Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier: 69PNGrB3inCq8Wk3ZAiPCdVRyl8qedObSBUP+T5S/ag=
Subject key identifier: E7:4C:2C:0C:84:21:8B:0D:EB:12:A4:E8:33:D2:40:5A:0D:67:4C:AF
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: 0194BABB6D33261AEBB4486736FE370CA6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 05:00:32 +0000
Manifest this update: Fri 31 Jan 2025 05:00:32 +0000
Manifest next update: Sat 01 Feb 2025 05:00:32 +0000
Files and hashes: 1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=)
2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: Ec69s4zFb3ufppohjS1SIwPks2J1u1okK/bNxH6W6aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:6d:33:26:1a:eb:b4:48:67:36:fe:37:0c:a6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Jan 31 05:00:32 2025 GMT
Not After : Feb 1 05:00:32 2025 GMT
Subject: CN=e74c2c0c84218b0deb12a4e833d2405a0d674caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:8a:98:a3:6a:66:67:f5:73:bd:24:e8:be:
ca:df:c0:05:dc:37:13:db:d2:b8:24:71:d9:3f:4f:
28:88:f3:b2:b9:a2:17:62:c5:42:0b:bd:c9:e6:01:
61:70:ff:a9:13:65:fd:60:c8:6e:1f:69:61:57:18:
54:d8:cd:9c:e6:1e:2f:f5:68:90:d9:98:ec:e0:98:
bd:70:4a:1a:de:c1:ba:29:e2:b6:76:4f:0c:79:a3:
c9:f0:7e:6d:99:01:6e:e3:80:b5:11:0c:cf:47:e2:
90:f0:1b:ce:01:8f:2b:50:f8:f5:4c:60:c3:07:2f:
c5:03:3c:ce:dc:a7:b3:ee:51:b8:86:57:1c:50:4f:
17:87:5e:0f:ae:1b:6f:c0:10:4d:f2:8a:de:64:45:
a7:1a:ad:97:5b:0c:5e:cd:17:c2:2e:fc:75:3a:ba:
b0:fb:07:8e:40:6c:cc:4f:01:a3:7b:1b:9b:54:4e:
27:02:ab:9c:e6:12:8a:31:8d:d1:6c:ef:07:c5:e9:
ce:e9:8b:1a:65:0d:cc:12:b2:1f:14:3c:ee:10:de:
08:60:2a:86:af:ea:9b:dd:56:43:98:47:b3:c1:5f:
7b:2c:dc:e9:8e:b9:d9:a9:7f:37:b7:c1:5e:4a:e3:
28:29:5f:bb:72:a9:3c:48:39:b8:85:fc:e9:64:22:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4C:2C:0C:84:21:8B:0D:EB:12:A4:E8:33:D2:40:5A:0D:67:4C:AF
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:6e:c3:7f:70:20:a8:a6:34:7c:79:3b:b3:eb:79:0e:e0:3d:
b4:5a:e5:d2:01:47:15:3d:9b:3a:c3:5c:37:15:14:fb:38:74:
56:1b:04:e4:10:59:52:16:83:a4:62:c2:f1:ed:8f:2c:6b:bc:
9c:c1:55:e2:7e:9f:f5:46:18:e1:a4:0e:92:70:f3:7b:81:d9:
93:ab:ec:5a:bc:0a:17:d9:76:29:5f:82:8c:33:80:1e:ba:94:
8e:da:cf:70:cb:73:82:d3:1e:14:66:c8:a0:fa:ba:cc:d1:12:
14:e5:62:a6:b5:f3:aa:6e:9d:25:78:12:cd:cc:82:62:34:60:
b4:d8:d2:ea:bb:17:1b:53:07:73:0e:ac:da:0e:b8:b8:f5:7d:
0a:08:3b:28:83:fe:d1:a3:7a:d4:bc:09:2f:da:26:85:4c:9c:
79:28:88:12:7c:1e:29:39:be:99:70:db:87:39:42:db:cd:9d:
3f:95:fb:41:6f:dd:0d:09:a7:5a:38:07:37:84:81:f6:fe:cc:
0f:b3:61:1f:0f:4b:c8:f2:c2:dc:21:26:6b:53:92:02:cb:5e:
fd:29:db:c2:73:19:b2:12:29:ab:16:78:19:d1:ba:53:d0:41:
8a:ae:b2:17:10:3d:a0:44:87:88:df:7e:b2:b2:68:d3:12:ab:
a6:e8:f3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:49 2025 by rpki-client on console-fra.rpki-client.org