Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
File: 1QylITQTxwqeg7R6gqfEV53UwZY.mft (raw, json)
Hash identifier: 8lyi4yDASzkQak2iXQJqxTareExU7PeeZqC36dHp6oo=
Subject key identifier: A0:C9:89:33:3C:45:5F:A1:77:1D:C8:F4:3E:B8:B7:AD:6E:88:00:65
Authority key identifier: D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
Certificate issuer: /CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Certificate serial: 0194BAF27AAA21D88A83632714A54BE5F9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
Manifest number: 0676
Signing time: Fri 31 Jan 2025 06:00:40 +0000
Manifest this update: Fri 31 Jan 2025 06:00:40 +0000
Manifest next update: Sat 01 Feb 2025 06:00:40 +0000
Files and hashes: 1: 1QylITQTxwqeg7R6gqfEV53UwZY.crl (hash: gW3vCuQ630kKvQAMTFL/rfkzMvZjj1S0b8xCxuNERXk=)
2: _qLxIOi7VmVEBLaS1YixdxXiwBA.roa (hash: 0p2ssxxIHIoQau1gQDFigWlgz8Te2D1iMIcwAH/P3eQ=)
3: xxT8grXnmq40HsKuG1Zwf8qr5yM.roa (hash: Q9jgD1xIS5+5fspqYSArTtS7aFho5oJiLf020/LBelY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:7a:aa:21:d8:8a:83:63:27:14:a5:4b:e5:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Validity
Not Before: Jan 31 06:00:40 2025 GMT
Not After : Feb 1 06:00:40 2025 GMT
Subject: CN=a0c989333c455fa1771dc8f43eb8b7ad6e880065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:00:9b:52:a9:8a:b0:f3:d6:70:b7:6b:fc:
f8:25:bc:76:74:85:42:06:a5:af:3c:6d:36:be:80:
84:45:0a:18:c2:13:00:13:e9:a8:a4:0d:44:88:95:
76:06:1a:00:2d:3b:72:6a:cf:b5:c8:9a:de:d6:fa:
95:56:e9:7f:6d:8a:82:f1:b9:97:77:c7:88:be:41:
87:f2:ea:57:57:2b:fb:39:15:bd:10:4c:f4:09:0a:
16:27:51:49:e4:31:2c:0e:bd:b0:35:a0:ae:7b:18:
ce:a8:e0:07:b0:60:55:ce:4b:b9:97:68:20:7d:e8:
14:d2:13:f7:0a:03:00:58:39:01:46:6c:c8:cd:b7:
6c:d9:5e:66:0d:58:78:4f:11:69:05:2b:d8:29:74:
1a:80:5a:2b:17:51:b6:20:5e:b8:33:db:4a:a1:4e:
0c:b5:aa:dc:61:6e:3e:54:b8:35:c1:7a:e1:54:7e:
c8:af:e9:d0:2c:19:a3:e4:7e:cc:cd:36:26:cc:d3:
05:51:3a:00:8b:c7:50:d4:ba:7f:17:ce:a3:fc:6f:
29:1d:57:c4:03:8d:84:f6:3b:93:b4:1b:78:09:20:
6a:c9:d7:68:93:0d:24:f7:cd:28:41:8c:15:c2:50:
7f:ea:98:68:c8:5c:c4:8e:bb:a5:cb:d0:1e:da:f6:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C9:89:33:3C:45:5F:A1:77:1D:C8:F4:3E:B8:B7:AD:6E:88:00:65
X509v3 Authority Key Identifier:
keyid:D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:65:08:e4:7a:e7:8e:3d:c2:9f:90:99:1a:5d:24:84:54:0e:
29:50:6d:01:31:fd:b9:f2:3d:a5:84:d2:0b:c5:82:38:01:e4:
06:d8:08:23:e5:6a:20:f8:68:ee:cb:0d:8e:6d:70:26:e1:fc:
f0:d0:78:fc:ff:76:1d:ca:59:14:d9:1c:4e:dd:b2:fc:00:c6:
f4:6f:b7:31:51:24:91:a0:4d:98:54:77:a1:75:5b:19:5d:f5:
5f:c6:70:b0:54:03:3a:c6:9a:1d:9a:4f:af:14:97:a1:f2:29:
a5:50:77:c6:65:b5:f8:d9:19:03:e8:35:22:71:3f:34:43:55:
54:7b:d8:88:bb:4b:05:8d:3b:65:6b:4d:9b:72:7f:af:b3:01:
43:c4:35:9f:e2:45:fb:41:fe:4e:31:bd:a0:c1:5f:20:df:d7:
4a:67:38:f1:14:e4:47:8b:09:95:d5:81:b2:66:26:8b:fc:34:
68:24:d3:61:0c:f6:4a:c7:06:19:6d:f6:8c:8d:26:23:26:3a:
27:04:0b:e8:e2:87:1c:96:d1:ea:ba:62:02:a2:01:e2:df:36:
ac:38:b5:be:db:16:c8:33:c1:33:16:96:7b:e6:20:a1:15:c0:
b9:bf:70:b3:6a:20:68:3d:da:b0:27:c9:0b:a6:a8:c6:bb:36:
14:7f:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:12 2025 by rpki-client on console-fra.rpki-client.org