Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
File: qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json)
Hash identifier: rRSp35kS17l2hoJGHUhDYhnE0DzTwFwtb8mQuaSU02k=
Subject key identifier: 33:FD:2E:FC:FA:31:6C:3D:2E:4E:3E:05:EF:5A:CA:D6:06:81:B6:51
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial: 019511D945CA8861E38CA034411B1A1C33BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 03:00:06 +0000
Manifest this update: Mon 17 Feb 2025 03:00:06 +0000
Manifest next update: Tue 18 Feb 2025 03:00:06 +0000
Files and hashes: 1: 1qwW0uRF0uaIMOZUzvFdP6iUIGc.roa (hash: XnlKdK7HSE5Z4YnaNQLgBs+MxP6gmaSDYHLIExtRWFg=)
2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: qaU+rYYHBOiKn1A24foCahM++Hd7cAH7dJ5Qkf7bNOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:45:ca:88:61:e3:8c:a0:34:41:1b:1a:1c:33:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Validity
Not Before: Feb 17 03:00:06 2025 GMT
Not After : Feb 18 03:00:06 2025 GMT
Subject: CN=33fd2efcfa316c3d2e4e3e05ef5acad60681b651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:68:de:e0:88:d8:d9:63:ef:ac:58:13:d8:
7c:3f:98:ef:4e:b6:0a:6f:42:0d:41:10:1a:31:c4:
3b:74:77:eb:44:33:03:4c:84:41:7e:21:e3:94:3c:
68:b0:52:2f:bb:80:e6:6c:18:b6:30:ce:c4:e6:8a:
e5:52:c9:d5:27:e2:1b:98:ae:64:36:64:33:f9:84:
0f:ab:13:b5:06:54:91:e7:b6:3e:de:b6:bc:bd:71:
af:bb:0c:17:5d:ff:92:82:63:de:39:db:3b:83:ee:
cc:73:13:d3:5d:5c:4b:a6:02:2e:98:fc:6d:3c:e8:
63:71:41:bc:06:8a:0a:d3:83:38:e3:72:64:60:ec:
d3:80:14:6a:41:ab:71:c6:b0:1c:d5:95:68:9c:58:
3b:2a:97:40:56:c7:43:a2:c4:f0:b5:06:d5:0e:77:
a4:ae:50:d9:c7:41:86:80:de:8c:bb:3e:b7:17:cf:
3b:b7:23:bb:61:17:e6:05:29:89:6b:79:cd:27:43:
a0:77:0a:6c:90:19:11:dc:4c:d2:13:d1:86:3b:08:
0c:1a:29:46:2a:51:e8:88:58:bc:11:7a:16:3b:de:
af:94:95:50:88:a0:22:99:16:a6:8c:63:0b:94:59:
98:d3:1e:a7:5c:90:b6:72:60:8e:9a:31:49:40:67:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FD:2E:FC:FA:31:6C:3D:2E:4E:3E:05:EF:5A:CA:D6:06:81:B6:51
X509v3 Authority Key Identifier:
keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b2:ac:85:a7:3a:1c:f2:94:21:86:67:80:53:e5:e8:af:f4:
c6:a4:b0:9e:4d:de:af:ef:0c:82:d4:ef:62:7c:ed:d0:d0:d2:
7d:b7:6d:3c:61:56:00:3e:dc:bb:30:8c:64:9e:db:0b:7c:f0:
38:74:ee:ff:c5:35:29:0e:cc:e0:5d:6c:60:3c:fc:43:a5:63:
96:33:8f:ee:9d:b2:ae:27:ed:d1:62:7c:b9:03:a9:00:a4:db:
1f:8b:50:af:38:4b:e2:4e:b2:9d:24:73:7b:da:25:0d:3e:e0:
84:65:14:a2:08:c2:d0:35:23:52:87:c2:91:08:2c:8e:95:6f:
a7:d5:d2:c9:be:c4:37:0e:1b:2f:8c:5f:7f:b4:67:58:5a:43:
b6:58:41:e5:52:91:e8:73:f0:93:81:95:11:4f:fc:c3:d9:3b:
a6:70:3d:f2:d4:e8:73:4e:d6:ed:f1:c9:91:91:5b:96:16:3d:
15:2c:97:54:42:f5:e5:d7:89:21:a2:c9:8e:72:1a:72:ad:d1:
84:54:c1:73:38:d2:5e:31:89:ae:8c:1f:93:a1:50:66:a6:ad:
71:ce:03:07:dd:e0:be:66:9e:6c:fc:a6:aa:8a:35:b9:36:88:
fe:6c:ce:44:71:df:66:10:e0:aa:45:c0:c4:b3:1d:2c:4a:4e:
fb:e6:b5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:06 2025 by rpki-client