Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: pA2LO6z7LlP80uWAFo/jLed8oUP7UCOLHNzBpCx50BU=
Subject key identifier: 13:26:98:30:DB:D1:9E:83:12:8D:2F:F6:6F:A3:B0:B0:0C:0E:26:B0
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 019511351B33F90F4D768CF3B99677A22F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 00:00:47 +0000
Manifest this update: Mon 17 Feb 2025 00:00:47 +0000
Manifest next update: Tue 18 Feb 2025 00:00:47 +0000
Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=)
2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: EFBsVJZ948x/KXjGAI6QPDZ7gjYxzx0DMlSXR1G2HM4=)
3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:1b:33:f9:0f:4d:76:8c:f3:b9:96:77:a2:2f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Feb 17 00:00:47 2025 GMT
Not After : Feb 18 00:00:47 2025 GMT
Subject: CN=13269830dbd19e83128d2ff66fa3b0b00c0e26b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:74:31:fd:e1:7c:6e:0c:62:f4:05:1f:b8:
93:14:d7:aa:fc:f8:bc:7d:c8:fa:04:e7:96:81:18:
5c:ce:07:f1:1b:2a:05:08:37:37:4a:08:2f:0e:bd:
2d:0a:9a:a6:a0:f8:b5:fb:8d:85:a7:ac:88:d9:7a:
c5:79:bb:be:b9:54:23:36:13:a7:d1:f1:d5:c0:0d:
ab:2c:7a:41:5d:a8:7e:7d:93:3c:3b:23:77:b3:13:
71:fc:5b:95:61:6a:3d:36:00:8f:3e:fd:09:ba:e9:
16:db:b9:b2:8a:23:52:0b:a0:0a:8f:a9:f6:fc:ef:
73:84:5f:73:3e:ac:43:23:38:36:ac:a7:24:bc:4a:
df:1d:0a:d0:f6:e0:bd:df:02:82:20:f2:8e:81:c1:
86:4e:c2:4f:68:4d:a7:1b:23:07:45:c9:20:3a:e6:
e0:28:ac:3a:24:5a:af:2c:e4:9b:d0:fa:b3:c4:90:
6c:00:4a:2b:62:21:e3:96:12:68:21:08:ce:b9:0c:
3d:f6:d6:07:c7:82:b0:47:00:37:21:6c:2d:63:3d:
65:93:ca:d4:79:cf:bc:c3:0d:e0:00:a3:f9:4f:6e:
b9:60:66:42:e5:b4:ca:1e:dc:29:bb:92:fc:e0:62:
33:99:ce:16:bb:37:39:87:77:f7:19:d3:9a:5c:89:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:26:98:30:DB:D1:9E:83:12:8D:2F:F6:6F:A3:B0:B0:0C:0E:26:B0
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:00:c3:08:56:59:09:6e:ce:01:78:73:02:cf:fd:e1:85:4f:
dc:47:03:31:8b:30:45:de:9e:51:1b:b6:c9:6a:d7:8d:fa:d0:
53:3f:3b:6b:a3:f7:52:62:c4:be:82:58:06:cf:3e:b9:5c:3d:
50:70:4b:c3:3a:e5:6f:06:a1:82:fc:f6:8a:4f:a6:ac:e8:26:
93:1a:9e:b4:b1:c4:a6:97:68:71:a5:f9:24:5d:f7:dd:b1:93:
4b:f6:30:9a:fb:28:d2:03:fc:a3:ae:83:3f:b3:9b:78:d3:74:
7c:b4:8a:7b:13:fe:3c:fd:6a:0d:9c:38:ad:85:42:2a:27:a5:
7c:e0:6c:dd:c5:22:07:b1:00:ce:b9:b8:93:6e:cb:51:40:b1:
d4:09:1c:d2:c2:f1:59:3a:c4:a2:27:53:1a:47:40:fa:5a:d5:
0b:90:dd:87:cd:86:38:02:24:9e:83:cc:0b:81:17:c5:a9:7b:
25:ed:c2:24:21:ef:1d:ca:ff:6e:ab:4b:19:bf:83:02:e0:54:
c0:01:3d:2f:75:f7:6d:ee:b9:25:ee:88:04:b0:b3:8e:4a:50:
7e:3a:12:29:17:c3:55:b9:33:fb:a9:4b:ef:b5:48:76:b0:56:
71:46:88:d8:81:4f:de:ac:57:46:f0:e6:61:0c:15:0f:87:cf:
19:90:be:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:59 2025 by rpki-client