Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: bdtFxu8azdv8mKb1F+jVsw+RDAzFf0GGjgvDJMAG8AM=
Subject key identifier: 43:E1:00:80:E4:47:7F:6A:14:52:8B:48:AE:77:7B:2D:5F:D9:11:64
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 01951134D98B60EFC7D9F89D28A72E98908F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 0841
Signing time: Mon 17 Feb 2025 00:00:30 +0000
Manifest this update: Mon 17 Feb 2025 00:00:30 +0000
Manifest next update: Tue 18 Feb 2025 00:00:30 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: nZXaVazA6Q4Ft8mw9EgREBVm/lcdjn0oFKOUIQLYcs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:d9:8b:60:ef:c7:d9:f8:9d:28:a7:2e:98:90:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Feb 17 00:00:30 2025 GMT
Not After : Feb 18 00:00:30 2025 GMT
Subject: CN=43e10080e4477f6a14528b48ae777b2d5fd91164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:63:60:4c:72:be:45:84:03:14:fe:72:7f:
92:eb:7f:c6:ee:db:73:40:b4:5d:c4:78:c2:2b:b5:
6d:e2:8a:e4:64:cb:e9:9f:86:13:b2:5f:e2:83:5b:
8a:47:5d:c7:47:fc:0c:03:ff:e3:54:9d:db:d5:f3:
48:49:67:93:54:b3:bd:98:79:61:23:50:bc:21:45:
4b:33:f4:82:f5:0d:1f:9d:1c:f4:b6:ea:43:1f:87:
d4:8f:70:94:30:91:77:7e:c0:d9:e4:43:4e:3d:31:
68:16:a9:2e:55:b1:f0:e2:03:dc:5d:24:30:6a:2b:
1f:98:53:e3:3c:c9:1b:0f:ac:c7:89:a0:f0:3e:75:
ad:5b:01:24:93:ed:9b:de:09:7b:77:c6:32:9a:9b:
36:11:02:8c:aa:ca:ee:a8:5a:a8:b1:9c:38:76:89:
06:ac:f0:b3:84:89:cc:9c:4d:05:f3:8a:07:05:4f:
d3:c0:45:c9:d7:74:97:47:3d:45:23:90:ac:c6:ab:
39:12:23:9c:c7:80:9e:9b:a7:a6:73:53:b7:1e:72:
94:25:d3:6e:ba:22:44:9f:31:fe:b8:ad:27:87:04:
10:71:4e:31:e7:bd:17:6c:c7:a5:55:df:3b:79:6a:
b7:17:75:81:28:91:d5:e4:73:e0:30:d8:52:9e:42:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E1:00:80:E4:47:7F:6A:14:52:8B:48:AE:77:7B:2D:5F:D9:11:64
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:75:c1:f9:23:ff:b0:40:d7:58:44:a2:b3:5b:38:20:8a:9a:
33:d8:76:7f:4e:30:3b:54:cb:92:96:f9:6f:91:f2:f1:68:94:
2c:35:3e:0c:85:15:6d:69:57:27:d4:55:4b:e9:6c:93:22:0b:
23:45:e6:f2:67:97:1e:85:74:84:e6:c0:a4:71:d1:31:3d:34:
b7:0a:6c:5b:a5:e6:42:53:9c:9a:6b:06:0b:c6:72:50:33:39:
f5:c6:6d:12:c9:50:18:74:0a:8f:97:cc:a2:79:64:cb:e0:c2:
48:68:06:5f:e6:9d:7d:9d:e4:7c:c9:20:34:f7:2c:66:b9:36:
ec:0d:2c:a4:ca:67:39:d1:35:d4:6d:77:b4:e4:ec:45:0b:74:
70:21:6f:bc:37:08:d7:51:15:f6:c7:46:09:43:0a:ad:32:b2:
d7:fe:24:dd:74:e7:50:42:ea:bf:1a:e2:9a:57:33:19:b9:cf:
e2:47:b5:3e:90:8c:5b:c8:0f:87:18:26:cd:49:c1:a9:76:e2:
e0:7c:3d:6b:4f:de:d4:4a:e7:90:f4:1f:a1:1b:5c:c8:aa:2b:
42:b4:21:10:7c:86:57:96:59:b5:ca:bd:9d:d8:7e:77:18:43:
5e:ac:be:58:bf:82:ab:ba:7e:45:61:69:71:34:68:01:46:cc:
a7:fb:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:48 2025 by rpki-client