Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: SXU2B5mOuSABR1tDqTpRQ84K4TgTXrmUA424hwqudMg=
Subject key identifier: 23:36:02:C1:CD:B4:09:E5:C6:50:A8:7A:CD:24:09:14:C7:B9:78:35
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 01951134B08AC216F4C936C3AA1D8E897597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 00:00:20 +0000
Manifest this update: Mon 17 Feb 2025 00:00:20 +0000
Manifest next update: Tue 18 Feb 2025 00:00:20 +0000
Files and hashes: 1: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (hash: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=)
2: W1ibYg0ozN5f0hkwbRX6gypQu6o.roa (hash: Q9hgjCdv4TipN26ttaTBJrYXDexn3QBOgW7gbPj7Hi8=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: JU03MYvqcSKxVqfDtRJFMzYLEaOramjwUTcKZphq5Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:b0:8a:c2:16:f4:c9:36:c3:aa:1d:8e:89:75:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Feb 17 00:00:20 2025 GMT
Not After : Feb 18 00:00:20 2025 GMT
Subject: CN=233602c1cdb409e5c650a87acd240914c7b97835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:4f:4a:fc:bd:3a:a9:09:10:5d:c2:24:2c:
d8:d3:e4:7e:e0:a5:24:d2:16:01:0c:f3:5e:1b:67:
7f:03:6e:23:9a:2a:e2:fc:09:39:ed:fc:70:73:65:
6d:43:c9:4a:5e:e4:09:ef:b6:65:e9:ab:c4:84:4b:
58:f4:6b:e4:b1:4a:7b:8c:a3:a8:1e:6b:ba:22:49:
ed:23:93:91:c4:23:09:5d:16:5d:a6:37:e2:3c:d3:
ec:30:56:21:66:2d:b4:ce:3f:d1:20:08:92:13:fd:
47:2f:ea:17:96:2f:e1:17:f6:be:34:86:57:78:27:
fa:0b:c0:3e:cb:f6:a8:d0:fa:85:c0:54:43:0f:dd:
ed:18:5d:6e:9e:44:69:a9:ab:3e:cc:2f:af:f6:66:
b2:3b:ce:8f:75:8e:a5:96:8f:50:62:00:5c:4e:cc:
ff:42:63:89:95:15:04:41:72:7f:c3:8a:12:76:69:
a8:6d:73:e4:93:5c:4b:48:42:1f:36:c8:d5:a9:fe:
c6:a9:a4:73:d1:24:e9:17:57:a9:36:28:c7:1f:b9:
8e:b8:26:6f:c1:dc:7d:53:b6:b0:57:80:67:1f:56:
d3:be:ef:f4:44:62:b8:c1:3a:c9:b1:c7:5e:86:64:
f0:86:ee:44:b7:b0:e5:0e:53:fc:df:89:83:8d:75:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:36:02:C1:CD:B4:09:E5:C6:50:A8:7A:CD:24:09:14:C7:B9:78:35
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7f:04:72:5d:b0:dd:1a:27:f2:c2:60:ab:91:24:cb:e1:55:
24:41:06:4e:a5:fc:73:57:6d:15:7b:89:a3:3a:23:ef:0d:82:
54:63:94:5c:bc:d9:32:0f:fe:18:d9:0e:da:b2:c1:dd:52:87:
7e:e9:55:2c:b4:83:63:d2:90:04:79:25:25:93:97:72:0f:c7:
73:37:22:c7:2e:8d:10:85:bf:90:00:a4:90:c8:34:fd:fe:d9:
54:03:86:99:73:2d:35:24:cf:c5:96:70:18:7a:c6:13:ea:14:
5e:10:35:42:4f:ec:02:63:01:51:fe:85:9c:2b:b4:7e:f7:18:
16:3d:c8:7c:4b:ee:e5:13:57:20:af:16:c6:61:ab:af:c9:0d:
82:52:99:33:50:0c:fa:28:58:3b:e9:4d:a8:57:30:5e:aa:eb:
cf:2d:d0:7c:1f:bc:da:16:f6:cf:07:63:63:2b:3f:9e:90:f1:
68:70:f6:36:a4:8e:e4:06:69:f4:80:c6:b4:52:91:54:4b:ef:
8b:18:5f:5b:99:f2:ae:4e:56:a0:04:7f:95:9e:f3:1a:b6:23:
69:78:01:41:59:21:cb:54:c7:06:c1:6f:12:ac:8d:ff:35:96:
f2:24:60:d5:10:cd:2f:d1:cd:20:14:33:8a:ad:3c:6c:25:6f:
85:0a:fb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:20 2025 by rpki-client