Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: k4cRE0QLm3UIHmZyIUAZDgZBKrntBgmMr9suWfzcQJ4=
Subject key identifier: 70:BB:F4:B0:C3:74:8A:0E:78:18:0E:2B:36:C6:BD:15:7B:77:29:2A
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 01951134B0257BDB6EE485499B7E0226C274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 0DE9
Signing time: Mon 17 Feb 2025 00:00:20 +0000
Manifest this update: Mon 17 Feb 2025 00:00:20 +0000
Manifest next update: Tue 18 Feb 2025 00:00:20 +0000
Files and hashes: 1: ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa (hash: FoRf6zKDxzFzqNvRaEaSA99AYo7HeXRCWwfxlBkAE5Q=)
2: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: vDuaRI7QE+JTy//F63/HAOqLg6zOe9loCzgKW52gWl0=)
3: jJHHC0ke4zgy7tsBzgOSiuwx8KQ.roa (hash: y6+yWoGbJ/QqPwBhk36qsFBsa4k6khZqZ0ihGtdEnfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:b0:25:7b:db:6e:e4:85:49:9b:7e:02:26:c2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Feb 17 00:00:20 2025 GMT
Not After : Feb 18 00:00:20 2025 GMT
Subject: CN=70bbf4b0c3748a0e78180e2b36c6bd157b77292a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:b7:21:43:18:66:11:94:9e:21:58:19:8f:
dc:2c:e2:62:64:5e:1c:19:d2:17:9b:f4:cb:2a:e6:
dc:ff:b9:78:af:3a:83:5e:29:d3:1c:fe:8e:2a:e5:
51:9e:06:d0:67:15:b3:6c:ae:f0:64:23:65:7a:54:
2b:26:d3:fc:e6:b5:0f:8c:f1:0f:3b:90:8a:84:33:
a9:ec:4d:ca:c7:af:c4:4d:24:4e:b2:91:6e:e3:2f:
12:a9:88:d1:4f:d4:e6:53:7f:20:12:87:ec:69:86:
7d:e5:05:83:6a:b6:e2:8f:8b:b2:0e:91:71:1d:94:
f0:20:3f:f0:b4:55:af:0b:a9:ff:61:68:d4:52:82:
50:ad:b3:13:c6:fc:0c:ed:2f:ab:d7:b5:55:7c:d6:
fb:61:58:fe:36:b1:5b:7e:22:5e:09:15:4d:fa:f4:
67:21:40:be:e8:c3:35:4b:45:21:37:e5:9f:17:02:
af:8f:a8:6f:0d:d5:8c:47:27:67:c9:6b:aa:51:db:
9d:48:6c:77:ae:83:00:96:e2:21:50:3b:6a:49:e4:
bd:e0:8e:62:b4:28:fc:5a:1c:91:87:58:d1:26:93:
90:c5:5b:e4:26:9a:f0:2c:03:a3:90:98:b5:47:d3:
f9:43:c6:55:15:15:bd:26:14:07:4b:01:58:c6:49:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BB:F4:B0:C3:74:8A:0E:78:18:0E:2B:36:C6:BD:15:7B:77:29:2A
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3e:67:fc:b6:b7:eb:f3:ff:00:ab:80:7b:ea:7b:ea:8b:8b:
ca:39:63:d0:5b:fe:c1:8c:9b:34:f0:fc:df:ee:67:a2:6d:5e:
53:2f:06:f2:7c:a3:f5:5c:95:32:02:76:fb:99:75:36:b6:46:
8b:23:9a:7c:23:cc:e6:3e:f8:48:bb:5a:05:cc:3f:a8:f7:b0:
00:f0:a3:99:ea:cc:a5:38:99:6b:ce:2e:31:b5:d8:03:b9:62:
a7:01:2d:24:00:ae:fb:3f:87:68:f0:e0:9a:9b:7e:be:0c:13:
66:f6:30:44:3f:84:5d:9d:14:0b:6f:6c:15:af:d2:11:de:9f:
9a:aa:98:d5:d6:f7:f4:d5:8d:f1:f0:29:90:81:fc:2d:23:08:
dc:ae:6e:c7:63:16:33:ca:76:ec:2e:b1:37:28:0c:a6:61:28:
e3:17:94:92:90:b4:92:5e:ca:2f:0c:e4:89:58:1a:46:3f:f1:
71:1d:4a:ec:ab:4a:e9:1c:b7:a9:12:8b:93:88:32:7e:89:11:
d9:2b:a1:f9:b6:b0:34:c1:f1:6c:fd:5c:a0:d8:16:fe:78:c2:
58:d7:70:4e:8b:d4:d7:bd:45:a2:4b:1d:6b:94:e6:79:d3:7a:
54:68:4d:00:35:35:cd:e2:a9:ff:b9:e4:7b:0f:16:40:47:91:
3a:3d:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:56 2025 by rpki-client