Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
File: QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json)
Hash identifier: KNrksS3UgK5n4ylWVEnJDzE1tnq1e7anwSHHjtdYvLI=
Subject key identifier: 44:EF:38:5A:35:3D:49:1A:96:B0:8C:53:33:A7:AB:3E:C2:E7:D1:10
Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
Certificate issuer: /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Certificate serial: 0195116BE4CCC489FD86BB05F25517A56490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
Manifest number: 11A4
Signing time: Mon 17 Feb 2025 01:00:38 +0000
Manifest this update: Mon 17 Feb 2025 01:00:38 +0000
Manifest next update: Tue 18 Feb 2025 01:00:38 +0000
Files and hashes: 1: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: TMWGTCdMoee4vlBWyEC/yOiVF06ZV8NUC9ICoyNTkR0=)
2: kDxnmkry6GSjGehsL9ntYXTgGms.roa (hash: wkEfOOZJ9TKbc6rsvn871D/mFlSMnjRucRMB/y4Wzco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:e4:cc:c4:89:fd:86:bb:05:f2:55:17:a5:64:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Validity
Not Before: Feb 17 01:00:38 2025 GMT
Not After : Feb 18 01:00:38 2025 GMT
Subject: CN=44ef385a353d491a96b08c5333a7ab3ec2e7d110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:cd:a2:db:d1:f7:cd:98:58:39:fb:67:54:
2f:32:82:4d:e5:0d:ba:47:d0:41:ad:9f:12:78:a4:
2e:e0:cb:51:a4:7e:d8:d4:72:3f:df:0c:25:11:37:
71:cd:81:9e:89:cb:3f:7c:72:a3:f0:03:07:14:e1:
33:69:43:2b:c4:24:19:23:a9:6f:f7:4d:f8:8f:7e:
92:99:5c:6f:ae:ee:49:c0:cd:df:f5:4c:2b:f0:10:
85:a5:f3:21:35:ae:a6:a1:8c:d6:40:75:5b:d2:c9:
68:74:24:61:71:88:e8:89:1e:65:bc:66:60:dc:5c:
1c:b1:bb:90:d1:3b:9d:a5:16:33:34:a4:95:f8:fb:
6b:c7:1a:49:3f:a0:9a:45:8f:e4:4a:68:d6:59:be:
92:c8:dc:e8:c4:65:59:a9:f2:d0:88:c8:7c:86:6d:
29:98:f8:20:87:1f:0c:e7:4f:0f:49:81:ee:05:b7:
5f:13:45:10:00:ca:a3:c7:3f:2d:00:bb:db:16:19:
e9:50:38:43:07:39:d2:da:6e:ef:51:08:ff:bb:5a:
2a:72:84:bb:da:6e:b3:fe:8e:07:1c:87:d1:d6:d3:
83:e0:ee:e4:8b:81:3a:e8:b8:ff:e9:79:bf:cf:8c:
83:05:c7:34:97:16:6c:55:36:fa:06:b9:ef:1d:4b:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:38:5A:35:3D:49:1A:96:B0:8C:53:33:A7:AB:3E:C2:E7:D1:10
X509v3 Authority Key Identifier:
keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7b:77:45:89:df:fa:fd:4d:f9:37:5c:98:4a:8a:39:6f:f2:
59:0e:f1:67:dd:9a:9d:4d:7d:a9:8f:04:1a:24:32:b5:84:2a:
eb:45:7c:8d:79:b3:99:94:98:d5:84:94:bd:d5:c1:ae:31:51:
dd:26:11:54:5d:bf:00:fa:ca:47:66:fd:cc:53:bb:41:3d:88:
31:78:4c:c6:77:50:b7:eb:27:ea:0e:17:0e:38:60:83:e9:39:
50:71:54:40:74:19:ef:eb:eb:a4:d6:b8:36:8c:1e:96:ee:ce:
e1:52:dc:14:32:33:ae:47:81:1f:d8:ee:05:20:22:bc:41:34:
80:a3:9d:45:30:67:4e:7b:d4:16:e0:d2:d6:ec:7d:be:dd:7f:
d7:81:8e:3c:cc:f1:ee:9d:7c:3c:50:aa:49:1d:ac:4f:23:35:
09:9c:74:43:49:fa:d5:db:45:79:54:3d:43:37:d8:37:de:fc:
e0:62:cb:36:53:0e:86:a2:ca:0f:40:b3:90:4f:b6:76:46:1f:
cd:49:1e:df:4c:32:87:c0:47:b3:f9:64:7f:58:af:a5:f5:95:
b6:0b:21:6a:86:d0:6f:fe:ed:50:21:b6:04:21:92:b6:31:af:
9b:79:7e:ef:51:c3:a1:33:26:7b:a0:9d:43:30:f2:cb:8d:2e:
c0:2a:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:52 2025 by rpki-client