Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
File: QlQ5sMp_FNqpthsRvRe9zBunOGw.mft (raw, json)
Hash identifier: FTM7t+b/STXBjbD576U+6SbvI4dlezxM9LHUxdhbZtg=
Subject key identifier: D0:9C:A5:2D:D5:02:62:26:D1:06:03:01:15:1B:9E:18:1D:02:F8:0D
Authority key identifier: 42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
Certificate issuer: /CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Certificate serial: 019512476FF2B19EF1A8C0342CE9C62C69DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
Manifest number: 043B
Signing time: Mon 17 Feb 2025 05:00:26 +0000
Manifest this update: Mon 17 Feb 2025 05:00:26 +0000
Manifest next update: Tue 18 Feb 2025 05:00:26 +0000
Files and hashes: 1: AKOMQZeZNylU7lZ2jfftfFZ_Z4U.roa (hash: Nv09RJ//WYPjGsqetOMSZHjfsxpAq/7Zyyhfe6u1lRs=)
2: QlQ5sMp_FNqpthsRvRe9zBunOGw.crl (hash: C89b/YkkkrMWZ7BZCQuxM1ZlEzTX6yLVT1qwDsmqyo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:6f:f2:b1:9e:f1:a8:c0:34:2c:e9:c6:2c:69:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Validity
Not Before: Feb 17 05:00:26 2025 GMT
Not After : Feb 18 05:00:26 2025 GMT
Subject: CN=d09ca52dd5026226d1060301151b9e181d02f80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:7a:99:d4:27:cb:ae:13:b2:92:37:a2:a6:
d3:59:67:b8:b2:1e:82:f0:fa:df:ae:25:fe:85:9b:
8e:d1:fb:14:8e:da:04:45:0e:93:b4:44:00:82:6e:
ff:f7:29:f0:f5:9d:52:f2:26:50:9b:21:bf:86:c5:
dc:c7:72:3f:00:f5:cf:47:46:8c:1d:9e:a1:93:b4:
01:35:bc:bd:97:b0:80:bd:49:d6:bf:ff:a7:18:fa:
99:d1:a1:fc:c3:39:e2:10:f8:c1:1e:16:25:10:77:
1e:8f:a1:35:27:11:7c:ed:a2:0b:11:ef:1b:d2:9f:
b6:b4:3f:9b:94:1e:d0:6f:9f:d1:8e:9e:8c:0e:37:
06:2d:5d:32:01:06:c5:aa:63:9e:0b:e7:f7:22:8c:
f6:92:5e:5c:cb:3f:de:f9:9d:34:dc:d8:99:88:d0:
20:62:bf:f9:02:3a:1b:1b:96:72:3f:58:39:3c:6f:
4f:e2:e3:ac:13:58:5b:c0:4a:2c:56:13:d0:1e:6f:
30:c9:e4:07:7d:cd:13:e6:c5:a7:a4:ef:70:72:2e:
59:d9:a9:59:d0:ca:80:63:5c:8e:9c:d8:3c:e2:69:
e8:b8:02:f4:72:3a:42:97:a1:c3:40:02:fd:56:af:
2c:19:f0:a7:45:41:27:64:e6:d6:98:4d:e1:0b:36:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9C:A5:2D:D5:02:62:26:D1:06:03:01:15:1B:9E:18:1D:02:F8:0D
X509v3 Authority Key Identifier:
keyid:42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e9:2f:e6:95:fa:7f:86:57:a2:e4:a8:ef:ad:6b:ab:1a:cd:
f9:26:da:64:68:51:ec:c9:3f:1d:b3:1b:39:7b:92:1c:bc:a9:
11:b0:42:10:a8:81:ee:aa:af:43:c6:d9:9b:37:d5:60:e2:df:
dc:fb:e6:d2:75:15:47:4c:a2:64:b3:61:1d:4e:ad:d8:26:dc:
51:2a:88:41:b2:e5:42:c6:10:f1:89:6a:1e:1b:84:b4:33:c4:
e3:e0:c4:2e:50:8a:e7:9b:81:c7:cf:02:31:7b:d6:e1:5b:41:
ed:83:57:79:67:3d:f7:e2:8b:3d:04:a9:ac:7e:d0:a5:3a:0a:
3e:4b:e7:ec:ec:86:cf:d7:14:7a:cd:67:3d:67:bd:14:5d:b2:
e7:ca:ae:50:1b:12:45:29:81:e2:08:99:1a:42:6f:db:df:54:
bc:e7:e5:ac:b7:f7:5b:6b:51:d8:46:7c:5f:37:5a:e0:b4:8d:
c6:e5:1b:d8:6c:b2:c7:33:bc:fb:04:98:5e:30:b2:ca:ba:3f:
a3:10:70:6d:5b:aa:63:4d:d9:7a:05:a0:2b:1d:db:7d:f5:ca:
4a:ee:33:c5:dc:7e:9a:57:cf:4f:d9:ad:ab:89:91:22:c7:05:
8d:2e:97:3f:72:a4:cb:52:cc:5c:20:1d:73:20:93:e0:44:cf:
e8:27:96:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:29 2025 by rpki-client