Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: paNtieIMzA+2A9c4Cv3c0iDxJNFDd93y+TRBKk/BQVs=
Subject key identifier: 7B:53:1C:B0:A4:10:BA:68:E1:07:1C:78:3B:CF:D3:3A:A5:3A:C4:10
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 0195127E409769C782373676AC4DBD561656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 06:00:18 +0000
Manifest this update: Mon 17 Feb 2025 06:00:18 +0000
Manifest next update: Tue 18 Feb 2025 06:00:18 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: nlQwrJfLvFRPBTz5MADp7W+e+n98A2TsLce6dsEmZNs=)
2: kDp8o5lwoauyIIWuMVQKzWrOZfg.roa (hash: k1SzOsCV3pSTvUNttrz3FSSmM4yVZTra60XB+dEnFds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:40:97:69:c7:82:37:36:76:ac:4d:bd:56:16:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Feb 17 06:00:18 2025 GMT
Not After : Feb 18 06:00:18 2025 GMT
Subject: CN=7b531cb0a410ba68e1071c783bcfd33aa53ac410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b9:50:ef:78:7e:31:99:6c:ab:0a:3c:ae:b2:
3b:0a:93:aa:fa:a4:fb:c1:16:6b:49:9d:53:a9:31:
ca:3e:47:d5:67:ef:4c:5e:c2:7a:12:03:f2:ac:e3:
f9:f4:e6:fd:81:46:5c:bb:e7:b4:03:0a:86:6c:e4:
73:77:aa:d2:98:1e:21:81:b5:97:c5:ef:06:ca:ba:
5b:1d:ca:5b:96:a1:a4:de:45:cd:ee:18:5e:b2:a7:
dc:02:ee:0d:66:10:b0:82:a5:53:cf:82:b6:d0:db:
57:20:19:ea:eb:df:33:82:e3:79:33:e7:1a:2b:f2:
9e:0b:c0:6d:bc:f0:b4:a4:f3:b6:4c:f8:d0:21:9b:
b7:d8:bf:fc:0c:12:29:e5:85:9a:1b:4c:07:f7:89:
fa:87:64:8f:bb:da:ff:a6:bd:27:87:1a:6d:b2:bb:
2a:ef:29:09:51:e5:04:f3:a1:8a:54:e9:bb:16:cd:
fe:03:09:3c:74:d4:69:d6:83:70:fd:bc:86:04:18:
bb:b3:85:e8:87:95:3a:14:e8:38:e8:4e:68:65:6f:
fb:82:33:4c:d1:69:9e:83:29:78:81:e5:75:42:3f:
8c:3f:a1:02:96:15:b8:e6:fe:79:01:79:aa:e6:6e:
b6:9f:e2:a5:26:f5:8e:61:23:7a:06:40:36:22:4d:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:53:1C:B0:A4:10:BA:68:E1:07:1C:78:3B:CF:D3:3A:A5:3A:C4:10
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5f:36:20:5c:6c:ed:bd:9e:3c:53:20:28:4d:4d:c4:1f:5d:
00:de:72:07:25:5a:7f:49:98:85:c8:ad:fc:00:bb:08:fc:88:
0e:6c:61:68:39:bd:0d:3b:da:55:5e:90:79:2f:59:c9:71:7c:
5a:9e:e7:d7:1d:2d:d6:97:c5:54:b5:3f:b4:b6:2e:5a:f2:4d:
f9:f8:41:36:ba:eb:5d:f9:33:9d:c3:05:61:0a:5f:63:c6:e8:
ca:e7:2a:63:b6:df:a7:fb:84:13:37:42:47:55:0b:a9:3e:db:
b2:52:73:51:58:bb:5f:36:ee:65:8e:15:ed:2d:6a:49:4c:c3:
d0:00:5e:8e:d8:73:3a:41:84:1e:84:77:e4:6f:41:a6:5a:a0:
21:86:66:e5:ad:2a:5c:0c:c3:94:76:a8:79:7c:1a:69:f7:c2:
cd:88:00:24:15:bc:24:0a:c6:ed:9f:05:cb:43:d5:16:18:41:
34:b1:2a:1c:52:fb:60:7a:33:b3:6c:63:4c:c9:bb:63:5f:97:
56:17:0b:af:da:0b:08:75:a1:b0:ef:e8:83:5f:77:d9:f9:96:
e3:e6:8e:c7:d6:cb:19:a0:91:4b:1c:c3:c1:0f:95:37:74:6a:
de:00:fe:46:67:a8:24:00:91:d6:6b:10:59:d7:67:02:a6:26:
ce:e7:5e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:29 2025 by rpki-client