Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
File: QA3igTHHO19TIPUdrmwb1Hq4L5I.mft (raw, json)
Hash identifier: qMycUfQ3mRhxfOhDs2Qg4MSLCpoPeAF4TQoBT05jAsU=
Subject key identifier: D5:64:F0:66:43:07:2B:DF:F5:BF:8E:03:A1:59:9C:03:D3:1D:64:DA
Authority key identifier: 40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
Certificate issuer: /CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Certificate serial: 0194BAF253FB98AFEE4A614EABD0290F3460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
Manifest number: 012F
Signing time: Fri 31 Jan 2025 06:00:30 +0000
Manifest this update: Fri 31 Jan 2025 06:00:30 +0000
Manifest next update: Sat 01 Feb 2025 06:00:30 +0000
Files and hashes: 1: QA3igTHHO19TIPUdrmwb1Hq4L5I.crl (hash: Nx6Tv8q9q8NM8ja9mMV28B1xoUPMuwsSSmgNgcF29qo=)
2: YPXVOgtlv47MULpqvQ2eiJqw0s0.roa (hash: 1U3YQJEvDPze+SY3FCaghiXBlRWFSFhPdqgWDRzyuw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:53:fb:98:af:ee:4a:61:4e:ab:d0:29:0f:34:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Validity
Not Before: Jan 31 06:00:30 2025 GMT
Not After : Feb 1 06:00:30 2025 GMT
Subject: CN=d564f06643072bdff5bf8e03a1599c03d31d64da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:a8:31:47:ba:5c:b2:65:06:6a:5a:f0:7f:
4f:26:9f:6a:c7:8f:2b:d5:b3:ad:0d:85:03:5a:8b:
e5:4e:c2:ef:bb:6d:0f:12:6d:b2:a0:0a:73:c6:a5:
18:45:02:72:f0:36:b7:2b:ce:6c:70:f5:c7:dd:71:
9b:b3:f9:30:e7:8e:5a:89:89:99:5d:87:6e:d2:c6:
83:23:4d:9b:20:a9:ec:fa:b8:5a:b5:12:52:a7:cc:
07:91:4b:1a:ff:7c:05:e6:43:a9:3f:04:21:fe:82:
3e:e5:33:4c:69:5a:2b:5d:9a:df:c1:e2:c4:92:30:
72:4e:cf:18:66:3b:b0:70:46:2f:b8:99:92:05:d7:
7c:11:31:c3:96:b2:e9:ad:40:88:d7:fa:2f:73:f5:
96:e6:0d:9c:68:35:c9:f2:74:ba:b4:8d:5b:ae:32:
a9:71:f1:03:e9:70:54:d7:2a:97:58:40:e4:2c:32:
42:18:90:da:80:f0:ea:4a:55:81:71:69:68:0b:0c:
88:02:57:0f:5b:62:77:9e:98:ce:52:55:31:46:d8:
15:97:7a:1b:0f:e6:5c:f5:be:bc:78:c2:b4:68:94:
e8:35:6a:be:1a:29:90:52:90:0d:e8:1b:45:f0:db:
30:7e:ed:c3:03:64:66:cd:56:78:d3:2f:1e:19:83:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:64:F0:66:43:07:2B:DF:F5:BF:8E:03:A1:59:9C:03:D3:1D:64:DA
X509v3 Authority Key Identifier:
keyid:40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cd:8f:f3:ff:4b:86:c7:f2:f4:54:02:4f:57:55:3a:6c:f9:
09:23:c8:5b:02:12:da:bc:8a:b2:a8:db:81:6f:00:0d:71:57:
2b:94:fc:7a:79:ff:e6:14:71:27:ad:2b:06:82:34:9d:bf:7e:
8f:c8:ed:ed:65:cc:3c:93:5c:78:1f:e4:c7:c3:2c:64:b4:f1:
3f:bf:64:43:3e:15:44:8f:93:03:88:6a:5b:ff:27:22:8b:57:
8f:a0:fc:fb:4f:d0:6c:68:61:6f:d8:92:28:86:1b:5c:13:25:
c8:9f:00:73:6d:af:ba:7b:a3:9a:b2:bf:b0:d5:7d:6b:b2:1a:
c5:37:37:ef:fc:f0:21:bf:ef:76:a0:94:bd:87:9f:ed:c4:c7:
98:a9:a9:24:41:ad:42:1f:32:20:41:f1:05:07:98:1d:ca:8d:
c4:e7:e0:21:23:23:7f:a4:d1:b0:6c:23:7a:1a:e7:11:67:24:
2c:b1:06:99:38:01:ce:19:b5:d9:af:81:e8:51:0a:34:e9:89:
d5:fa:19:32:2c:5b:b0:d6:3c:63:7f:02:93:97:27:95:f2:47:
2d:20:e6:99:e4:2c:c1:c6:81:cd:85:cb:da:05:3f:a4:ee:19:
5e:a7:06:46:b5:10:d8:e1:5a:01:2e:a3:fb:f1:e4:3d:ef:a7:
be:f8:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:01 2025 by rpki-client on console-fra.rpki-client.org