Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier: wRXAxSwFoZmCNtG8T9Eu52pOrrRt2KoyZaSNDgmGkDU=
Subject key identifier: AF:DA:DC:8D:B6:8E:10:CB:6A:6D:14:40:EE:4E:DA:42:43:4F:7C:DF
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 01951247AF6C9000A9C7BEE74A17D571B8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number: 13A2
Signing time: Mon 17 Feb 2025 05:00:42 +0000
Manifest this update: Mon 17 Feb 2025 05:00:42 +0000
Manifest next update: Tue 18 Feb 2025 05:00:42 +0000
Files and hashes: 1: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: DbCQZE9TwJ/ibpAgWwQKf6n5pUt2Ch2qhqXbqFtIsyc=)
2: xkuriOxhH9L4osrYS3niaHQqN-k.roa (hash: K/CvJAstY6jQItpyuZ+KxEg8C5FknWg2U5h6YOrdb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:af:6c:90:00:a9:c7:be:e7:4a:17:d5:71:b8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Feb 17 05:00:42 2025 GMT
Not After : Feb 18 05:00:42 2025 GMT
Subject: CN=afdadc8db68e10cb6a6d1440ee4eda42434f7cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:e0:20:29:b2:89:ee:82:1b:45:01:57:a3:
c3:a8:0f:4b:b1:e4:1e:bc:94:e4:a9:2b:92:ba:9b:
05:c4:1e:db:22:2d:11:4a:b9:87:ce:b6:38:c1:a8:
67:4b:66:9c:64:db:9b:15:cb:b4:3d:76:b5:85:c9:
10:49:14:0f:87:8b:8c:d5:64:cf:88:bd:17:4f:20:
69:46:ad:df:35:d0:71:33:e1:04:19:8c:4f:77:b4:
cb:6e:5e:ba:80:e7:f6:bb:54:ef:90:51:ea:97:76:
0f:1f:2d:af:a4:20:08:cc:a1:24:ff:a4:a3:00:65:
de:ff:cd:99:10:f0:02:3b:8b:5c:b6:2b:2d:d1:77:
37:e1:29:ff:60:3b:84:9b:2b:a9:6c:cb:f8:b2:f7:
02:96:36:2a:27:c1:09:c6:30:10:3a:56:55:1c:19:
93:e9:9d:a5:ff:8f:bd:15:65:6f:5e:d1:62:18:87:
cd:38:f5:1b:d3:d1:06:7b:fb:a0:a5:07:04:2e:d1:
e3:0a:7d:c3:58:db:bf:40:5f:a2:fc:69:89:c0:07:
11:cb:5a:83:40:2b:59:4d:4b:5f:d9:1e:04:01:d4:
7f:df:17:cd:2a:13:10:a5:37:bc:6c:b1:eb:e8:88:
bb:63:02:08:c2:56:69:ba:aa:07:7c:97:3c:20:86:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DA:DC:8D:B6:8E:10:CB:6A:6D:14:40:EE:4E:DA:42:43:4F:7C:DF
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e9:09:73:da:2f:6d:47:75:76:6c:92:fa:0a:b3:f1:89:1f:
a5:c9:19:26:f9:6e:44:2d:90:25:8a:57:23:c2:1f:62:66:54:
3e:92:6e:16:cb:02:aa:ee:73:b7:28:0a:9c:7f:46:67:2b:ff:
bc:47:ba:18:79:9a:6d:c7:cd:fa:68:3b:f7:2e:63:87:66:13:
cb:f7:c4:ba:0a:81:6a:cd:76:f7:73:79:3a:51:99:4c:4b:01:
21:60:3a:39:bb:04:d0:b9:84:b1:18:a5:c3:71:02:58:a2:23:
9a:47:49:5f:17:db:f2:5d:6f:7f:a0:ac:0c:f3:d5:03:f2:6b:
b8:76:49:cb:02:78:9d:6b:08:cf:06:b7:43:4f:2e:23:ff:b3:
9d:81:3e:16:66:c5:5a:5b:53:85:c6:8f:db:ee:d4:27:8b:e8:
08:29:a5:e1:bf:51:86:3b:a7:52:17:8b:a9:3d:aa:ad:f0:27:
fd:58:8f:0d:95:ec:7e:48:70:e2:9b:f4:b5:67:85:66:8a:c1:
da:4c:1d:fe:ce:b1:32:63:d8:c9:45:1a:53:1b:83:e5:b4:80:
61:c4:9b:a3:d2:ae:42:a5:68:28:6e:4c:f3:aa:57:c0:62:4f:
43:a4:cd:99:1a:c9:57:a8:c6:6c:91:f1:28:36:3c:e1:50:6b:
63:07:d6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:38 2025 by rpki-client