Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
File: QyB1WWVFCTwGpvz4-rV7GS53kKo.mft (raw, json)
Hash identifier: 8Ppod2g+5vHYsb48RzUu8usur5HgZFz5gK87DI2gYeU=
Subject key identifier: B6:D7:52:68:91:56:CC:23:33:AE:E3:DF:0D:C1:35:57:E3:39:05:DC
Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
Certificate issuer: /CN=432075596545093c06a6fcf8fab57b192e7790aa
Certificate serial: 0194BABB5D994EB949740ABE5888B5BA4432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:28 +0000
Manifest this update: Fri 31 Jan 2025 05:00:28 +0000
Manifest next update: Sat 01 Feb 2025 05:00:28 +0000
Files and hashes: 1: QyB1WWVFCTwGpvz4-rV7GS53kKo.crl (hash: 7OmjSGDzNAbx5m/PcrgVMSCbnnzICdkFjAoqUaEYuk4=)
2: Y6QTaw-FjofB_OhkxIXlcm9P4-I.roa (hash: 4Yb+dRFpkkMPfeWzASwoM5NrRtcERhjg7Yl8jCZxXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:5d:99:4e:b9:49:74:0a:be:58:88:b5:ba:44:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa
Validity
Not Before: Jan 31 05:00:28 2025 GMT
Not After : Feb 1 05:00:28 2025 GMT
Subject: CN=b6d752689156cc2333aee3df0dc13557e33905dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:d9:77:c4:99:0b:9a:6d:11:14:30:d6:eb:
c5:8c:39:53:49:88:0a:07:cd:75:c9:6e:9b:27:bc:
b1:2b:ea:7b:07:e2:0a:a8:c6:95:8c:05:ac:8a:37:
61:11:ef:ae:6f:b0:51:98:e7:1c:c3:e2:6a:12:fa:
06:4b:29:cb:91:28:4f:85:06:3d:0c:cd:89:67:cd:
8d:88:68:16:04:9e:e0:e4:c4:2a:6b:a4:dd:38:22:
e4:a5:96:a4:fe:a6:9d:15:88:60:a6:12:5d:b8:fb:
05:46:77:5b:36:12:e1:c8:08:6d:d2:8a:ed:c1:4d:
3f:1a:3b:ce:2c:f5:aa:2c:35:fc:bf:15:48:ac:ca:
1c:82:62:1c:ca:06:1a:56:60:f6:c1:55:50:61:c9:
e7:28:6a:b3:af:66:dd:b3:aa:98:ba:17:0c:2c:9c:
f2:a6:25:49:74:59:a8:de:a8:20:b6:cc:07:07:ce:
81:db:1d:83:5b:95:09:ed:3a:d9:dc:c3:71:d0:e3:
67:fd:4d:79:ae:88:27:a3:eb:4d:ac:40:62:2a:ce:
12:cc:d0:8a:ca:9e:ea:37:19:64:b9:7a:b8:25:7f:
da:33:d8:54:2e:d2:16:44:86:71:f4:e5:3b:11:0a:
f7:41:e6:b9:3c:3b:2e:f9:6f:7b:cd:ce:9c:a8:c9:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:52:68:91:56:CC:23:33:AE:E3:DF:0D:C1:35:57:E3:39:05:DC
X509v3 Authority Key Identifier:
keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2a:31:2a:b1:90:45:00:39:0e:bf:45:c9:b4:c2:d0:7c:22:
92:e0:cc:91:54:85:23:dd:aa:66:25:60:1f:64:7c:04:89:e3:
6b:04:d9:41:27:d9:38:a3:7e:06:d0:44:5e:c9:8d:4c:d4:bf:
95:f9:40:e4:af:45:6b:fa:bb:81:ae:e6:53:c5:c4:07:13:a5:
6c:0b:41:0c:71:ba:3c:a8:74:8b:d1:cf:66:7d:5b:65:e4:ce:
68:5d:94:a9:eb:f4:c0:0e:92:1a:11:30:e7:c3:28:28:84:7d:
5d:9e:d1:8c:01:54:c8:b6:b4:de:b9:d2:ee:44:77:47:a9:9e:
66:a4:00:cf:99:f2:19:22:58:22:ac:6d:0e:f1:d4:a5:65:b9:
a0:0a:6a:c6:12:97:3e:34:9e:52:69:68:cd:15:65:80:9e:8c:
11:a7:f8:01:f1:bf:ce:f2:5b:56:72:b9:59:5f:a1:ea:54:f0:
f2:6f:4f:fb:c2:49:7b:c2:f2:14:36:d0:9d:ea:7f:d4:a0:df:
05:a8:1e:dd:d2:ed:0f:b7:dc:32:ae:13:58:0c:05:4d:21:0a:
c9:c6:a0:ed:06:6f:0a:aa:48:94:40:f3:09:36:73:9e:f3:9c:
e1:19:10:c6:aa:7b:77:84:3c:ff:f3:0b:09:3a:29:fc:2b:02:
41:6f:fe:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:40 2025 by rpki-client on console-fra.rpki-client.org