Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
File: _QsmgyFXCqBCF7NThHwQv3MSVLU.mft (raw, json)
Hash identifier: 338XQ8bjBcIGC5Bppd2hyJ7uklY2KEhdqvD1HtGyMm0=
Subject key identifier: C6:D8:92:2D:F5:62:64:9C:C3:13:35:D8:4B:5E:0C:4E:E2:13:C3:AB
Authority key identifier: FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
Certificate issuer: /CN=fd0b268321570aa04217b353847c10bf731254b5
Certificate serial: 0194BA846CC79B29EE89E6D462FCAF207A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 04:00:28 +0000
Manifest this update: Fri 31 Jan 2025 04:00:28 +0000
Manifest next update: Sat 01 Feb 2025 04:00:28 +0000
Files and hashes: 1: Th8E4wMERzzrtf61mMlHU7T-O1E.roa (hash: fBxF7gzjtDOzJ+1yYpryOgnsRtCjhNj/m+OItkfcoW4=)
2: _QsmgyFXCqBCF7NThHwQv3MSVLU.crl (hash: n04XC3YSAFcy7tAuqK+YOXH9UhtGJMxjvD/FMU7mWaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:6c:c7:9b:29:ee:89:e6:d4:62:fc:af:20:7a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0b268321570aa04217b353847c10bf731254b5
Validity
Not Before: Jan 31 04:00:28 2025 GMT
Not After : Feb 1 04:00:28 2025 GMT
Subject: CN=c6d8922df562649cc31335d84b5e0c4ee213c3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:06:fb:b8:e5:ab:e8:4d:dd:9b:1c:5a:75:
22:24:a8:ca:cc:8b:44:ed:51:40:9c:e0:3b:5c:dd:
65:63:e5:85:3b:08:8c:48:e4:a8:05:0f:64:52:38:
b6:58:00:75:63:78:00:26:e1:49:0b:db:3c:08:3b:
d3:35:77:29:7c:09:3d:87:63:c1:31:ee:98:7c:43:
d3:c4:b3:a3:e4:e5:eb:ba:21:bb:73:7e:ef:09:aa:
d8:92:b8:65:49:45:dc:54:94:06:5e:b4:08:b6:45:
6d:0e:15:58:8b:08:d2:f4:f7:cb:6a:8d:dd:25:dd:
9c:03:3d:1f:e5:b9:cd:b4:1b:bb:42:4d:5a:88:7e:
88:e5:09:f8:c3:32:ff:d3:a1:d0:17:0b:61:50:cf:
d6:1d:e8:0b:5d:99:6b:de:44:fc:2c:6b:fd:e6:e8:
3e:d7:e2:da:9c:63:bd:55:30:63:b2:a2:f6:32:db:
f0:9a:75:1c:51:86:98:ba:84:2a:18:7c:fb:46:0f:
89:45:74:58:b7:78:d7:27:01:a1:4c:07:97:0f:c7:
76:f7:21:ee:19:b4:a5:85:91:84:0f:f8:47:15:ee:
8a:21:47:94:80:f6:0d:54:0f:00:39:ce:af:f5:e5:
65:91:f2:32:3b:9b:b5:8c:0d:02:33:e8:b0:97:96:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D8:92:2D:F5:62:64:9C:C3:13:35:D8:4B:5E:0C:4E:E2:13:C3:AB
X509v3 Authority Key Identifier:
keyid:FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b4:21:94:c5:b1:72:18:5e:8e:9a:66:36:16:8a:de:83:40:
a2:81:d8:02:e9:cf:5a:c1:78:3d:16:2f:5c:cb:1e:1b:37:93:
e1:f3:56:46:e6:b9:00:16:97:a2:b7:b0:44:02:c2:47:bd:0a:
5c:1b:43:4b:84:c1:70:7d:fb:ad:41:bd:61:fe:a7:13:80:a2:
e9:ea:ea:a8:9d:a5:13:dc:f8:fe:82:3f:a0:9a:fe:72:11:2e:
b9:01:09:83:bd:e4:b0:c4:63:6f:b3:7d:0c:e1:c0:d9:0b:7e:
15:c0:35:16:ac:e2:65:2b:d9:23:50:98:00:7d:fd:ff:ce:57:
d6:46:8c:a5:d3:37:81:44:bf:54:db:11:20:cc:1c:12:77:59:
60:07:e1:b7:66:cc:8e:bb:a4:ef:fd:28:e4:42:2c:d9:13:95:
8c:bc:60:47:0a:41:99:0b:aa:09:52:4f:8d:2e:74:a7:55:17:
7b:00:d3:84:22:64:3e:8e:48:51:f6:d8:9c:ec:4b:af:09:cc:
04:db:a4:1d:12:b2:67:7f:c2:64:87:47:75:ab:77:f6:5b:cf:
0c:dc:cd:e5:7a:6a:52:16:22:9b:98:b2:54:77:1e:4a:60:7c:
c9:a2:93:32:19:57:42:3f:1c:46:dd:fa:e4:59:3f:0a:04:a4:
84:ef:65:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:14 2025 by rpki-client on console-fra.rpki-client.org