Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: P7smbsPT9adoVNHPGsY0Cs/VePnNSBcKZH2uKd+vz10=
Subject key identifier: C4:B8:F7:E7:4E:6B:C8:8D:90:8C:CE:DF:22:D5:B5:71:F3:E7:DC:AD
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 0194BABBB025B99BBBDC5708E9E1A2CCB215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 05:00:49 +0000
Manifest this update: Fri 31 Jan 2025 05:00:49 +0000
Manifest next update: Sat 01 Feb 2025 05:00:49 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: D3+qjq2/C3VnEjdx2V/Nr0mYZsgxdwGj7QqUEaup7XU=)
2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:b0:25:b9:9b:bb:dc:57:08:e9:e1:a2:cc:b2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Jan 31 05:00:49 2025 GMT
Not After : Feb 1 05:00:49 2025 GMT
Subject: CN=c4b8f7e74e6bc88d908ccedf22d5b571f3e7dcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:e8:45:e6:93:16:b2:b8:91:50:30:72:d5:
f1:54:55:e7:36:f9:94:73:39:58:b9:0e:d2:12:d8:
ae:6a:e6:0a:59:88:09:1e:b6:df:9e:75:2f:f0:d7:
a3:73:3f:31:f8:8a:9b:94:5b:9a:57:91:69:62:1c:
50:9b:ed:21:0f:b0:21:be:e8:6d:4f:de:fb:6c:35:
06:15:3e:bd:2e:6c:ce:eb:82:46:6c:6f:c1:82:2c:
dc:7b:54:80:69:d3:11:86:43:eb:16:c4:c2:21:a3:
d7:3e:2d:7d:d9:85:8c:60:de:ff:79:db:64:18:fe:
65:27:2e:28:73:9b:40:8b:ae:f6:46:02:aa:02:34:
cf:3d:5f:5f:ec:44:98:a4:81:05:bb:e5:4f:11:a5:
f1:c4:f8:2a:e2:2b:ca:e6:54:5e:5f:2b:56:79:1b:
c6:f6:b8:23:87:c5:14:92:30:ad:54:3c:f6:f0:bb:
c5:4f:01:65:e0:8e:25:25:51:23:68:07:e8:4b:4f:
f3:7e:82:60:71:d8:77:49:dd:ea:7a:2d:ba:92:97:
ab:3b:4a:c1:49:d1:9f:e1:7b:ab:b2:3f:2f:9e:02:
8c:f9:d0:61:6d:de:4a:9d:95:33:a0:88:7f:42:38:
c6:f6:79:84:d9:df:5d:38:4b:17:7f:bb:04:4d:38:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B8:F7:E7:4E:6B:C8:8D:90:8C:CE:DF:22:D5:B5:71:F3:E7:DC:AD
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5e:d7:f1:ac:6b:86:a6:01:48:8b:a1:0a:e5:0d:f5:b1:c4:
e7:57:8e:07:74:1e:ed:40:65:79:e3:80:b6:60:e1:7f:1c:fc:
ec:84:37:46:05:af:df:25:68:06:2c:32:a3:f2:ba:7f:dd:43:
88:b1:ec:70:91:b8:65:7b:b7:ef:5f:7c:7d:4c:6d:5a:cc:8b:
63:6c:4a:72:67:88:cc:47:5c:7a:fc:16:23:41:e7:31:57:63:
9d:da:17:91:dd:1b:ce:b9:28:90:e2:79:17:32:3e:45:12:4f:
7b:de:b3:2c:9a:2f:ea:be:e6:6a:e0:b9:de:a7:e4:ac:ed:77:
b1:08:44:33:2a:9c:10:1c:8f:12:9b:8b:85:e7:42:79:a5:5a:
c4:07:73:0c:25:03:75:46:ff:0f:50:3b:40:ee:f8:e9:99:4e:
9a:10:de:26:31:48:04:ce:fa:40:12:2e:eb:91:e7:86:98:d3:
92:ee:cf:fb:d7:cd:0e:4d:a4:80:f0:c9:61:67:11:c8:b9:89:
ec:6f:75:e0:d6:b3:e3:e8:c1:e3:9c:08:28:07:2c:f0:fa:8a:
3f:ae:28:18:6b:7d:32:4f:18:42:18:57:38:f9:e9:f1:c5:54:
82:c1:ec:49:b5:f3:63:7a:6b:e2:62:bf:fd:01:d1:ab:69:60:
f1:20:26:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:23 2025 by rpki-client on console-fra.rpki-client.org