Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: Cw4W1ACRdcxus7zz0pA3nbdCrkuEMpfEnsxUKf6KdjQ=
Subject key identifier: CB:85:9F:7B:AE:25:81:5B:AE:6D:96:E2:F9:BA:3F:FA:D0:4F:30:1F
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 019512105A131DE74A20CE0A351CD5CBF860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0847
Signing time: Mon 17 Feb 2025 04:00:16 +0000
Manifest this update: Mon 17 Feb 2025 04:00:16 +0000
Manifest next update: Tue 18 Feb 2025 04:00:16 +0000
Files and hashes: 1: hILMU0qMjMm6bmWNobLKh35z6fg.roa (hash: tRLWcg9XAdmGTHy58HB7PkQi1r29x3Hn5q5I5oWT1hs=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: tvMB9G183mDIcJ9wqvpgECB7HBWCfMs1JJgwF87WjUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:5a:13:1d:e7:4a:20:ce:0a:35:1c:d5:cb:f8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Feb 17 04:00:16 2025 GMT
Not After : Feb 18 04:00:16 2025 GMT
Subject: CN=cb859f7bae25815bae6d96e2f9ba3ffad04f301f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:e4:ba:0f:88:08:cb:ee:94:db:4a:6c:dd:
9d:d5:09:b0:2b:43:53:20:bf:24:c1:bb:f3:e7:67:
8c:39:19:e0:bb:81:a7:55:95:de:72:bf:c4:a4:45:
8d:73:86:47:74:fa:04:32:09:2e:d1:fd:41:11:bc:
f0:62:a9:ec:ff:8e:75:af:62:a7:b1:bd:76:bf:ca:
7c:a7:dc:b3:d1:b7:24:8b:0f:a1:b1:e8:c9:60:07:
b8:37:39:39:18:da:e5:77:d7:42:ac:ba:0e:56:30:
3d:32:cb:92:f1:e0:85:61:b0:18:03:f8:c8:f2:fc:
4e:21:80:62:6a:c0:e3:f3:88:80:aa:ed:3c:36:9b:
d2:89:56:e8:cc:c3:cc:72:72:f4:e9:c0:52:29:f8:
07:cd:ce:48:3b:01:8e:1a:b6:5e:d2:0d:70:72:58:
17:28:bb:ed:61:31:d1:8e:e2:a4:77:f6:f0:db:8c:
ec:0e:d4:cd:e7:97:91:6b:35:1f:ce:ad:9f:30:8c:
e1:00:a1:d8:31:8a:27:6c:2e:22:64:39:7c:2a:16:
04:42:fd:26:7b:0a:40:2b:bd:0c:48:d8:15:9d:37:
a4:e0:e3:ed:e4:d2:7c:26:ab:ae:c0:7e:71:8f:8a:
b8:05:61:e5:18:19:4d:3b:6f:b9:23:9c:05:0d:d0:
e7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:85:9F:7B:AE:25:81:5B:AE:6D:96:E2:F9:BA:3F:FA:D0:4F:30:1F
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e1:3c:03:97:15:b6:66:50:d3:6d:de:3b:c5:37:06:49:30:
db:bb:bd:38:9b:2f:40:ee:2a:ed:14:ec:fa:00:4b:89:42:2a:
3a:70:41:48:ac:b9:73:9f:1a:de:5c:e3:0a:1d:c0:14:a1:67:
90:d0:8a:2c:d5:38:bb:d1:e1:fb:31:0a:d1:f9:cb:94:e9:d1:
a1:9c:c3:a7:46:2b:7d:de:99:3a:8c:fb:8d:d7:45:69:ee:d8:
b9:50:ed:37:42:1e:fa:0e:3e:e1:0a:ac:bd:6b:77:c4:c0:21:
ff:0d:47:6d:0b:f6:23:4a:44:dc:6b:8b:b4:97:0c:c3:76:43:
91:f8:78:61:ef:6a:05:6e:29:2b:00:98:68:fc:3f:ab:21:99:
2b:90:c1:62:ec:d6:85:13:e1:06:47:56:8a:e3:5e:10:83:0b:
03:10:79:28:b9:c3:b8:a3:5c:4c:02:6a:15:39:71:9e:e4:4a:
f8:fe:91:90:24:cc:cf:50:38:b6:2b:f2:7f:ad:1e:1f:dc:8f:
35:b6:b3:8c:82:b6:a3:ad:65:35:6d:24:d0:9d:5f:1e:42:04:
4f:d9:48:e1:40:7e:50:a2:4a:7e:72:18:e4:ce:db:ec:4c:52:
1a:e2:91:ad:76:ea:fc:ab:73:d3:ae:64:ef:30:55:4e:e9:3b:
d5:26:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:30 2025 by rpki-client