Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: Fams82UgEY1iWUx5GwXdqlhgFHjuHIzxksja88NkM4k=
Subject key identifier: AF:3A:4F:47:06:7B:C9:0F:E4:64:72:21:33:3D:5C:16:9A:84:13:71
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 019511D9ACE6894C3BFE6D26438DE03432EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 03:00:32 +0000
Manifest this update: Mon 17 Feb 2025 03:00:32 +0000
Manifest next update: Tue 18 Feb 2025 03:00:32 +0000
Files and hashes: 1: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (hash: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=)
2: PoyytAvXOYVvBU28xnJ13dEQvjk.roa (hash: i4hitHtlLKsldZIYK5cClvI2iYzkK5dcUJcf/PHsfy4=)
3: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: RaxLxT9Jwe+BypMdmIGzX7D2gVbws8hKi6TUq0qXc+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:ac:e6:89:4c:3b:fe:6d:26:43:8d:e0:34:32:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Feb 17 03:00:32 2025 GMT
Not After : Feb 18 03:00:32 2025 GMT
Subject: CN=af3a4f47067bc90fe4647221333d5c169a841371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:fd:36:bf:9d:69:18:0b:08:a3:f6:42:e0:
e5:2e:eb:6f:2a:f1:ca:83:9a:31:4c:2d:16:07:05:
c1:64:6b:c8:ce:5a:c7:d2:5b:a1:aa:03:2f:a8:89:
42:7a:d1:2c:32:1a:f2:88:49:4e:4d:07:c7:0e:5d:
23:29:57:7b:79:6a:9f:4e:ae:37:d9:1e:70:01:6c:
96:75:fa:3c:80:c1:06:fb:e2:b5:fe:58:b5:08:08:
75:a5:ac:e0:1a:1e:f3:91:fb:a4:58:29:ee:79:9a:
4f:81:57:90:1d:1e:87:53:24:4c:03:d9:1e:c7:cf:
f4:9c:08:a0:d7:ba:06:40:cc:24:2f:19:dd:9d:c6:
d9:8e:9b:93:c6:e7:88:9d:66:82:d8:e8:12:92:a2:
c5:b1:3f:12:17:07:b8:29:3f:5b:35:ca:c0:3b:6b:
0c:c4:17:e5:c3:04:39:c5:05:8f:54:68:05:0e:fa:
ad:15:01:83:cc:39:75:78:e2:19:b8:f4:9e:71:9d:
ba:b2:4c:3f:82:b9:30:e7:a2:2b:f4:e7:38:40:f0:
c1:a7:3d:68:d9:2f:03:bb:22:9b:2f:6f:7e:ac:a1:
a5:4c:50:3e:a8:f5:77:03:9b:c5:c2:6f:3e:cc:c9:
1b:74:1a:78:62:c0:c0:2a:25:b9:be:27:8d:a1:8b:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3A:4F:47:06:7B:C9:0F:E4:64:72:21:33:3D:5C:16:9A:84:13:71
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:09:52:4c:01:3a:3b:af:ef:3c:ba:1d:5c:25:74:71:a6:8a:
33:2a:e9:c6:a0:13:08:df:5d:0f:70:94:84:d2:f9:19:c0:51:
20:aa:39:b6:da:b5:b3:61:07:6d:79:78:bf:98:ac:d5:65:da:
33:fe:d7:c1:bf:02:5a:b3:6d:63:c9:49:df:e4:8d:a0:f0:b3:
65:d5:8a:c6:3d:7e:29:7c:58:5c:72:a7:eb:f7:12:03:90:d3:
27:05:25:63:16:ae:35:25:3a:59:ba:85:f0:27:c0:fa:94:a0:
26:60:b0:85:dc:75:9f:69:85:dd:47:dd:4c:1f:f7:7e:59:37:
4f:d2:77:ca:bc:7f:64:27:c9:0c:15:f2:a6:9c:fa:df:1f:7b:
41:b2:1a:11:f8:51:78:49:0b:6b:38:53:b0:51:04:3a:33:8a:
35:70:7d:48:b1:19:ab:2c:fe:7c:86:f7:f8:bd:2a:3e:76:a7:
04:48:b0:85:27:2e:13:dc:36:84:33:59:a3:6f:e2:90:db:96:
9e:92:08:6b:b4:ca:7c:f1:0f:6e:13:df:a0:28:2e:e9:b9:0a:
8e:ea:76:a9:21:89:6e:ab:03:55:fc:be:55:1e:92:b4:dd:18:
31:86:b7:7c:a6:b1:a0:74:c3:9c:8a:8c:3a:47:b6:91:94:ec:
7e:e8:9c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:36 2025 by rpki-client