Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
File: qiEQS093IiTRGFaiTt-UZqhE0mw.mft (raw, json)
Hash identifier: o1jYb7imI2qKI27+PzJXM7emEK8RZbZSLlA6I+I4ZOA=
Subject key identifier: 28:01:E0:35:C2:8F:BE:36:A4:0B:B2:55:46:6A:C3:AB:E5:DA:2E:78
Authority key identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
Certificate issuer: /CN=aa21104b4f772224d11856a24edf9466a844d26c
Certificate serial: 0194BC3C4772DCD4FFA5703690AD35D37568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
Manifest number: 0824
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: C9Uc2-MMZLc56ntn-MTlSYOC9E8.roa (hash: 7Vks3Vs+iWpgcZieiS4e05rACvsjBFcyY3uhYDWshE0=)
2: qiEQS093IiTRGFaiTt-UZqhE0mw.crl (hash: kfeCQoWeqhH++WB/H8F+3MC5cFu3VnAl1xCf4j2SLvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:47:72:dc:d4:ff:a5:70:36:90:ad:35:d3:75:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa21104b4f772224d11856a24edf9466a844d26c
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=2801e035c28fbe36a40bb255466ac3abe5da2e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:15:ed:e5:80:b9:03:35:56:c8:26:ac:e5:
93:96:3c:bc:16:3f:be:20:3f:0a:dd:92:cb:0c:73:
15:27:a8:56:6d:c3:be:b0:e4:fa:5a:66:fd:ac:f1:
34:9c:21:c5:38:ee:c2:c0:00:df:43:41:04:34:16:
dd:62:9c:81:19:c5:70:e7:a9:e3:47:47:17:60:30:
1e:04:37:27:32:92:ca:33:5e:2c:59:34:85:e3:a4:
96:30:6e:60:43:cd:44:c1:71:19:92:e0:ab:74:8e:
7c:89:35:cd:f1:4a:3a:2c:df:17:ac:86:32:cf:71:
8b:28:28:0a:46:10:79:fd:61:14:7f:76:bd:f6:47:
d9:ce:2d:cf:b0:07:ad:f0:ea:e4:78:f2:73:77:c9:
9b:24:25:66:90:2c:06:87:06:f7:3a:e9:a5:02:bf:
5e:e3:88:90:09:72:88:c5:a2:19:24:0a:45:2d:1c:
96:e9:59:42:23:ab:49:5b:73:34:21:92:ed:07:c9:
00:bd:41:fb:82:38:38:ed:83:5b:09:35:85:6a:ea:
8e:8e:d1:f8:be:d4:1a:16:ec:0c:8f:ff:f8:0e:51:
bb:af:59:0e:02:29:f6:5f:28:a6:00:bf:cd:2a:99:
14:c4:2f:a8:88:eb:96:7e:98:f1:b7:85:6a:36:52:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:E0:35:C2:8F:BE:36:A4:0B:B2:55:46:6A:C3:AB:E5:DA:2E:78
X509v3 Authority Key Identifier:
keyid:AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:84:f5:92:ef:50:b1:72:78:95:c1:8e:90:cb:cd:a1:77:2c:
f9:4b:1d:6c:9e:f7:af:ed:72:ed:96:e2:75:c5:8f:7c:b8:c5:
2e:7c:bb:8e:e7:52:68:05:88:ea:83:d5:80:43:49:54:03:95:
dc:7c:f4:e1:a6:82:43:b6:40:ab:62:19:70:89:db:e5:d2:ac:
cd:79:d7:d8:c3:00:d6:63:95:6a:44:2c:0d:28:79:27:83:56:
7d:c5:e5:21:10:be:7d:07:b5:c3:71:0f:98:70:ef:b3:6d:7a:
ca:04:07:0c:8f:2a:68:f6:da:72:b6:5e:f4:20:b8:01:f0:f1:
4b:93:27:16:3a:19:38:f9:cd:9c:3d:6f:52:63:eb:b2:d5:89:
35:ef:84:23:d1:24:83:bf:85:a5:e2:92:9a:5f:50:ef:75:b9:
bb:92:04:47:24:69:a1:b2:36:5e:f0:4d:0a:b6:2a:6b:55:38:
9b:5a:f2:d1:2d:70:c7:31:db:dd:bf:fc:29:36:6e:d8:0f:e2:
36:56:5e:1a:2e:74:58:6b:8d:a2:f8:0f:18:1b:db:11:93:63:
42:11:7e:79:0d:66:98:c2:3c:c2:d2:ce:22:93:19:8f:53:cf:
4d:a6:bc:47:af:2f:3b:e7:95:22:19:6f:b8:0d:d5:bc:29:0f:
0b:b7:4b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:14 2025 by rpki-client on console-fra.rpki-client.org