Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
File: qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft (raw, json)
Hash identifier: wF0aHM1xKj7uUp9jhQRfxSM5fJ1VaCagf1Glp6Waj9I=
Subject key identifier: B9:98:15:42:95:41:21:34:BF:6C:3F:CD:03:04:94:20:06:E2:17:B8
Authority key identifier: A9:3D:A8:6B:4A:F6:0E:7D:29:A5:87:D0:1F:CC:98:B5:99:6C:46:DA
Certificate issuer: /CN=a93da86b4af60e7d29a587d01fcc98b5996c46da
Certificate serial: 019511A26E6A37025A89CC42B72E6BE76911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
Manifest number: 097C
Signing time: Mon 17 Feb 2025 02:00:12 +0000
Manifest this update: Mon 17 Feb 2025 02:00:12 +0000
Manifest next update: Tue 18 Feb 2025 02:00:12 +0000
Files and hashes: 1: LQO8Jka9B_Ga8wSNJ-H4GWRMbUM.roa (hash: 9Hoa1JZkYbMn9eEYjrKfJwUHw8DrzeOwQXlGIKyXqwo=)
2: qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl (hash: 4maJzZMmVzd2Nu5CLDDdmKb6va10wnoaaaq9F9s4WCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:6e:6a:37:02:5a:89:cc:42:b7:2e:6b:e7:69:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93da86b4af60e7d29a587d01fcc98b5996c46da
Validity
Not Before: Feb 17 02:00:12 2025 GMT
Not After : Feb 18 02:00:12 2025 GMT
Subject: CN=b998154295412134bf6c3fcd0304942006e217b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:b6:c7:49:5f:16:31:ab:ab:35:33:10:51:
47:b5:e8:0d:a4:2a:76:b8:0d:a7:8a:85:d8:13:da:
56:a1:a3:a3:fc:50:5d:72:6b:54:2b:3a:0c:77:c0:
0a:38:bf:28:28:01:28:ab:ad:2d:0f:3c:72:60:4f:
69:a2:95:30:11:ea:21:87:51:a2:f9:2c:6a:75:4b:
ef:2c:fe:fa:d4:14:f8:67:0d:ff:93:a0:45:e0:d7:
11:da:7e:0f:16:a3:e5:86:13:57:7b:79:a7:35:7f:
a6:b0:3b:f2:81:4b:b9:b4:c3:e7:e1:fd:c9:1d:1b:
3d:eb:69:74:10:d0:48:3c:85:99:f8:b9:b8:98:7f:
68:b5:4a:f5:72:df:0e:02:2f:eb:aa:2f:74:bf:8f:
6c:50:bd:5b:1a:78:5f:c2:2d:d0:57:dc:51:99:7e:
64:0c:10:cf:e3:28:1a:14:b5:e1:3e:ca:96:32:c1:
b8:ac:ec:a3:9b:7d:35:66:12:e2:70:80:30:10:7f:
0d:3d:41:f5:e7:d8:9d:82:94:75:24:60:3f:ee:90:
58:9c:66:d2:a5:fc:a3:d9:78:48:53:97:18:61:18:
7b:03:f9:c8:04:25:6a:c5:5a:50:d4:80:be:57:d6:
cc:2c:1d:73:68:a1:86:2e:67:73:2e:a1:43:df:59:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:98:15:42:95:41:21:34:BF:6C:3F:CD:03:04:94:20:06:E2:17:B8
X509v3 Authority Key Identifier:
keyid:A9:3D:A8:6B:4A:F6:0E:7D:29:A5:87:D0:1F:CC:98:B5:99:6C:46:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:db:89:a0:13:49:51:78:42:db:25:06:a0:0e:5b:d4:e2:cf:
24:0e:b0:01:67:4f:46:54:82:5e:ba:6f:c5:e9:2f:04:08:f3:
c8:8b:dc:31:cd:c0:c9:83:a0:3d:80:23:ef:fd:80:76:f4:dd:
ee:a7:ab:72:7c:3d:9a:2b:ec:ce:12:9c:24:7a:91:90:ac:bf:
40:a1:ba:ae:38:6f:2a:91:36:73:c2:f5:51:3e:b3:86:56:e2:
3f:07:14:a7:6a:e2:ef:ef:54:91:a8:33:18:c3:97:04:06:36:
41:1b:07:33:81:e1:ba:c3:c2:c5:2c:ad:5f:95:74:ea:48:52:
f7:38:69:ee:f9:1d:e9:85:bb:1d:ca:a5:aa:5a:e8:c6:da:a3:
05:df:17:96:02:a3:c1:c5:04:31:73:fa:ab:bc:54:7d:d1:56:
cb:c1:7b:ac:f9:94:d5:90:10:e4:6c:c7:2e:db:33:f1:41:a6:
f3:7f:c4:8e:97:d2:08:80:48:6d:6c:63:b8:cc:43:09:ea:21:
69:51:b6:63:31:b4:41:14:eb:9b:07:db:d4:98:94:a3:18:38:
e1:ec:83:f5:61:bc:69:33:ca:11:a0:58:85:24:90:64:b4:f8:
42:48:b3:c6:9a:4c:5c:1f:67:d6:d3:2d:7e:66:1d:d3:ab:67:
8a:f7:ca:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:21 2025 by rpki-client