Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File: qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier: PITagcwcLTKQRcBReS2lyvhP70a7VrfqsLmfklGyYBA=
Subject key identifier: 13:6A:3C:26:49:20:FB:0A:94:15:7E:9E:EB:D6:75:9D:E5:47:98:27
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer: /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial: 019511D95BDF543FAFC42D0E91A321A24F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 03:00:12 +0000
Manifest this update: Mon 17 Feb 2025 03:00:12 +0000
Manifest next update: Tue 18 Feb 2025 03:00:12 +0000
Files and hashes: 1: 2Q0kx85pwBzfIMwLp9ldarIpih0.roa (hash: D6p/IFbJlNokn2XAUVSHhwdlOMDmGJADmbqv1d/nsjg=)
2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: RuT1M9QmdPpLKY2bmdxCFQCk7FqPCF5KWb6sadv5J40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:5b:df:54:3f:af:c4:2d:0e:91:a3:21:a2:4f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Validity
Not Before: Feb 17 03:00:12 2025 GMT
Not After : Feb 18 03:00:12 2025 GMT
Subject: CN=136a3c264920fb0a94157e9eebd6759de5479827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:73:57:ab:0a:98:9e:bf:12:ff:e3:a7:b6:
73:2c:1f:f5:f8:33:a9:7c:bb:0f:14:33:4d:51:7b:
9d:77:fc:e4:40:ef:e2:35:aa:02:84:06:b5:28:f1:
eb:b3:75:ee:78:09:d6:1b:fe:09:bc:22:a2:f9:e8:
d0:41:b9:3c:b7:ad:f2:06:4e:8b:f4:a9:57:d5:f7:
ac:dc:99:93:ca:2a:1e:3d:f1:5b:2f:0f:58:e8:2e:
a7:99:12:a6:48:c9:f6:d3:f9:22:97:53:9a:b3:fd:
f7:1b:af:67:95:7a:c8:7d:a4:e3:a7:a5:74:b6:77:
00:db:fa:b2:77:9b:97:b7:f4:06:a1:59:80:0f:b0:
ad:87:d3:1a:f8:63:58:c4:71:34:66:20:f7:c3:5e:
14:9c:2a:b9:b9:5f:e7:08:77:fa:44:a9:7a:34:ff:
44:dd:5d:b6:65:71:27:d8:fa:fa:b0:51:7b:16:6f:
b0:37:c3:47:c1:fb:c7:7e:67:22:10:8f:7e:18:9c:
d5:a6:57:63:01:b5:b1:ee:dd:14:4a:2f:cb:1b:39:
c7:dc:44:f6:57:e8:71:39:d3:40:0b:d7:41:b8:c0:
b4:93:92:65:6c:41:cc:5f:d2:e9:d4:5f:34:f7:03:
a1:71:4c:3a:07:54:33:39:1f:86:8b:12:cb:35:a7:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:3C:26:49:20:FB:0A:94:15:7E:9E:EB:D6:75:9D:E5:47:98:27
X509v3 Authority Key Identifier:
keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:12:a9:b9:10:f0:85:f3:11:46:69:41:82:4a:49:f5:7f:0a:
72:5b:5f:f6:61:d2:5e:31:c0:b3:10:7f:72:e5:fd:81:10:7b:
c6:0e:55:9a:2a:8b:64:e7:3e:55:4c:6b:82:5b:b2:a0:9f:86:
52:42:6a:3f:53:2d:08:37:d6:8b:ac:ec:b0:bb:16:95:78:d8:
7c:c0:4b:be:83:df:dd:a6:82:c1:03:40:8e:6f:38:7e:74:26:
0f:c7:90:32:f6:73:cb:69:0d:5d:67:c2:ee:1a:45:27:f0:6f:
44:e6:82:fd:6e:41:d8:a9:0c:aa:61:f0:3f:e5:ae:07:c2:f3:
9f:8f:02:b4:d8:69:37:28:8d:cd:b3:1c:5a:1e:da:84:91:56:
a2:df:c3:85:28:cc:15:15:f8:e4:b4:3c:1a:91:15:91:e0:67:
e1:7b:af:b1:7e:cd:50:f6:a3:36:89:45:b8:28:3a:10:d1:d5:
cd:0c:67:23:3f:ba:7c:48:12:1f:0b:1d:64:81:73:08:ad:07:
90:66:f2:1d:be:d9:8e:88:df:78:a8:ad:e3:f4:eb:50:e2:cb:
4c:eb:9c:dd:bd:f9:99:e5:83:b9:b2:3c:90:ae:19:bc:f8:67:
45:6d:fd:bb:60:97:c0:38:63:a4:25:05:65:80:af:b9:bc:27:
1a:07:59:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:00 2025 by rpki-client