Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
File: QSHH-wQVOCnZahwDjw33FNpZVAQ.mft (raw, json)
Hash identifier: RvC8L3nkF0y1zqpXlCVxxTNVuf9mZQ5tFH07my83qHw=
Subject key identifier: 64:8E:8D:DE:01:47:F3:B6:1B:42:B0:E7:BD:59:F7:A8:72:E0:DB:E0
Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Certificate issuer: /CN=4121c7fb04153829d96a1c038f0df714da595404
Certificate serial: 0194BABB95AFB28D6054BC8F7AB24561D541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
Manifest number: 12C1
Signing time: Fri 31 Jan 2025 05:00:43 +0000
Manifest this update: Fri 31 Jan 2025 05:00:43 +0000
Manifest next update: Sat 01 Feb 2025 05:00:43 +0000
Files and hashes: 1: QSHH-wQVOCnZahwDjw33FNpZVAQ.crl (hash: 0awJX9bzyKncuOW7xTGVkO6G0q3bxol1ZNS1KweHV/g=)
2: mjDoFz4eHyi_j3f9O8pUYP3JsY0.roa (hash: 2+YlsZR42nnbb9KjpTYXIUqIvFdsI2xFIsW6avZLprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:95:af:b2:8d:60:54:bc:8f:7a:b2:45:61:d5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404
Validity
Not Before: Jan 31 05:00:43 2025 GMT
Not After : Feb 1 05:00:43 2025 GMT
Subject: CN=648e8dde0147f3b61b42b0e7bd59f7a872e0dbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:8b:aa:1c:84:e0:61:74:e2:50:11:a5:70:
3d:15:b9:55:0d:6d:47:43:58:41:c3:8f:3c:23:9e:
7f:db:57:4f:fd:4a:cb:87:bf:4e:44:4d:92:1d:ee:
ea:c3:59:7b:e7:26:2d:69:36:3a:49:8a:d0:3d:9d:
3e:fb:6e:ad:ff:d7:89:42:d0:9d:66:f2:c9:43:ec:
e9:0c:36:1f:9d:f4:70:52:b2:5a:80:ae:70:90:7f:
34:a1:21:c8:10:c7:43:60:43:64:8b:58:5b:23:9e:
c7:29:d6:cf:49:0b:75:70:17:f3:26:a7:0a:d0:8b:
77:f1:56:45:13:30:16:bf:50:5d:65:b6:a7:87:1a:
03:4b:de:74:c7:4c:fa:08:d2:37:fd:a6:1b:43:0a:
45:10:3d:9c:19:e1:97:8e:cf:ed:09:44:20:9e:e9:
3a:a8:8b:3a:4e:27:02:8b:8d:4a:ce:a5:30:d4:8f:
8e:d1:04:c8:ca:6a:f5:33:22:3b:1b:c7:24:d6:c6:
5c:ae:5d:e0:2b:41:22:5a:be:6c:0d:db:22:7f:99:
e0:b5:27:d2:98:69:ca:93:73:50:a0:a0:2f:29:1e:
88:e1:d8:34:88:97:df:c5:dc:f3:8d:a8:80:c4:ec:
95:85:13:c9:b5:f0:ac:d8:79:27:0d:47:26:43:c0:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8E:8D:DE:01:47:F3:B6:1B:42:B0:E7:BD:59:F7:A8:72:E0:DB:E0
X509v3 Authority Key Identifier:
keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d5:73:2e:a6:72:43:e0:75:e3:77:19:ba:a3:fd:a1:7a:36:
54:d3:5c:b4:dd:f6:ed:82:b5:2b:d7:5a:58:76:16:ee:fd:9c:
4d:f5:c7:7c:bd:b2:b1:ee:38:75:3a:00:60:4c:7d:4b:d2:76:
64:d2:19:ee:e6:f0:41:e2:dc:cd:f2:95:26:c9:26:5d:a0:67:
e5:37:1a:87:b2:cf:b6:f5:7a:ee:66:1c:33:bf:6a:b1:e3:88:
31:6e:3d:c2:24:09:67:30:84:b2:ad:31:0b:dc:06:58:52:bf:
23:71:ca:29:49:30:4e:c9:d2:f3:cd:70:62:80:8d:df:b0:4e:
64:a1:fc:0a:49:fa:6f:97:24:5c:e1:29:95:82:6e:11:20:88:
ab:d1:35:8b:69:a2:69:6c:c1:ea:e3:db:a9:c4:b5:c0:24:a4:
7a:40:87:ed:57:ca:b3:4a:f7:25:2f:ca:2e:2d:35:ee:e9:cf:
c7:4f:2e:bd:ba:16:18:cf:d2:ba:f3:0a:92:f6:f1:3c:ea:e4:
b6:30:39:33:d4:94:fa:61:f8:15:ce:57:ab:f8:83:40:18:39:
d4:18:44:59:31:8e:d2:80:7b:0a:84:5d:3a:fb:c1:25:4a:4d:
30:02:93:95:ea:26:db:b3:91:06:38:43:33:3a:23:43:8d:1e:
09:3e:54:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:50 2025 by rpki-client on console-fra.rpki-client.org