Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json)
Hash identifier: tuGXZJ1qzweD+0vll/zVmqh5rc+sdXjySeVe0MEI4OA=
Subject key identifier: FE:9A:BB:29:68:F1:0B:92:AC:28:8C:7E:EE:19:66:30:D2:08:2E:F2
Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb
Certificate serial: 0194C3880AB99B1DCD17B369C0DA8CDB30DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
Manifest number: B5
Signing time: Sat 01 Feb 2025 22:01:00 +0000
Manifest this update: Sat 01 Feb 2025 22:01:00 +0000
Manifest next update: Sun 02 Feb 2025 22:01:00 +0000
Files and hashes: 1: FQG0ejLSzUt4iA-ikpx0cAR2OKU.roa (hash: kXmpv8tYACCxfjQibnimCHCR1m+/Ufm2bbWZrvhXv8Y=)
2: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: vS5rlPMidG+WwUC+38mJUZKOfi4dRqWk4Y9oG/Xa7Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:0a:b9:9b:1d:cd:17:b3:69:c0:da:8c:db:30:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb
Validity
Not Before: Feb 1 22:01:00 2025 GMT
Not After : Feb 2 22:01:00 2025 GMT
Subject: CN=fe9abb2968f10b92ac288c7eee196630d2082ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:87:fb:b1:e2:62:43:68:4c:3f:5b:66:5c:82:
f7:a2:aa:95:a9:f6:9c:1a:03:17:f8:c6:6d:1b:14:
09:d2:33:ee:79:cf:54:a1:89:af:e4:b7:51:1e:c3:
ec:25:0e:8b:66:53:23:1b:ca:56:3b:5e:7e:32:20:
75:68:04:e1:6e:ab:83:d4:0e:d5:0d:5e:0c:9a:de:
13:f4:2e:10:13:41:c1:2e:54:8c:38:57:bb:dc:bf:
7d:e8:28:b3:a6:45:05:35:2f:20:5c:2f:a3:88:fd:
65:ad:29:c5:7f:21:cf:4c:7b:c7:bb:f8:0a:3b:2e:
f6:ef:90:92:e7:cb:8b:9b:35:52:c3:0a:16:9d:e2:
37:3c:79:be:85:03:eb:c0:b6:d3:aa:06:26:3e:4f:
97:02:f0:79:40:32:36:83:d9:d2:a9:5d:41:2c:d6:
d4:1e:19:08:c5:4a:24:03:55:21:47:d5:a6:09:97:
70:96:63:7a:01:ad:63:59:01:4b:3d:66:af:5b:58:
d6:81:5e:a1:80:a5:fe:ff:1e:5a:2d:32:13:c5:d8:
fc:5a:b3:bf:29:a0:aa:7b:36:7b:6e:d4:05:1b:73:
a2:a0:3d:20:24:ff:8b:d3:b1:ee:b5:88:b2:07:80:
c0:27:19:ae:5b:ac:54:05:64:d8:ce:dd:eb:7f:00:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9A:BB:29:68:F1:0B:92:AC:28:8C:7E:EE:19:66:30:D2:08:2E:F2
X509v3 Authority Key Identifier:
keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7c:ab:3a:c9:df:9a:4f:39:9b:fb:b8:65:45:51:1d:4b:2b:
64:3c:8e:04:36:64:e9:17:ec:2d:56:65:cc:e7:0d:10:72:b7:
30:67:d1:dc:23:d2:d3:85:c9:91:40:03:53:ab:af:5b:93:09:
5d:22:96:ec:ba:a5:1a:52:1c:af:1a:44:ae:ed:48:f1:52:b0:
bc:fc:75:12:3c:41:cd:c9:78:c7:42:b4:38:f1:e8:c4:54:b9:
89:19:eb:6d:23:dc:08:04:68:d5:19:82:b1:68:da:03:6d:18:
82:e2:54:ae:ee:33:f8:fa:dc:06:9c:51:6d:e3:f0:cd:e3:d4:
18:43:98:7d:b6:06:f9:63:5c:27:73:8a:27:f5:b9:3a:c7:a0:
e9:4d:b3:f4:30:93:d6:b2:71:c4:72:eb:e4:4a:69:8a:da:4e:
fb:0a:fb:81:25:f9:b4:06:96:d4:ca:d5:7a:62:66:6d:cd:52:
88:2d:89:8c:52:4b:23:86:b4:b2:20:d0:60:18:ad:c8:c6:ae:
04:c2:ac:34:b6:a7:cd:e4:1b:5b:d9:ce:c7:cf:f0:16:c4:1a:
98:c1:ef:7e:8c:2f:0a:21:88:66:cb:86:a9:10:98:95:4d:0d:
8a:bb:63:44:83:de:32:be:26:ac:8e:9d:99:d0:4d:55:77:64:
26:33:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:08 2025 by rpki-client