Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
File: q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft (raw, json)
Hash identifier: u3vuOK+qBStd5M6znZ1tXnLCMa/aCZVfa8smWMSsJqU=
Subject key identifier: 44:8D:50:BD:C0:3D:DE:B1:D0:0A:B7:71:3A:90:01:87:CA:91:E3:C4
Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
Certificate issuer: /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Certificate serial: 0194BB5FFF11B55B2E1999C0C20B6AD71DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
Manifest number: 0890
Signing time: Fri 31 Jan 2025 08:00:18 +0000
Manifest this update: Fri 31 Jan 2025 08:00:18 +0000
Manifest next update: Sat 01 Feb 2025 08:00:18 +0000
Files and hashes: 1: FHDLI9bYbXNNEX1xPBsLptloCmQ.roa (hash: dUgxIYtDxdIs2KAx8ay48gmhZsqwqDo5fBVtBRGq/3A=)
2: U1QXfN2MXshd8Djc_hdqsmBdFPo.roa (hash: yLuh9QxnBO1XIHCjApfjKWmyK37siChSWEQyScihraU=)
3: q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl (hash: LZEljj4lSSFIaBWeXFl2gCSllYAH4kdZJwfLxj0nuVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:ff:11:b5:5b:2e:19:99:c0:c2:0b:6a:d7:1d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Validity
Not Before: Jan 31 08:00:18 2025 GMT
Not After : Feb 1 08:00:18 2025 GMT
Subject: CN=448d50bdc03ddeb1d00ab7713a900187ca91e3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:ab:6e:f9:1a:7a:8d:37:11:6a:1f:41:3e:
fa:15:76:7c:1c:f7:31:8f:58:55:a8:bc:00:33:1e:
17:50:1e:2e:64:f2:fd:c8:22:e1:16:16:e5:78:cd:
85:ac:8f:ac:0b:f6:0e:97:4b:d1:11:ab:f4:81:1e:
62:b2:41:61:5c:43:c0:fc:6e:b2:46:dc:df:9f:88:
64:92:63:c9:f7:a5:1f:6c:24:d4:e4:21:6a:18:15:
2e:f0:21:73:cf:2c:b4:5e:94:2c:5a:be:95:fd:9b:
30:b5:93:60:d8:0b:ff:7d:28:68:68:81:eb:92:a1:
28:60:90:4e:62:41:26:02:a4:1c:35:d4:49:51:b9:
98:6b:c0:cf:f0:c0:a0:02:c1:82:ee:f3:10:5e:38:
22:e8:12:70:d9:42:92:28:f4:a0:dd:9b:26:72:81:
46:0f:27:07:fe:24:7e:9d:e1:cb:a9:13:3e:f1:57:
6c:1d:aa:62:ef:8c:18:96:4a:b3:83:b2:80:9d:21:
0b:93:96:fb:33:b4:cb:13:6d:e3:82:74:b2:23:24:
e1:4a:77:16:02:49:90:f4:f9:5a:e1:b1:d8:39:83:
5e:19:04:d5:a5:2e:05:62:a5:2d:a0:db:98:ad:33:
38:75:36:5a:6b:0f:ab:10:45:11:52:c5:a6:f8:1a:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8D:50:BD:C0:3D:DE:B1:D0:0A:B7:71:3A:90:01:87:CA:91:E3:C4
X509v3 Authority Key Identifier:
keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a9:5b:dc:af:31:9d:6a:77:c1:28:57:bd:f1:52:a3:7a:83:
6a:35:a8:31:a7:60:d3:fb:28:aa:d8:65:7e:40:96:ca:fa:fa:
d3:fe:07:fc:d3:94:07:b3:a8:c1:92:e3:e5:70:50:8f:99:c7:
dd:46:16:8c:89:da:9e:46:3f:ed:11:80:f0:7c:d1:2c:cb:17:
9e:f5:39:ba:d1:59:1c:8b:ae:e9:1c:80:72:98:b0:b6:fa:f0:
43:ca:f5:11:98:bb:5c:15:9e:c2:36:45:d6:e6:b1:e2:98:3b:
e6:aa:13:90:34:77:5f:08:5f:3e:d1:d7:af:9e:d9:5e:2d:25:
bd:f3:b1:84:ce:5b:0c:f4:68:a8:83:71:26:50:49:ca:99:23:
2b:c4:b7:05:b8:41:3a:37:34:86:55:02:fd:03:8e:f5:76:18:
a1:d8:e1:f2:4b:4f:61:1e:d0:fa:58:aa:b7:5e:5a:8a:f8:32:
e5:b6:d7:97:b1:de:05:ac:18:97:eb:4e:b0:3c:0e:2b:f7:ba:
7d:d4:06:6b:5f:3c:bb:87:eb:ff:31:c3:14:c0:5f:95:a0:18:
bf:58:10:4e:4e:5c:15:fe:53:df:71:07:c2:aa:c0:10:d4:83:
7d:7f:65:89:86:24:81:25:56:ca:0c:ad:86:56:94:a0:10:48:
45:35:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:17 2025 by rpki-client on console-fra.rpki-client.org