2025 08:00:06 +0000
Manifest next update: Sat 01 Feb 2025 08:00:06 +0000
Files and hashes: 1: QWUyQgoh5CuK0w2iTr9DR96V7zU.crl (hash: gZWwsA+lxx9H1IlfD4Yf4eYOceUdjIo+/XCZ6LZI7m4=)
2: eV_HY0yWE8mOE1MRDnB0YcYTccg.roa (hash: 5xM8UD0IporPo6ojXDnvNcFP3vOdI9fe0xTb6m2cal0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:d2:c1:32:5a:4d:a7:ec:05:12:8c:3e:7b:6b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35
Validity
Not Before: Jan 31 08:00:06 2025 GMT
Not After : Feb 1 08:00:06 2025 GMT
Subject: CN=38b9d12cebd4efa42dd62da37342fc96d4f6c21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:d1:d8:15:ea:d3:dc:1d:f5:31:3d:70:f0:
2f:8a:ca:2e:fd:03:01:b1:5d:43:a9:cb:0f:67:ef:
f6:74:58:60:d2:d9:6c:d1:7f:0c:8a:76:bf:91:5c:
3c:38:d0:83:1e:a2:d3:5a:fb:a9:82:eb:f8:7f:c2:
5a:f7:54:4c:34:cb:b1:31:2c:e8:72:0c:dc:36:40:
df:07:96:4b:8c:1e:90:7f:cf:2e:f4:07:92:6c:6c:
c2:c3:c3:47:d1:8d:89:6b:24:11:75:9d:c6:4c:60:
51:31:4f:6f:43:ad:93:94:f9:54:2e:02:cc:2d:f7:
c2:5b:2c:b0:25:25:b8:24:68:28:90:6b:43:09:12:
84:91:45:54:1b:23:ba:8e:d5:4c:b9:b8:a1:f5:c0:
a7:dc:ae:e4:6e:78:16:56:cd:54:b8:cf:93:c0:bc:
28:84:b7:62:69:80:9b:2d:21:cb:3e:9a:2f:d3:1e:
40:de:67:59:25:94:00:20:9a:e6:43:72:d6:f6:b7:
ea:4b:fa:4f:17:dc:9c:d3:9f:f9:6a:84:f0:8b:d4:
46:b5:41:11:79:9f:08:fe:08:22:f5:e3:5c:25:43:
e1:b7:21:0e:7c:f2:09:bc:b4:92:61:13:c8:6d:2d:
26:fd:e0:72:95:c9:1f:97:fe:b9:fd:02:1a:3c:65:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B9:D1:2C:EB:D4:EF:A4:2D:D6:2D:A3:73:42:FC:96:D4:F6:C2:1E
X509v3 Authority Key Identifier:
keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ff:f0:45:c4:7b:24:56:bc:db:7a:a2:6e:50:3c:7d:3a:79:
64:98:f7:0e:b2:47:de:83:48:d0:4a:bf:ce:01:d3:d4:03:f1:
7d:5b:eb:e0:e6:a5:de:a4:90:dc:68:e4:4d:61:8b:44:b3:ff:
2e:e7:08:42:78:4d:9c:44:d6:e0:61:08:92:88:06:7e:57:ee:
d3:c1:b0:d2:47:89:15:c0:08:01:c8:ce:02:f4:50:91:d8:e8:
38:85:79:61:7d:5f:e1:7c:a4:ad:a0:1b:8d:f0:11:14:6c:7c:
bd:fb:c0:9e:23:1f:62:88:a9:50:f7:1d:68:36:85:b3:e1:d1:
8f:28:e0:ff:7a:bb:d1:db:08:1f:e8:c0:5e:f6:b4:9a:d4:32:
40:50:d9:88:e6:2c:73:97:ba:de:ca:ec:bd:df:86:0f:ee:96:
35:52:19:76:9c:b2:08:c1:6c:cd:5f:ec:1a:88:9f:10:58:a9:
14:b9:5a:eb:96:b7:d2:6f:ea:e5:15:96:8d:3b:b8:22:46:a3:
01:8c:35:ab:a0:da:14:17:ba:b8:27:46:7e:29:2a:35:0a:06:
67:6e:51:ff:7a:3a:ed:9c:82:1a:58:32:01:fa:b8:f1:cb:5d:
38:52:16:ec:f0:80:0b:2c:76:47:4c:19:f3:6e:d9:78:3f:38:
a3:10:36:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:26 2025 by rpki-client on console-fra.rpki-client.org