Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier: rzBOFcuPUx3YdkxMAH0qYX1HbB6VPpSAID8ml5O8qF8=
Subject key identifier: D3:2B:25:8D:17:E8:18:26:87:15:F7:20:8B:DF:98:6D:4B:90:32:A1
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 0194BB5FFB691042E72993A1CA9BF28085F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number: 07B3
Signing time: Fri 31 Jan 2025 08:00:17 +0000
Manifest this update: Fri 31 Jan 2025 08:00:17 +0000
Manifest next update: Sat 01 Feb 2025 08:00:17 +0000
Files and hashes: 1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=)
2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: PdjUMJF72ClZBsBG+ynWK+jX999ZeeQRgpZsFDccWg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:fb:69:10:42:e7:29:93:a1:ca:9b:f2:80:85:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: Jan 31 08:00:17 2025 GMT
Not After : Feb 1 08:00:17 2025 GMT
Subject: CN=d32b258d17e818268715f7208bdf986d4b9032a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:6e:c2:39:2d:eb:be:5d:f7:ea:ed:29:48:
48:47:aa:f7:c3:da:dd:4a:87:fb:84:80:03:49:ac:
8b:9e:2d:d4:27:f9:90:40:6d:12:8c:7b:6e:52:99:
f5:6c:64:f2:99:23:d9:7b:3f:43:fa:55:a1:a2:ef:
2a:c0:e7:65:36:dd:b1:30:65:67:de:99:1f:21:45:
65:a4:6d:4b:ea:70:13:f4:9b:03:46:de:9e:7e:7c:
d6:91:c6:27:27:f9:a3:5d:60:ca:9c:42:cf:af:38:
36:cd:c6:16:af:0b:8a:21:7f:3e:10:bb:68:41:59:
e7:69:3a:b3:70:45:81:64:4c:17:6b:45:c1:bf:3b:
2d:29:4a:b0:44:73:f3:8a:66:4f:35:4d:f5:33:7e:
3f:e0:73:07:2c:80:09:48:9f:0a:90:07:c9:df:bf:
64:79:1b:50:7e:7f:fb:4d:28:12:7c:1f:37:08:79:
bc:52:16:fa:4e:fc:ea:df:32:ef:6c:7a:ba:44:1f:
e4:8c:6d:ab:12:46:fd:f6:27:48:4b:ec:a2:39:35:
e3:df:0d:96:f0:5f:0b:16:6c:07:fd:06:62:b3:2e:
8d:87:13:ba:9a:2c:ca:a1:36:0c:7b:10:fe:2a:04:
72:13:c8:3d:b5:c2:0f:b5:e0:0e:ad:c1:d6:a2:2f:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2B:25:8D:17:E8:18:26:87:15:F7:20:8B:DF:98:6D:4B:90:32:A1
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:db:e7:5d:58:ee:0b:3a:4f:ee:91:d4:58:34:a1:10:f6:2b:
45:3a:d5:e4:11:d7:4c:4d:5f:79:ca:29:5c:4d:3c:6e:94:88:
2e:79:3b:96:18:ff:82:a8:6a:c1:92:69:5d:8e:fd:ce:86:c9:
64:ba:57:48:88:2a:e1:0d:3a:0d:a3:cc:2f:86:cd:c1:ba:1c:
b0:6e:7d:d2:bf:01:fa:af:a6:46:24:11:63:c3:f3:a6:2d:03:
62:52:19:d5:8a:55:a7:6b:b3:d7:77:3b:f8:95:62:04:0e:58:
68:b0:5d:c8:3d:b6:3c:4e:1e:21:8b:17:02:04:71:a8:e9:0d:
08:4a:71:b9:2c:1b:fa:13:eb:9f:db:09:4a:16:f3:88:b3:48:
0d:03:ba:2f:c7:b8:0e:97:9b:dc:52:96:ea:2f:a6:c1:6c:63:
66:2d:8f:2f:29:30:3d:35:1c:ef:42:97:69:d9:78:a4:df:1e:
91:ad:50:b1:75:14:17:70:80:1d:d1:1d:82:16:d8:94:cd:d0:
2c:8a:46:a9:a4:4d:34:0a:a2:30:be:67:1d:6e:4e:e7:6e:99:
11:6d:4b:8a:eb:3c:d0:66:b2:03:e5:85:91:f5:5e:41:57:0e:
c8:4d:75:32:71:cb:37:b0:98:92:9f:e2:ef:32:10:db:c3:1c:
c8:d5:2e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:26 2025 by rpki-client on console-fra.rpki-client.org