Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: WSYBxofxTYHooaKa9tnvwt6IyVlykbVrsmqXXbZTDiI=
Subject key identifier: 6A:D0:DE:E5:6B:88:F9:77:BD:F9:B4:43:B2:A0:BB:C2:8E:16:D2:72
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 0194BABB3DCD22E4C283BA30E8E1621A84D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0946
Signing time: Fri 31 Jan 2025 05:00:20 +0000
Manifest this update: Fri 31 Jan 2025 05:00:20 +0000
Manifest next update: Sat 01 Feb 2025 05:00:20 +0000
Files and hashes: 1: Rb-9REf4Ku4-CgLC6REjl5LjwmQ.roa (hash: cTHupzsbPAMMKa56v6BN9R2pDgzgt3AMXO4LKaMqhQw=)
2: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: gICt49Dv7ggtLvFBbbTMKujLGIOmPsczdsJhkfRDEnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:3d:cd:22:e4:c2:83:ba:30:e8:e1:62:1a:84:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: Jan 31 05:00:20 2025 GMT
Not After : Feb 1 05:00:20 2025 GMT
Subject: CN=6ad0dee56b88f977bdf9b443b2a0bbc28e16d272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:04:39:97:2e:c1:3e:ab:1f:dc:d1:9a:a5:5f:
52:64:4f:c9:2d:6c:ef:0c:70:50:f7:e3:f9:5a:3c:
ca:ab:7c:c1:f9:b2:84:0e:5d:1f:5d:76:37:65:b7:
39:fa:a8:03:aa:6a:ab:48:df:46:3d:c9:10:e2:e2:
39:82:2e:cf:be:46:c3:be:2f:27:77:c9:50:e2:50:
f5:1d:86:04:25:0c:88:3e:0c:9a:1a:c8:30:91:ee:
2b:d3:b8:07:65:f5:0f:99:c9:b9:b5:f8:d5:26:d8:
ea:55:c2:73:03:88:47:a9:4a:32:55:17:02:da:e9:
1f:02:09:38:16:57:c7:d6:df:d2:26:46:2e:e2:61:
a4:57:58:51:2f:be:16:34:bc:8a:85:94:fe:99:1c:
95:df:a8:11:60:67:92:d0:2e:80:e6:1d:f1:2b:5f:
47:45:99:62:fd:81:7e:d1:58:e8:b1:33:72:2c:26:
c0:8d:96:3d:71:d4:30:e0:cb:fd:6b:22:13:81:2b:
bf:3e:fc:38:f4:24:62:85:f0:4b:a0:fa:c7:6c:6b:
7b:cc:51:37:ec:02:f0:c7:09:2f:32:83:c3:2f:65:
33:d3:e1:03:b4:63:aa:ba:d8:33:f5:3e:84:f6:9d:
35:32:b6:ea:90:f5:d9:43:86:0d:58:f9:bd:5a:31:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D0:DE:E5:6B:88:F9:77:BD:F9:B4:43:B2:A0:BB:C2:8E:16:D2:72
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:72:d0:25:4d:45:00:a8:df:c9:f7:74:ac:71:df:29:b8:7b:
e9:c5:a8:e3:c7:be:36:f3:71:b6:03:f7:e0:30:5b:8d:5a:d9:
ea:82:4e:89:aa:6f:12:f9:6a:88:39:a2:36:13:72:ab:8d:53:
a1:06:3d:97:74:d7:ff:06:bb:30:95:98:61:7e:12:55:53:73:
9e:3f:8e:60:40:9c:43:0d:cc:ad:cb:ea:b6:9e:45:18:1f:50:
05:da:4c:1b:89:36:f4:1a:1b:b5:40:38:73:ef:e4:6a:f2:a5:
37:ad:9c:5e:0f:a4:ba:74:b2:db:05:68:f2:9d:af:0f:a2:bb:
40:d6:b7:79:66:be:98:ce:36:90:39:42:db:c4:30:da:b5:b7:
ec:03:95:de:4d:e5:01:c7:ae:e5:b0:e6:10:5c:54:15:a0:c6:
5c:44:ad:be:07:bf:34:22:89:3f:00:76:e0:9e:c6:57:3c:0c:
ff:d6:86:c7:6c:4e:5e:b6:29:65:9a:11:9a:18:43:83:01:91:
3b:6a:71:d6:47:f3:d2:fa:f9:ec:b3:23:4e:5f:e8:f3:f9:0d:
ec:02:d9:87:e8:a1:2f:a3:50:ed:85:15:d1:11:3f:54:19:e3:
45:5a:66:ad:62:10:e0:c2:9d:7e:bc:45:cf:ce:1d:11:3e:c2:
93:30:3f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:30 2025 by rpki-client on console-fra.rpki-client.org