Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
File: QY1UtVsZKiSLhHI026US-XYMq_o.mft (raw, json)
Hash identifier: HTarLOdZpUP7G0mINq8fFumhjaBrRyEBEKxp1hxgmzk=
Subject key identifier: 3C:B4:AD:0D:C5:17:66:92:B3:A9:64:25:B4:70:F6:C8:C5:50:15:8A
Authority key identifier: 41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
Certificate issuer: /CN=418d54b55b192a248b847234dba512f9760cabfa
Certificate serial: 0194BB6050AB5AA8D714B45DB4C8CA6C3303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
Manifest number: 07AE
Signing time: Fri 31 Jan 2025 08:00:38 +0000
Manifest this update: Fri 31 Jan 2025 08:00:38 +0000
Manifest next update: Sat 01 Feb 2025 08:00:38 +0000
Files and hashes: 1: PTvQgS1qnjLwo9s4LdFb_Ohs-14.roa (hash: ISrdGe09G63GrIhvFHUR6KGbQ/gtnJbbuoeTtm56a1E=)
2: QY1UtVsZKiSLhHI026US-XYMq_o.crl (hash: Di6k0nK5NOFAAvC4N9l9TRyo5cPE/4FWhHBOmCD4NiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:50:ab:5a:a8:d7:14:b4:5d:b4:c8:ca:6c:33:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418d54b55b192a248b847234dba512f9760cabfa
Validity
Not Before: Jan 31 08:00:38 2025 GMT
Not After : Feb 1 08:00:38 2025 GMT
Subject: CN=3cb4ad0dc5176692b3a96425b470f6c8c550158a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:63:ff:23:10:a1:be:2b:88:97:3a:66:c0:
31:b5:b5:93:5b:68:ef:7b:4f:cb:7a:2e:50:45:e2:
5f:57:27:cd:10:78:6b:97:b7:1c:49:7c:9d:33:30:
55:74:d8:66:5a:f3:80:d5:f7:a9:e2:c4:7f:fc:33:
ed:1d:d6:20:aa:4e:5c:88:45:34:f3:06:f8:89:0b:
1e:47:84:9a:8e:f6:bf:eb:39:d3:96:4c:47:e0:5b:
a9:ee:9e:0d:a4:9f:95:f5:e6:be:b2:c5:44:60:d9:
87:bf:eb:84:3e:62:27:ed:0f:d1:a6:f1:53:49:59:
1b:b7:b8:1f:d2:2d:89:83:72:97:17:35:82:c8:0c:
04:81:c2:46:5e:4b:29:55:16:35:2c:30:4b:3f:62:
82:c1:5c:51:89:c6:0c:6a:48:09:e6:4d:59:4c:a7:
d5:2f:5d:2d:10:1e:43:55:eb:99:9c:78:a3:0c:ab:
0f:f7:16:b7:b8:77:a3:2d:39:22:68:a0:7f:6c:c5:
13:3c:2d:ec:f7:57:ab:a6:7a:cd:8e:8d:9c:4a:ec:
f7:74:c8:db:79:60:36:83:d6:8b:bf:0c:cc:7e:e5:
22:40:3f:73:76:91:91:ba:a3:a9:9d:5b:f7:c4:93:
b3:b1:e8:c7:00:f9:ec:35:f5:59:f9:01:63:cd:f0:
04:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:AD:0D:C5:17:66:92:B3:A9:64:25:B4:70:F6:C8:C5:50:15:8A
X509v3 Authority Key Identifier:
keyid:41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:65:e1:95:45:83:f2:fe:1b:2b:5d:48:ed:34:da:aa:42:71:
eb:71:0f:69:e1:2c:db:02:4d:5e:48:4c:e5:fa:97:b4:54:48:
2e:8e:6f:41:b5:97:68:e4:64:8f:aa:86:19:fb:fe:5d:44:e5:
a4:8f:d5:d1:2b:de:8d:52:92:49:98:7d:57:ac:1c:5a:af:46:
48:7e:ad:5d:b1:eb:3f:fb:8c:5d:ea:44:98:d0:37:4c:dc:ba:
9a:33:5f:0f:c0:19:09:48:8b:20:d4:0b:3c:c8:07:3b:54:98:
ef:d4:33:2e:6d:2d:a1:5a:02:50:e5:98:f9:47:75:b1:b0:b7:
da:6f:2a:33:ee:ff:45:2d:b4:78:3a:8f:25:b9:0c:98:cb:80:
6e:c7:6e:05:68:44:2f:4a:19:4f:05:59:27:ec:62:80:33:8c:
ca:fb:61:36:79:0d:ec:03:b2:f7:96:ab:51:46:cc:d5:96:fc:
82:4a:0a:f0:82:73:ea:98:41:c7:65:a9:46:7c:6a:32:0c:e4:
1b:1c:b7:14:66:42:18:bb:b6:33:27:cc:48:ee:8a:fe:14:82:
57:b2:ec:c1:7d:96:ce:65:5b:d8:99:d8:48:46:0c:6e:ee:67:
e6:a6:ce:67:8f:c6:e7:57:ce:96:b1:b9:a1:f6:9d:83:a8:5b:
b5:8d:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:58 2025 by rpki-client on console-fra.rpki-client.org