Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: q4V04Z558rSQmcBYogs8gUyvf4nMOuqQwXcm/Nk7Mfs=
Subject key identifier: AF:00:9A:C8:1A:BB:35:B7:FF:AF:3D:B8:2E:12:1F:F6:EB:D3:6F:61
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 019511351F9F6A001F2FFE80FD0EBDE270B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 00:00:48 +0000
Manifest this update: Mon 17 Feb 2025 00:00:48 +0000
Manifest next update: Tue 18 Feb 2025 00:00:48 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: HTItE4zppOeQ3FeIm1d3neVHKpaRa5GB5nOzsIYRs7M=)
2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=)
3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:1f:9f:6a:00:1f:2f:fe:80:fd:0e:bd:e2:70:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Feb 17 00:00:48 2025 GMT
Not After : Feb 18 00:00:48 2025 GMT
Subject: CN=af009ac81abb35b7ffaf3db82e121ff6ebd36f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:58:ad:93:66:b3:11:98:de:a5:50:f1:24:
76:da:ff:b5:e3:db:f5:b7:0c:7e:d3:49:26:ff:79:
cd:bb:65:17:de:02:bc:0a:74:39:17:56:27:aa:59:
62:ba:ac:11:f1:92:d0:be:70:64:98:81:e4:35:34:
dc:38:c3:37:84:ca:f8:bf:b4:76:ac:80:8f:7b:58:
41:b0:73:ae:d4:89:8f:67:7a:4f:3d:a5:5d:97:5e:
3a:ea:2a:99:ef:4f:5e:1d:0b:e0:87:7f:17:3f:10:
08:85:a9:d0:45:a2:07:6a:6b:61:5b:4b:91:52:d4:
54:62:8e:35:1d:a3:a8:07:0c:2c:90:4f:b4:39:84:
bd:76:47:b0:af:a2:a2:82:a6:dd:dc:f9:ed:5b:6b:
55:47:28:b4:94:ec:1c:63:00:7d:1f:a7:2c:8a:be:
d3:c1:fb:33:8f:47:72:7c:44:b8:7a:3e:16:5f:67:
dc:99:53:0f:37:5f:cf:d0:e9:7f:98:60:19:f7:5b:
18:bc:32:6f:df:c5:32:d8:4f:2b:a8:d0:42:e3:43:
6f:fb:ea:b5:eb:1d:cd:47:8e:06:99:e7:96:0b:ba:
7e:55:e3:89:5c:a5:d8:6e:33:96:be:5e:d9:ac:d2:
31:cb:81:6a:c7:77:57:11:a8:88:08:d3:3a:48:dd:
b4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:9A:C8:1A:BB:35:B7:FF:AF:3D:B8:2E:12:1F:F6:EB:D3:6F:61
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d0:66:0b:1e:b4:da:86:81:38:27:0f:95:8b:aa:08:a9:82:
70:c8:c6:5a:6d:d5:e7:33:cc:0f:25:8e:02:e1:3a:24:8e:f9:
c8:62:b9:db:14:9a:49:e0:e1:1f:8f:20:bb:e0:e5:fc:c3:5d:
3f:aa:f7:d1:43:4e:ef:c3:29:a4:bc:95:c9:13:10:05:c4:85:
fd:8f:50:8c:61:52:60:c8:fb:2a:09:75:99:4a:f2:82:da:64:
20:e1:3b:76:10:2d:a2:79:02:70:78:3e:69:d3:a4:bc:73:af:
67:44:be:21:e7:73:5a:54:6a:51:3f:0d:08:fb:7c:08:81:a9:
ed:4e:8d:9a:8e:96:52:82:c3:41:05:3f:4b:1b:1d:15:02:09:
4f:f3:c4:e6:6f:85:d9:32:0c:f2:31:4c:4a:36:68:50:c9:62:
d3:55:1e:37:db:cc:4c:f7:55:c2:e6:a3:41:3f:ce:a3:cf:7d:
b0:d7:5a:b8:4c:f0:36:02:d3:c9:48:93:22:26:8b:9a:08:ff:
b0:49:7c:6c:c3:5c:ef:3a:b5:e0:3a:e2:23:dc:53:15:b3:c2:
5c:c0:d0:c1:49:41:e2:46:ed:87:77:1c:04:87:0f:fc:0f:62:
25:34:9d:3b:3d:4c:59:18:0d:47:f2:4a:42:08:a4:6e:2f:0b:
4f:b9:69:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:04 2025 by rpki-client