Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File: QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier: HbEKwZKkQckgZ7XSB8Ajhq6d5MMqJq6Swzgx6E80k7I=
Subject key identifier: E3:B7:18:7F:51:D1:B2:4B:F6:22:56:B0:D7:69:79:6B:89:3C:FA:9F
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial: 0194C49A326198E3BB6311D4EF41F00B6656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number: 0594
Signing time: Sun 02 Feb 2025 03:00:27 +0000
Manifest this update: Sun 02 Feb 2025 03:00:27 +0000
Manifest next update: Mon 03 Feb 2025 03:00:27 +0000
Files and hashes: 1: DRGQu6VcNUxgbC-i_8UH42qgDUM.roa (hash: Tkt8CjSKbVkubPBErWJwsPegnkm3xx4+YfHW6WMiPHA=)
2: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: TJVMa6JQy/chRPDqqgztw7VeexPiVd8C7q/dQrSQOLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:32:61:98:e3:bb:63:11:d4:ef:41:f0:0b:66:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
Validity
Not Before: Feb 2 03:00:27 2025 GMT
Not After : Feb 3 03:00:27 2025 GMT
Subject: CN=e3b7187f51d1b24bf62256b0d769796b893cfa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:5d:e8:26:f0:99:0e:11:07:15:62:fe:ed:
24:d0:1c:43:88:44:c9:b0:67:7a:4e:f8:c3:1f:78:
69:b5:ed:cf:ad:61:dd:10:9a:71:82:e9:8f:57:a5:
85:cc:07:3f:d8:62:ff:a3:d8:de:cf:d4:11:2a:18:
b3:a9:62:3d:86:aa:f7:3f:02:eb:76:10:e6:b4:e1:
4d:31:4c:09:9b:bb:d1:3b:56:9b:26:1f:14:f1:0b:
48:6b:62:48:99:77:ac:9e:57:ec:3d:1d:91:84:8d:
ec:2f:47:5c:34:ce:93:95:d6:a5:af:7a:30:79:c7:
f7:aa:9d:17:74:4b:30:7b:f3:e4:1c:9c:3b:c4:33:
54:8d:c9:68:34:28:a1:f4:50:e0:dc:81:f8:6a:d6:
7d:e4:52:13:09:67:4a:c9:45:fc:d7:18:57:75:60:
6f:b4:fe:9b:59:3a:22:9e:f1:db:d2:52:33:b3:fb:
d4:fd:8a:c0:1a:33:76:28:10:04:56:d2:96:5c:9a:
d9:4c:a1:3d:bc:b9:dd:17:22:7d:52:2b:8c:0c:68:
d1:8f:04:84:35:bc:dd:6b:89:77:46:8b:b1:c6:20:
04:37:ad:bc:90:70:2f:01:0e:6d:bd:03:e6:b5:f6:
8d:90:cc:c9:8d:28:d3:a6:f1:7e:9b:80:6b:17:2d:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B7:18:7F:51:D1:B2:4B:F6:22:56:B0:D7:69:79:6B:89:3C:FA:9F
X509v3 Authority Key Identifier:
keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fa:5d:bd:a5:21:d2:b8:70:1f:9b:59:49:75:7a:46:82:90:
f5:64:57:04:23:52:f3:af:f0:66:98:ce:06:1c:01:6b:31:01:
39:8b:5d:80:d7:25:3a:f4:a0:5c:20:32:f4:5a:0f:12:7b:e3:
66:d3:7c:b2:c7:4a:4e:b2:52:2a:f6:42:c9:5d:1d:b0:26:4b:
c1:99:f0:95:1b:15:22:98:5a:68:1d:97:14:bb:75:2f:de:05:
31:be:e6:63:d7:9a:c4:f4:9b:8d:41:18:8c:b4:9f:1b:c7:92:
c8:71:8a:29:23:32:6a:95:58:97:e8:7f:f3:c9:31:59:f0:4e:
4b:fe:8e:cb:6e:36:64:7b:36:ee:ff:67:b5:c1:93:3d:62:61:
04:4f:0a:1f:a8:23:be:e7:a3:d2:74:35:59:79:62:d6:6d:98:
1c:ef:2a:db:da:ed:ea:c5:75:21:7a:38:f9:5d:96:a6:c2:42:
d3:b0:a1:50:24:c4:79:29:07:39:e2:7b:64:a5:15:c0:5b:6e:
19:69:f8:6b:8d:dc:9d:d6:16:22:9f:c8:87:d0:de:14:11:47:
0b:ed:93:df:2c:7b:b7:d7:47:be:c7:c2:e2:11:21:d6:80:53:
47:d7:c7:64:c4:03:67:51:6a:24:af:8e:1f:2a:a2:6c:2c:ec:
a0:6f:c9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:49 2025 by rpki-client