Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: 3+bbQo80L9Fc0tGAxPvZEvtmfEwQ5iuxPEn7PpZUTQ8=
Subject key identifier: 3D:39:95:FB:3B:C2:9C:4E:D1:C6:6D:7F:24:68:03:04:21:17:16:DE
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 0194BB96D24D86374F4D6033D8D8158FC040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:11 +0000
Manifest this update: Fri 31 Jan 2025 09:00:11 +0000
Manifest next update: Sat 01 Feb 2025 09:00:11 +0000
Files and hashes: 1: 1OkV1FOSt0CIRzcv_xhQZDIhaCY.roa (hash: 0nS1ugbBt4Oiv/4rCAPHlWm5w4EZo3UZ1Why6gpAxu4=)
2: KmelkdSsmbJtVWU94thK7d4v5RE.roa (hash: oIEVJa5VewYKMBXTZDUCkwziB09TzVnzHNBtgzRneDA=)
3: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: EQRjf1WVDCe6AU3ESXH+TZ0QOh3oXLcYSuHPeIszsMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:d2:4d:86:37:4f:4d:60:33:d8:d8:15:8f:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Jan 31 09:00:11 2025 GMT
Not After : Feb 1 09:00:11 2025 GMT
Subject: CN=3d3995fb3bc29c4ed1c66d7f24680304211716de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:f4:50:4b:72:a5:b0:58:a2:60:ba:98:af:
40:c2:1c:26:5d:5a:48:5b:c1:ae:a7:f4:a8:bf:a6:
b3:82:00:5c:93:49:8e:d8:9c:69:2a:29:09:74:df:
fa:4f:b6:18:58:d3:f5:ab:6c:0f:72:9e:33:20:f8:
03:58:f5:fd:7c:86:1a:84:7c:2c:ae:ba:d9:48:b3:
a9:ef:92:e5:8f:55:47:cb:fc:49:16:40:a1:f7:4c:
d4:67:43:c3:5a:94:c3:03:32:8d:c0:9c:17:6a:ee:
7f:e2:96:3d:99:95:96:cc:d7:3d:6b:4c:a0:0b:81:
c7:eb:5e:93:20:f4:b2:8d:0a:b9:35:1c:8b:a9:82:
92:e8:b1:f8:8c:17:a8:a5:35:04:35:85:dc:f8:a7:
37:0e:4e:6c:bb:76:23:a8:24:69:63:d5:50:72:89:
70:58:4a:3d:fc:cd:c1:6b:95:c5:37:17:38:bd:8e:
94:ff:ff:e2:e5:df:ac:90:78:bc:17:08:10:e0:db:
21:7c:19:e5:34:4b:78:fb:9b:ea:d1:b6:95:32:11:
21:40:60:6d:e9:a0:4a:d2:fa:d4:81:c2:b9:9c:ce:
b4:f2:fe:9d:90:45:b6:cd:36:71:b5:8b:c2:a5:af:
05:c7:01:f9:ad:f5:29:82:eb:bf:d0:cd:4d:62:79:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:39:95:FB:3B:C2:9C:4E:D1:C6:6D:7F:24:68:03:04:21:17:16:DE
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9e:53:84:da:b9:ee:34:4a:b6:98:41:e5:35:9a:c1:80:e2:
d3:cc:15:62:86:73:3a:36:b9:a2:fa:9f:a0:df:bb:27:48:d5:
c7:51:52:2c:8a:eb:38:df:1a:f8:ff:de:66:9e:81:94:d4:96:
47:e9:de:e8:32:a0:8d:b0:27:7a:29:97:d7:e3:65:cc:58:7f:
f5:a2:ae:3f:c3:04:43:20:5b:0e:7c:3b:49:c4:e6:cd:30:f9:
de:ee:06:c6:d1:09:31:11:ab:c2:90:49:14:1e:f9:ac:59:5e:
00:75:61:3a:85:6d:70:5f:85:5a:05:f1:fe:1f:16:62:60:e4:
13:c6:d5:5d:0d:e5:aa:39:14:21:1a:8a:f0:19:f9:0a:b2:c1:
1e:5e:b1:fd:f3:77:01:55:3c:4d:bd:4f:24:07:48:78:fc:04:
88:c6:74:f8:36:fb:12:77:c7:2a:ae:99:e6:ce:13:ba:05:43:
35:c5:99:72:bb:cd:43:3b:70:e1:92:3f:35:10:46:ff:01:20:
a8:b7:02:79:b9:b0:d6:d1:c5:42:cf:b4:c6:5b:ca:eb:b9:8a:
0f:16:a5:b2:cd:3d:9c:35:11:79:48:b4:9c:91:ab:8d:05:4c:
03:d0:9d:1a:37:6a:9a:f5:b7:33:72:e3:f1:f0:2d:dc:6b:4d:
de:23:cf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:53 2025 by rpki-client on console-fra.rpki-client.org