Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
File: qsIj-xlCEV5IqXVCByktAKCC7N8.mft (raw, json)
Hash identifier: QMmdmL6YQqv6FshBTvgiM1iyyQ5CwOyhq8weGOziZ/0=
Subject key identifier: 5B:3D:62:91:F2:9F:BD:96:4E:93:80:BC:00:90:51:EF:58:F2:81:CA
Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
Certificate issuer: /CN=aac223fb1942115e48a9754207292d00a082ecdf
Certificate serial: 019511357A6F3FF6CCB9C418F483B6B9A3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
Manifest number: 06A7
Signing time: Mon 17 Feb 2025 00:01:12 +0000
Manifest this update: Mon 17 Feb 2025 00:01:12 +0000
Manifest next update: Tue 18 Feb 2025 00:01:12 +0000
Files and hashes: 1: f7H4NvJn5XG9ZEVLvo3rzyryem0.roa (hash: FIvnUTIH/WyzVRn7SNngTErOpdYKzvrkMjSyoAbXEio=)
2: qsIj-xlCEV5IqXVCByktAKCC7N8.crl (hash: i1a7fv1da3rYbDDJ1KDbtotlkABCDJO6bI5+s1/O2+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:7a:6f:3f:f6:cc:b9:c4:18:f4:83:b6:b9:a3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf
Validity
Not Before: Feb 17 00:01:12 2025 GMT
Not After : Feb 18 00:01:12 2025 GMT
Subject: CN=5b3d6291f29fbd964e9380bc009051ef58f281ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:97:0f:2d:31:4c:bb:bb:ce:d7:01:f2:d2:
1a:be:57:41:20:07:34:43:5d:0b:3e:a0:74:5a:04:
01:20:fc:fc:4e:1d:bc:ac:75:f1:74:e3:c8:a5:41:
b2:66:c7:73:c8:e0:29:4f:c1:48:ba:f9:2f:6a:70:
2e:3c:f0:99:7b:57:8c:7b:74:7a:0c:6a:b9:5f:cc:
06:2a:10:18:4d:5b:de:73:70:33:a5:9b:d5:30:a8:
1e:73:72:68:3c:bc:bd:2d:42:04:92:47:da:c3:b6:
c8:48:95:7b:5a:b5:0d:0c:44:cd:27:b8:8c:85:07:
61:54:e1:1b:23:6c:a3:b7:ca:4c:2b:36:da:35:70:
3a:f7:06:f7:cf:18:35:8b:23:98:5a:29:60:8e:b6:
ec:85:74:49:08:40:55:79:03:53:5b:fb:4a:76:f5:
29:29:5f:c3:70:64:44:08:1d:70:25:3a:ca:e4:e6:
53:a2:9f:43:d3:da:e5:c6:b0:d5:28:c9:8a:55:bc:
b7:8f:f5:d7:00:dc:70:4f:ff:72:f6:8e:22:d8:ac:
4c:db:78:a3:a6:bd:6e:5b:ce:b0:de:2c:87:c7:f7:
c2:02:6f:29:58:c8:91:54:ca:35:34:81:46:b8:26:
f6:27:9a:9a:bd:86:ac:5b:28:5c:5c:f8:c6:33:66:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:62:91:F2:9F:BD:96:4E:93:80:BC:00:90:51:EF:58:F2:81:CA
X509v3 Authority Key Identifier:
keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a2:34:ea:28:00:9e:84:74:fb:40:6b:38:ac:5b:43:87:b8:
59:44:56:5d:7b:5f:a2:26:b8:0e:a6:6e:d2:b8:f2:15:ac:63:
73:dd:5d:00:7c:b0:69:7f:a3:b7:2c:5b:c2:56:07:e6:c3:1a:
6e:14:e6:98:83:04:aa:2d:81:41:58:58:09:e6:b0:81:17:5e:
a0:ec:74:5c:9d:0b:8e:f5:84:89:bf:fd:96:cc:79:68:f7:03:
c5:13:3d:ca:69:3d:8e:db:b7:d1:ef:31:c9:98:6f:69:e7:53:
24:28:ef:43:da:e3:08:3a:3c:97:d2:c1:85:ac:0d:08:f9:15:
c8:14:55:d7:0f:57:17:0c:d3:1e:30:f4:4b:e3:f2:03:a4:d3:
40:e8:4c:d7:3d:9d:c0:4f:14:bd:f8:a5:fe:37:ea:ee:e6:da:
c6:8d:c7:c6:38:43:ae:8c:2b:0e:22:e9:c4:dd:2c:cd:de:59:
c7:22:db:be:06:fe:7e:5d:15:99:b1:e9:cf:c7:b8:db:0a:bd:
81:55:bb:ff:be:0b:a2:0f:60:6f:a8:e7:56:4f:19:cd:96:92:
82:91:89:18:73:d5:72:d8:bd:08:94:eb:e7:12:0d:c6:04:32:
5c:98:27:92:c5:21:d3:aa:5a:17:7e:b7:e6:77:a2:31:88:d9:
cf:32:2b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:59 2025 by rpki-client