Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json)
Hash identifier: 0tT5+phj80K6CbHETEl3P7q5GoX0cJo6TjGxUshZKCE=
Subject key identifier: E1:AB:FF:F7:48:B1:0F:7B:48:2D:AC:0A:B2:80:83:37:57:7C:4C:7B
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 0194BA842B0C71C3CE75D419E81C00684DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
Manifest number: 131E
Signing time: Fri 31 Jan 2025 04:00:11 +0000
Manifest this update: Fri 31 Jan 2025 04:00:11 +0000
Manifest next update: Sat 01 Feb 2025 04:00:11 +0000
Files and hashes: 1: _RYA60WhNQpChcuS-ZhpeHNn3Ro.roa (hash: /o7/5SeEgngQyysQsPfhFgp/4dtDLAhE3JTXwNG/WOo=)
2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: 3IASBBW8AqqyFUQZnUHrT1jUUpT/XcHKBv1V/6s/QNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:2b:0c:71:c3:ce:75:d4:19:e8:1c:00:68:4d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Jan 31 04:00:11 2025 GMT
Not After : Feb 1 04:00:11 2025 GMT
Subject: CN=e1abfff748b10f7b482dac0ab2808337577c4c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:18:f3:4a:fd:16:04:be:27:c0:1d:8e:3e:
30:9b:f3:fd:71:e3:18:bd:46:cc:02:a0:9f:56:90:
21:e6:ab:48:7c:62:7f:6c:97:b4:cc:9e:c7:d5:82:
eb:19:6f:04:22:6e:e2:f0:a2:bc:86:71:89:94:6c:
20:5c:58:a1:d2:26:da:0e:8b:5e:e3:d3:10:b5:6c:
2b:4a:59:14:50:98:ec:b4:05:cb:fe:af:0a:2c:ea:
a2:fa:8f:94:96:89:7a:c8:10:6a:64:c4:6b:d4:1f:
83:dc:3a:e3:64:38:fc:ca:e0:76:48:d5:f7:75:2d:
6b:b4:9d:34:e3:7a:4f:05:0c:8a:1a:ff:1d:3c:ba:
77:0a:ee:41:a2:c1:87:cb:37:f7:98:87:73:ab:ad:
c1:c4:f5:39:d1:50:36:75:7f:12:55:97:09:14:e3:
82:8f:74:6a:04:21:17:6c:9a:8c:29:75:12:d8:1a:
e8:c2:a8:f1:d5:aa:0b:cc:3c:fc:15:25:2c:3f:d9:
73:b7:1c:95:41:0d:bf:58:3f:fd:a7:b7:e1:b9:3c:
3f:b4:4a:ab:de:9a:67:60:fe:b1:1b:98:b0:e9:4d:
23:2f:7f:e0:3c:55:1f:2b:51:89:65:91:4d:dd:31:
c7:e5:9d:ca:a5:82:61:b8:94:3f:28:08:47:1a:c1:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AB:FF:F7:48:B1:0F:7B:48:2D:AC:0A:B2:80:83:37:57:7C:4C:7B
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:da:0c:3a:5b:fa:48:b3:e6:9a:2c:7b:35:6c:c5:bc:41:3f:
9e:a3:6e:76:4e:89:ab:40:57:c1:d5:b2:2a:b5:a1:d9:e8:89:
1d:6e:69:41:0d:f8:a3:ca:fe:31:60:ab:60:73:75:de:14:a1:
8e:c2:97:12:e8:80:99:69:ef:18:1f:29:4c:4a:b6:b0:4e:15:
ef:30:4b:7e:bd:f1:5b:1e:4a:bf:ee:8a:10:71:9d:8b:a1:c1:
c1:5f:a7:a7:2e:e5:97:38:26:80:c4:1f:94:1f:93:c1:fb:f6:
82:82:52:3b:e9:01:77:c4:b5:1c:ff:d4:4f:f9:3e:09:69:c5:
20:31:1e:f3:09:e5:30:44:f5:7a:81:8f:b5:8a:6d:c4:2f:f0:
a6:ef:b8:c1:4f:c9:63:e8:c7:35:ac:90:97:47:6a:20:1a:53:
f9:49:41:cb:9a:db:84:96:29:5c:42:f9:ad:9e:80:5e:30:f1:
ef:68:34:53:48:0d:c7:b1:2a:e7:4a:7b:e1:9e:e6:86:3b:45:
f4:3e:d1:1d:d6:8d:0a:90:0b:37:5c:ba:45:a3:06:72:68:d8:
43:43:70:59:b6:a1:60:0e:e1:08:0a:44:3f:2a:e3:5b:d5:f9:
1c:b3:4f:72:39:87:c2:a1:0f:2e:b2:af:cc:fa:55:15:ec:01:
e7:7a:47:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:45 2025 by rpki-client on console-fra.rpki-client.org