Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: F9TK6Gzq1zMyukCQxGkYijA/AorljaPpwiElqv3xKw8=
Subject key identifier: 0C:13:B2:D0:08:B8:76:FC:F1:49:49:48:6C:D4:7A:38:ED:15:2E:7B
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 0194BA848A0A079BD888F6DD77ADFC0841E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 04:00:35 +0000
Manifest this update: Fri 31 Jan 2025 04:00:35 +0000
Manifest next update: Sat 01 Feb 2025 04:00:35 +0000
Files and hashes: 1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: gJWXvFHn27s6/cwDdSugOG9GqY8fHW1oqWb3er+g2HI=)
3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:8a:0a:07:9b:d8:88:f6:dd:77:ad:fc:08:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Jan 31 04:00:35 2025 GMT
Not After : Feb 1 04:00:35 2025 GMT
Subject: CN=0c13b2d008b876fcf14949486cd47a38ed152e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:11:1e:84:ff:38:9a:31:68:57:a1:b8:0e:58:
9c:a6:45:7b:30:4b:5b:b5:2e:62:f9:9d:2a:65:3a:
1f:82:24:2c:45:63:7e:73:27:fe:00:a6:9e:26:1d:
75:55:e6:6b:9a:bc:f1:8b:96:62:23:86:c6:ae:a1:
3b:47:31:1b:92:01:a7:35:06:9a:70:f5:6f:72:98:
10:10:d4:cf:76:c7:21:18:df:10:42:f2:36:36:9c:
74:78:03:30:50:ac:c6:4c:6d:08:4a:f3:67:8f:5a:
46:bd:23:a8:f1:c4:63:ce:3d:61:76:bd:71:1b:c4:
61:f6:eb:6f:d9:4b:e7:61:ab:16:4b:32:92:2d:7e:
42:5e:c6:1a:f2:e6:05:99:5a:d5:95:90:e0:0d:22:
dc:bc:48:d1:de:04:f6:bf:db:e6:d0:83:d7:52:c6:
ad:c5:54:bc:0a:36:fe:4f:2b:64:4b:70:5d:f4:e7:
f3:8b:e0:e5:8d:a1:9a:8d:57:0d:15:8d:d2:0d:d3:
88:d7:e8:bf:8a:be:10:83:7b:89:54:9d:71:8b:3f:
f5:d0:dc:73:46:0b:05:54:db:43:e9:49:50:ce:68:
bb:b2:1c:20:65:45:4f:a6:7e:d5:bc:0f:9d:22:8d:
d5:3e:c0:9a:e2:fe:d3:a0:fc:fa:b2:bd:0a:03:87:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:13:B2:D0:08:B8:76:FC:F1:49:49:48:6C:D4:7A:38:ED:15:2E:7B
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c7:74:8c:74:49:64:70:12:ca:43:df:cc:0f:c1:99:82:51:
5a:9a:b4:b5:7f:3c:a7:02:cd:77:2c:d7:0b:bd:e2:ac:de:15:
7a:0e:82:1b:5c:64:00:66:e5:0a:b1:9b:a5:67:f3:a4:99:bd:
f7:7f:94:75:9d:b3:3f:b6:78:bb:f6:28:70:05:98:b8:93:00:
3d:53:94:04:8b:44:98:93:c3:a5:65:66:de:d1:8d:73:20:10:
c9:64:49:89:86:fd:1c:b5:1b:d8:35:39:cc:66:73:8c:66:73:
0e:8f:5d:05:82:1f:3c:a9:33:a5:f8:11:5f:95:7e:1a:a5:53:
1d:b6:69:c5:16:a0:db:f0:98:ab:f3:7a:a8:50:95:66:bb:93:
84:b9:2c:b5:01:6a:cc:79:a8:51:bd:b2:71:5c:b5:d3:1e:7f:
dd:a0:26:68:e6:a8:c2:73:0a:6f:4b:47:79:20:4a:23:49:db:
26:ac:59:65:f4:d4:5c:18:a0:b6:6d:75:2a:37:b2:7a:d2:e5:
25:85:94:c8:81:c6:02:56:09:62:ae:0a:53:52:95:fa:5a:59:
a1:8a:43:18:39:41:7c:35:08:43:d1:ed:12:0c:9c:95:ef:f5:
65:c2:ed:43:bc:9d:c7:fc:33:e4:66:54:60:fb:09:e5:c7:4a:
11:eb:91:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:32 2025 by rpki-client on console-fra.rpki-client.org