Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: nQ5RXS7tBnW6WGZAZs+2p1qEkwFV/OB7b7jm15Jb6go=
Subject key identifier: 46:1D:47:49:77:29:DF:FE:FF:F4:D7:8A:83:FA:12:13:14:CC:8A:AA
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 0195109005BB62F9855CF4B48778243D1952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 0C53
Signing time: Sun 16 Feb 2025 21:00:28 +0000
Manifest this update: Sun 16 Feb 2025 21:00:28 +0000
Manifest next update: Mon 17 Feb 2025 21:00:28 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: Q2KMdBCi/JSKAB73KM/ulZHpNbnp5dA+z9zfq7WRMOs=)
2: L4roRdlkRFF_L_7wYpfaNa1dLaA.roa (hash: KuAnzPBgxp55/NCR6oySR+pQEyeN2HDAB6NF7tBzr6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:05:bb:62:f9:85:5c:f4:b4:87:78:24:3d:19:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Feb 16 21:00:28 2025 GMT
Not After : Feb 17 21:00:28 2025 GMT
Subject: CN=461d47497729dffefff4d78a83fa121314cc8aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:62:de:7a:25:b3:55:2b:fe:a5:8d:a5:53:
7c:cf:3e:86:1c:4f:b1:10:c0:2f:93:cc:94:11:2b:
7e:a0:f9:54:42:33:fb:2b:83:a2:5b:f9:b2:b8:99:
67:98:79:16:49:d7:af:c5:e6:ed:61:d9:82:95:2c:
61:d6:be:97:b4:1f:b5:d5:a4:e5:d9:61:67:57:3f:
86:5f:e2:df:e2:25:f4:18:8d:2d:08:89:8b:19:19:
fa:4d:bc:76:97:30:1a:eb:2b:d5:65:c6:a0:86:18:
53:2e:4a:f6:6e:5d:db:60:bf:63:cc:bf:a8:62:b7:
22:38:9d:8f:a5:3f:a6:c9:96:cd:a5:d8:19:ee:c4:
e7:b3:f7:8c:a4:af:57:c0:40:af:8a:0a:9d:7d:9d:
08:5e:4b:07:44:96:65:f7:c6:6b:0a:26:57:be:77:
57:11:c0:d5:73:f5:41:06:85:f9:d4:63:40:bd:8b:
d9:73:75:69:14:ba:e4:7d:12:37:ae:c6:7c:46:51:
5a:d9:a3:89:5d:c0:a6:e5:70:75:a4:fb:fc:59:f2:
38:33:2d:0d:2a:dd:4c:78:2d:4e:70:34:f8:58:37:
73:c0:e3:50:42:81:1c:7b:11:89:ab:2e:df:78:c4:
1b:ca:9a:19:cf:83:6f:46:a4:88:b8:69:43:cb:fe:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1D:47:49:77:29:DF:FE:FF:F4:D7:8A:83:FA:12:13:14:CC:8A:AA
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:89:16:ce:85:f5:83:65:dc:e0:14:0e:5d:02:44:ab:c1:89:
0d:3c:c1:b0:44:64:17:2d:4b:a6:71:a1:40:b8:00:c9:d9:42:
c7:b3:db:0d:7b:b0:b5:af:1b:cf:40:c3:b3:6d:c5:ba:7a:fd:
aa:d7:34:04:e1:d1:d4:4f:49:b5:13:3a:da:d0:81:8c:d7:de:
b7:04:d4:b1:6b:fa:b9:26:55:fc:e1:69:69:48:05:c6:81:77:
28:a5:08:dc:1f:73:21:c5:59:c1:9d:2d:b3:10:26:5f:95:34:
d1:37:de:ce:7d:a8:59:43:a8:c5:30:0e:ec:c5:51:2c:07:0e:
71:65:0e:aa:d5:93:35:26:bb:59:1e:41:96:bb:bc:b4:28:95:
21:ef:7c:fa:a6:0d:a6:18:2d:1c:78:36:99:a4:77:50:09:bc:
fd:27:f4:b5:46:54:2a:05:3a:d5:19:34:db:95:19:3a:bc:2c:
66:df:41:33:32:2c:7c:22:c1:53:28:aa:d4:ed:02:61:0d:43:
4b:10:25:94:c8:72:18:49:7a:19:9b:a4:29:eb:8d:fa:0f:83:
42:bb:92:af:d2:b0:05:6b:11:ca:e4:18:fb:db:70:8b:dd:dc:
c9:55:6d:e1:d7:2a:e4:72:6a:eb:d3:7a:5a:39:d5:e0:dc:97:
37:4a:f5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:09 2025 by rpki-client