Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: a354ZJMdgQb9itReKS1CuPxXoaeKF80VI7viIJLcxtc=
Subject key identifier: 2E:A3:20:F9:BB:10:E7:C7:5D:54:9B:2B:A3:C2:2E:99:29:CE:98:41
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 01950ED88B8B6895BA60A602D4B7423B124A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 10C6
Signing time: Sun 16 Feb 2025 13:00:27 +0000
Manifest this update: Sun 16 Feb 2025 13:00:27 +0000
Manifest next update: Mon 17 Feb 2025 13:00:27 +0000
Files and hashes: 1: 6vC7E9fCr2S2YLpYl9NYikdwrIo.roa (hash: 0lbRVN/oMU6y83Ly4EI44/lCqnm0TAJ8jhFyCAz5oJM=)
2: VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa (hash: uLbbbwsMWu+2oa981JmoBqRGb6E5FUC1zqcIAUYzCRg=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: qjJY7miga69LbzcV5exyK8XsNR+EVsbQPRqkcmDIKRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:d8:8b:8b:68:95:ba:60:a6:02:d4:b7:42:3b:12:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Feb 16 13:00:27 2025 GMT
Not After : Feb 17 13:00:27 2025 GMT
Subject: CN=2ea320f9bb10e7c75d549b2ba3c22e9929ce9841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:f2:af:9c:2d:2f:b3:2f:ba:f0:de:a0:3e:
57:97:b4:c4:4b:f9:5f:d3:78:3d:23:96:0b:cc:1f:
73:e2:ea:33:51:cb:4a:c8:fd:30:c8:99:89:d3:a9:
92:5c:8f:0b:4c:ce:37:90:b6:fc:56:ce:14:da:27:
12:46:6a:34:71:ac:e9:89:0b:c8:db:b5:5a:83:a3:
56:47:c2:5c:04:ed:4a:f5:93:5b:62:ce:ef:ff:35:
ad:b1:f9:ba:7c:af:2b:da:e4:a8:ef:5c:e6:39:f6:
b3:d6:f5:21:b4:44:15:21:ec:6f:96:00:c7:b8:70:
0d:d8:ff:fe:9c:dc:b9:94:ea:85:f4:4a:73:b6:e8:
78:68:ab:c4:33:36:18:a2:23:68:e1:98:7c:93:81:
cb:9b:f7:65:9a:f5:7e:d8:7d:44:10:a2:68:82:da:
23:1c:8b:f7:91:9f:8d:c2:6f:63:74:37:ef:64:e3:
d2:c7:21:16:c9:62:0c:c1:84:64:40:26:c0:25:29:
d6:d6:c7:e9:d5:ea:c5:9b:f5:79:de:0e:d3:85:54:
51:58:b1:de:c8:11:6e:8a:0c:d2:eb:c3:46:a5:2d:
57:e8:45:6a:f8:ce:e8:c4:a5:ef:bb:63:42:77:54:
86:25:0d:09:6a:c4:3e:b0:c5:68:58:7e:9f:93:bb:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A3:20:F9:BB:10:E7:C7:5D:54:9B:2B:A3:C2:2E:99:29:CE:98:41
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c8:0f:f7:68:98:80:df:ba:32:a7:f7:ca:63:7f:d8:fd:ee:
be:e0:04:c3:e5:16:52:9d:4d:4d:e1:e2:d1:bd:04:3b:2d:bd:
d8:7f:89:c3:ff:d0:0f:6f:51:c4:36:bc:d2:67:ae:d1:60:d8:
21:a8:25:f6:c2:18:ff:14:fa:d0:6c:70:14:c4:ab:81:7e:3c:
33:10:fe:42:a1:64:e9:4b:c9:a0:ee:7b:7d:69:96:dc:e1:77:
d3:25:6e:26:24:65:5b:0d:a8:d7:d6:19:04:80:02:ec:37:6a:
ea:fc:5d:d4:9f:da:9d:66:f3:35:ef:96:b4:1d:da:d2:ef:8c:
6a:ac:95:af:36:0d:a2:e7:be:9d:0b:2a:ea:c0:11:89:3b:20:
48:6b:61:9b:ef:cf:47:73:82:37:f0:26:e2:f3:98:2c:d5:c1:
ef:e7:30:3b:6a:66:c3:23:5c:e6:ca:bb:6b:b0:96:f7:bc:81:
55:49:14:5d:7f:59:2f:80:fb:7d:3b:e2:5c:b8:1c:3a:a2:92:
a4:56:92:a6:f8:3b:9f:9b:45:58:aa:45:ce:67:f4:ed:ac:b2:
44:58:94:a5:f6:b7:8c:2d:da:b0:e1:33:a3:0b:18:38:48:1b:
ae:28:3c:54:ab:8f:62:d9:57:cb:6a:7c:a2:0d:55:b8:22:fc:
18:c6:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:52 2025 by rpki-client