Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier: s5U/1/aN4cHH06FGaOo/jykd24v5CtJINvs5FQKlVrM=
Subject key identifier: 05:11:08:BC:9B:B4:B3:56:3E:DA:88:14:43:60:29:43:1E:73:8B:8A
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial: 01951134A88C898EC7185FDB05F20B73E182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number: 04B7
Signing time: Mon 17 Feb 2025 00:00:18 +0000
Manifest this update: Mon 17 Feb 2025 00:00:18 +0000
Manifest next update: Tue 18 Feb 2025 00:00:18 +0000
Files and hashes: 1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: WwBTVTnIL3XO0Fv/K7MV9PtYcrqmZ1QvVVwjGAC6hZE=)
2: _Yxsd0eiDHHGuFhmQURGYrs_Tng.roa (hash: nE0pyzNZgsvFiQ/2XuRBIkiIZVx/tCbJehUAtaFFq7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:a8:8c:89:8e:c7:18:5f:db:05:f2:0b:73:e1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Validity
Not Before: Feb 17 00:00:18 2025 GMT
Not After : Feb 18 00:00:18 2025 GMT
Subject: CN=051108bc9bb4b3563eda8814436029431e738b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:b5:80:42:34:3a:b7:d7:a3:af:b4:66:6a:
6b:e2:3c:61:e5:20:40:6a:c0:d1:f6:5c:bc:40:ef:
e5:49:ff:69:76:ca:b2:dc:d5:e4:3d:93:7f:0b:bc:
91:8e:a1:f2:e8:c5:12:38:cf:c9:3f:87:f1:9e:85:
56:f6:9e:f2:91:44:a3:c8:5e:21:7b:3f:8f:bb:86:
04:dd:46:93:ff:25:2e:f8:58:5c:3a:72:07:75:62:
04:34:16:c2:22:47:45:38:26:36:c4:a6:b8:34:bd:
c1:87:1a:ec:f7:b2:31:b2:61:28:aa:68:e6:3b:24:
d5:a7:21:05:2b:78:54:1b:3b:c4:bf:6d:99:93:98:
9f:99:01:cc:ca:f0:cd:2e:35:a9:6c:7c:84:a8:b8:
5e:1e:2e:5b:c0:67:76:2f:44:4d:00:00:8c:95:14:
64:55:64:76:e2:91:14:43:e2:8b:86:5a:fb:f7:da:
ae:ea:e9:fc:ca:e8:73:f4:c4:57:ee:36:ef:b4:ed:
a1:30:2d:12:89:f1:0b:f2:2d:ae:73:92:fb:34:41:
49:4e:3b:f2:71:d4:3a:5b:41:ac:e1:eb:70:24:25:
bd:fa:aa:25:fa:48:c1:34:b0:0e:16:97:ed:23:98:
0e:4f:9b:eb:08:d7:01:0d:94:a0:35:c9:de:9f:83:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:11:08:BC:9B:B4:B3:56:3E:DA:88:14:43:60:29:43:1E:73:8B:8A
X509v3 Authority Key Identifier:
keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f8:c6:9a:80:a8:8f:e9:78:17:da:31:86:ac:b0:55:c2:92:
21:7f:34:61:fc:7c:af:8c:7f:e2:cc:a5:78:98:c5:3d:37:b0:
f4:c4:66:d8:99:c9:f8:7a:ec:68:bd:6c:a6:8a:63:7a:98:97:
a6:2d:40:f7:96:26:3f:95:b8:eb:3f:1c:80:78:6e:2f:53:12:
a4:b7:ef:54:5d:e3:09:5e:e8:8f:25:73:7b:8b:e0:da:aa:16:
01:c9:e8:7f:4a:d2:3c:17:18:8e:46:77:e6:e6:c8:af:5f:4d:
c9:44:56:df:b4:52:8b:71:ac:6d:79:02:51:c9:9e:a1:4f:32:
35:06:04:10:04:cd:49:96:dd:c0:cf:46:b4:09:74:9a:28:6d:
f7:72:15:64:65:6e:ab:19:17:70:87:f9:83:c0:2c:a2:eb:08:
fd:ea:4b:f5:71:3d:b9:02:31:84:a1:d8:ef:95:9d:d0:05:8b:
42:cf:cc:8c:68:65:ab:3e:61:39:1f:8a:9b:f0:bf:61:f5:b6:
9e:6a:3f:d6:8c:9f:c0:42:0d:30:ad:0e:09:a8:f5:bf:7c:6e:
70:cb:da:f7:15:35:df:3f:25:3b:b3:d7:f1:8f:57:05:c8:8c:
97:38:0f:8a:c4:02:cb:ae:56:11:1b:74:b3:5a:94:b2:c2:be:
ee:30:5c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:28 2025 by rpki-client