Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: H6JzysWZYy+MLwPCJuYkNCGd4rUTndBFaoRkXEfvAmE=
Subject key identifier: A9:13:ED:5E:0C:57:14:AE:C0:81:3A:66:D2:6F:9E:E2:2F:17:9D:F7
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 0195116C24E55148C17031CC1828E823AD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 01:00:54 +0000
Manifest this update: Mon 17 Feb 2025 01:00:54 +0000
Manifest next update: Tue 18 Feb 2025 01:00:54 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: x/y1LeMdYiAzygR83wZVxVSc7xMuCbPf3ZR9Sd3sPsc=)
2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=)
3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:24:e5:51:48:c1:70:31:cc:18:28:e8:23:ad:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Feb 17 01:00:54 2025 GMT
Not After : Feb 18 01:00:54 2025 GMT
Subject: CN=a913ed5e0c5714aec0813a66d26f9ee22f179df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:c2:af:52:0d:78:be:37:c3:af:68:20:f7:
f1:41:fc:a7:f7:a7:53:3a:c1:12:56:7c:8d:4e:2c:
a0:86:47:53:b7:1e:14:9d:d3:e9:a8:70:9e:53:fc:
da:b7:c4:c4:51:68:9c:89:9f:fd:72:d4:07:57:b6:
3e:af:85:ef:25:90:dd:82:f4:69:fe:44:b4:9d:ab:
8d:90:4f:00:45:3c:92:cc:55:3e:d7:94:71:60:55:
9e:40:14:85:37:19:e9:ee:96:dd:e6:ac:68:03:13:
d4:78:2b:29:fd:af:ac:4b:2f:47:76:ef:6d:ed:ca:
7a:b3:c2:8b:91:a9:c0:09:d4:df:87:39:de:07:b9:
31:65:e0:ef:07:75:6b:b2:12:c2:a2:7d:4d:ba:26:
58:7e:0a:35:b2:2c:97:a4:f6:c4:b1:7d:a6:32:b7:
25:b1:e7:ca:36:ed:0b:bf:f4:34:20:4d:05:15:a8:
8c:36:d8:96:56:d7:c0:c6:71:4b:4f:fb:3b:5c:47:
24:02:c7:ba:87:2b:22:84:7f:df:45:4b:d6:23:d7:
79:98:f6:e4:60:4c:21:c7:1f:aa:90:45:46:af:1d:
17:02:11:ed:ed:63:35:f8:8d:65:4c:34:96:fc:8b:
2d:92:81:7c:da:4b:c3:88:94:0c:95:90:65:cc:1f:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:13:ED:5E:0C:57:14:AE:C0:81:3A:66:D2:6F:9E:E2:2F:17:9D:F7
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:79:49:1f:28:68:a1:57:2c:72:34:b3:82:08:2d:0a:df:c7:
e1:8f:c3:68:44:bd:07:f1:cc:07:bf:61:c2:12:f9:f7:b4:e5:
25:3e:96:a4:8b:88:c6:1a:bf:38:a6:23:57:be:c2:50:1a:20:
99:42:16:e8:e4:e0:2c:7b:09:7a:40:9d:c9:7f:31:a9:72:55:
fd:d9:cf:f3:20:93:f0:3c:59:ec:a8:06:57:55:3d:1b:2c:7e:
c1:52:ee:d9:60:76:f5:b6:f4:e9:0d:9b:95:aa:d7:23:52:91:
44:5b:7f:93:be:ed:0d:b6:40:cd:89:e1:cd:49:b2:c7:ba:25:
58:3a:63:33:02:5f:9d:d3:c5:65:6b:f2:18:75:8f:91:8b:ea:
78:4f:17:5b:a0:bc:af:e7:16:dd:3e:cf:d5:7d:58:53:2a:5e:
b6:3e:6e:50:46:b3:40:db:00:a5:ae:31:57:a1:b9:e0:49:21:
44:f6:30:f4:98:85:a6:c8:89:73:a7:9f:7c:df:01:6a:5b:08:
49:47:d2:c0:e1:7c:c1:e5:f9:f1:66:84:9d:25:f8:57:ae:2f:
87:60:b5:48:f9:02:43:ad:f3:84:1f:06:31:2d:45:d2:cd:a2:
b1:0e:4b:01:69:97:0a:6c:4e:1f:cf:dd:4b:fb:46:77:ec:c0:
a8:66:ee:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:32 2025 by rpki-client