Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
File: qiK__S1aBw4uyKP8RueRGvlv6q0.mft (raw, json)
Hash identifier: 4ebeB97+aNyqtCgOOtf79wHH706OyhanrAscdqDhvsU=
Subject key identifier: 34:1A:B5:93:DF:64:1F:9D:76:C8:9D:EA:48:61:FA:12:63:D8:F8:4A
Authority key identifier: AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
Certificate issuer: /CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Certificate serial: 0194BB294E50C7BB08E95B5997430757905F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 07:00:33 +0000
Manifest this update: Fri 31 Jan 2025 07:00:33 +0000
Manifest next update: Sat 01 Feb 2025 07:00:33 +0000
Files and hashes: 1: eo9SLFo6ECy5DSd_dzNUwxtWG90.roa (hash: rwEptqLCRKuvmeB6qGhTimOttQv2kDracTxXGRGGlyc=)
2: qiK__S1aBw4uyKP8RueRGvlv6q0.crl (hash: /dcQr6l/tdeDyclFybezSvbd9YVxjjebY2IUX/YVFEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:4e:50:c7:bb:08:e9:5b:59:97:43:07:57:90:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Validity
Not Before: Jan 31 07:00:33 2025 GMT
Not After : Feb 1 07:00:33 2025 GMT
Subject: CN=341ab593df641f9d76c89dea4861fa1263d8f84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:e1:c8:80:92:00:46:da:88:40:37:9b:ac:
5d:83:0e:5a:f3:49:3a:44:45:97:64:2f:20:54:ea:
09:cd:bf:7a:d9:4f:8f:9c:2c:f5:20:5e:3f:90:73:
67:1d:aa:a9:8d:60:49:86:f0:28:db:1c:81:36:d4:
fc:6a:b8:a5:e9:db:85:1f:1e:14:8d:b9:a1:60:d3:
c9:ec:eb:ff:ca:4c:60:02:60:55:a9:16:d5:82:83:
4c:df:4b:34:e2:91:cc:c7:d9:49:84:03:36:10:6d:
45:dc:b8:fe:de:3c:0c:b5:42:61:40:fd:5f:f9:2b:
3f:96:71:bf:5c:8b:66:8f:da:06:62:42:0e:1e:65:
b2:e4:4b:e1:4b:bd:25:de:fa:0e:5f:65:75:53:e5:
cf:08:15:d9:c2:a4:9d:a9:b4:cb:66:04:63:e9:7c:
55:26:d9:95:fe:ea:b6:19:66:8e:e5:a5:a4:de:a1:
ec:a4:44:e7:73:da:b4:1b:52:a9:fe:0d:33:3a:96:
97:c4:c0:dd:e9:8c:36:da:18:04:3a:02:95:4f:5b:
eb:21:03:50:93:73:98:f5:8d:fc:cd:30:2d:c2:b4:
64:95:da:01:30:10:51:e4:d9:39:5a:96:3d:18:e6:
c7:7b:f3:6c:5c:4c:01:9d:44:7a:20:4d:da:11:1e:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1A:B5:93:DF:64:1F:9D:76:C8:9D:EA:48:61:FA:12:63:D8:F8:4A
X509v3 Authority Key Identifier:
keyid:AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6e:26:e5:c4:f4:d3:5f:80:8f:c6:fd:d6:f6:f6:19:4c:8a:
93:14:1e:15:48:02:5f:54:42:c5:70:bc:8e:d2:53:bf:d5:da:
39:dc:82:f0:c9:0d:ce:4a:71:6c:66:12:dc:25:a3:3d:df:2a:
a2:d6:0a:59:92:41:9a:ac:ce:f5:00:f5:93:95:55:67:02:fa:
16:26:95:8a:f3:5e:03:80:52:6c:0f:d7:37:bd:7d:35:52:08:
54:4b:f1:a9:3b:c8:de:24:cd:ad:3b:0d:43:94:02:58:bc:73:
78:9b:85:fc:7a:8d:f4:65:1b:ef:a9:1b:14:53:75:5d:27:0d:
fb:b3:8f:04:15:3f:2d:28:93:ba:7d:b2:ca:3d:e5:e2:e6:c5:
2f:42:3d:0b:60:cd:e6:81:2d:8f:17:63:bd:0c:7d:59:61:a4:
a3:be:fa:30:d3:e3:31:a2:49:02:7d:52:d4:19:cf:06:1d:20:
b5:b4:05:d9:2f:c3:5b:41:12:87:7b:07:81:c4:b5:04:17:f4:
e8:ab:5c:4d:15:90:ad:25:06:6a:47:53:58:af:11:ac:d1:97:
1d:ce:53:59:13:bb:89:ae:e1:37:34:d0:2d:0f:32:4e:aa:6d:
ff:d4:f5:4d:1d:4a:c2:46:0e:6c:56:1a:56:f7:bb:20:c5:31:
da:b8:d9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:31 2025 by rpki-client on console-fra.rpki-client.org