Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: 39w0rpuBjqVHp5tCFzuBZRkRATeqSqCcHIcaDOPX9/o=
Subject key identifier: 0F:0D:CD:50:37:95:24:FE:1D:A8:10:B7:47:D4:78:83:C7:11:B8:F3
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 0194C3F5F69DDB9568B7690726441F571AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0816
Signing time: Sun 02 Feb 2025 00:01:03 +0000
Manifest this update: Sun 02 Feb 2025 00:01:03 +0000
Manifest next update: Mon 03 Feb 2025 00:01:03 +0000
Files and hashes: 1: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: rs3FfqSnOBdXmLw9XVo99aAkwl5dftSSbadoqNaopPU=)
2: vdgwFbYVt8R1VSJ8o61nh0Nw_GA.roa (hash: 76jfpsJ1QF75Cjby0A7bmnFhoDcXagSAAfe9ZF5jiZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:f6:9d:db:95:68:b7:69:07:26:44:1f:57:1a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Feb 2 00:01:03 2025 GMT
Not After : Feb 3 00:01:03 2025 GMT
Subject: CN=0f0dcd50379524fe1da810b747d47883c711b8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:51:60:0e:0b:87:e7:cc:df:ac:12:7a:79:
c6:0d:8f:73:14:22:66:e6:03:a5:a5:6c:c4:e2:cd:
3d:10:8f:83:66:b7:7a:13:89:89:38:bd:23:89:47:
bb:ee:6d:f1:5e:68:5f:ff:fc:9b:ac:28:5c:4b:17:
cc:e0:f0:1c:a7:34:5f:41:c3:96:4b:09:81:db:82:
b9:cd:49:88:8e:39:be:15:43:fb:07:d4:c9:4b:02:
9c:bc:60:0d:bb:a0:65:89:f3:1b:5a:e1:cd:8f:5e:
57:71:22:9d:eb:53:9a:de:b6:9c:00:cd:27:6d:64:
b9:2a:a0:cc:ce:28:3c:56:73:57:52:aa:bc:a7:2e:
4e:8b:96:f4:1b:63:06:d4:c1:1f:93:a9:5b:31:a0:
cd:85:93:2a:39:a8:54:3e:12:f8:f3:9d:d4:e1:a2:
4c:b7:70:29:b1:58:1b:16:dc:2e:16:b5:49:87:0e:
6b:3b:2d:0a:ee:ff:fe:25:53:7e:12:18:5b:7f:9d:
93:1a:03:ed:bb:02:bb:52:03:c8:1d:8b:9e:53:19:
4d:59:5d:6a:55:27:32:69:7b:b8:b5:b5:6c:bf:77:
0f:18:e2:da:9b:55:7d:49:f5:e5:d7:7f:6f:f1:e7:
24:f5:b6:4d:2a:65:d4:d4:21:e6:c0:12:a0:b0:db:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:CD:50:37:95:24:FE:1D:A8:10:B7:47:D4:78:83:C7:11:B8:F3
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b9:7d:da:9d:0b:57:61:42:43:aa:9e:06:80:c3:23:2f:f8:
46:5c:b0:2d:a6:fa:30:23:64:eb:0a:16:f3:ae:51:22:b9:1b:
62:9e:0f:6a:fd:42:07:67:fa:65:14:0c:c0:17:a8:7b:30:8a:
7f:1b:bc:69:46:99:d2:ce:99:a8:75:2e:42:2a:82:77:db:e1:
58:2d:bd:82:67:36:ee:26:e8:65:58:3b:3c:02:16:c4:a7:41:
6a:ab:77:9f:07:7e:53:31:e6:14:a6:0e:9e:f8:f6:10:f3:b2:
b6:b5:49:85:b7:36:aa:85:7a:41:3a:af:ac:67:89:96:01:63:
48:25:6c:07:8c:34:a5:46:73:aa:fa:a5:5a:21:53:1c:f0:ae:
a4:dd:5b:a4:1e:9b:3a:63:78:20:31:3a:5d:7f:bd:38:bb:7a:
55:83:14:31:b0:54:07:f6:c6:63:5e:18:d0:c4:a6:78:d0:ce:
d3:8b:23:2a:28:38:71:9d:2e:63:2f:82:ba:70:6f:74:8c:7c:
1a:ba:18:1a:07:a4:71:aa:fc:1e:6b:a5:28:ba:c3:97:5e:d5:
0f:bf:87:55:c6:41:fc:d0:e5:b9:c2:38:a8:6f:ca:26:aa:63:
dc:47:a8:25:81:d4:0c:e9:c9:84:35:f9:6e:f5:e1:90:0f:2e:
19:2d:d1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:26 2025 by rpki-client