Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: zCivFZDX1Fyt3QlHNMPXzX1f/C6mlku+1wxM+U8KiJc=
Subject key identifier: BE:40:EB:74:A1:DE:D6:F2:E6:C3:78:22:26:D1:8C:92:B4:5B:53:E3
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 019510FDED3368462B3B12DE74607AA83681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 1131
Signing time: Sun 16 Feb 2025 23:00:31 +0000
Manifest this update: Sun 16 Feb 2025 23:00:31 +0000
Manifest next update: Mon 17 Feb 2025 23:00:31 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: rIqrSwhLbVfpEppZnAVoOPLifgIpFCESIFHZNRQEVH4=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ed:33:68:46:2b:3b:12:de:74:60:7a:a8:36:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Feb 16 23:00:31 2025 GMT
Not After : Feb 17 23:00:31 2025 GMT
Subject: CN=be40eb74a1ded6f2e6c3782226d18c92b45b53e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:fe:dc:c9:94:d8:a7:bb:fb:b2:c6:33:76:
d2:73:40:bb:3b:dd:bd:10:a1:ab:e7:5f:bf:7a:8e:
c4:18:dc:9e:7f:f1:9c:f2:c1:2c:f2:e3:65:f4:72:
0b:ba:61:26:39:7c:b5:23:3e:1b:86:1e:22:8f:d1:
e0:78:8a:93:b7:4e:f7:ba:3a:af:c1:12:11:ea:79:
65:6f:95:a8:63:d3:97:d7:ff:0c:7d:74:e7:bb:05:
a2:19:f6:99:90:69:bf:c9:fb:73:66:47:df:52:8e:
ae:50:34:52:ab:d1:38:2c:52:14:1b:b6:da:2f:65:
5b:2e:8d:67:7c:05:12:2c:2e:1c:47:1b:28:8b:c0:
b3:e0:01:01:fa:ff:34:4c:68:7a:bc:ef:30:4d:16:
1d:4c:02:35:2c:22:e8:0f:b8:49:c6:0d:58:c5:3a:
63:c4:b7:e8:19:f1:ea:f4:1a:35:e3:ca:a4:b5:9f:
44:d4:46:5a:c0:cf:7d:eb:a0:fd:0e:7b:3b:31:b8:
7d:4b:5c:f3:40:6c:56:31:93:2d:a0:e1:40:96:09:
93:18:cc:38:37:d1:48:33:01:47:fd:1d:45:9e:58:
59:d2:75:f5:c0:97:69:8d:14:44:d1:62:48:aa:bc:
33:0e:0a:67:08:98:b1:b6:c2:61:29:29:73:41:66:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:40:EB:74:A1:DE:D6:F2:E6:C3:78:22:26:D1:8C:92:B4:5B:53:E3
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bd:e5:38:06:35:65:3f:b1:e7:95:06:be:4d:1b:cf:81:09:
bc:de:d0:79:d3:ca:d4:f7:ff:af:6d:aa:84:ca:43:64:4f:26:
b6:97:76:1c:5b:bc:f3:44:de:d2:64:ca:8a:25:71:82:32:42:
d5:70:03:de:41:b6:7a:c5:c7:c6:7f:fc:e4:fb:69:8f:93:f7:
3b:93:94:46:3c:13:d4:a5:b5:ec:e8:fb:d0:4d:84:25:fc:9e:
59:8c:27:1b:b8:06:70:1c:a2:a9:b9:3e:a4:f1:4b:af:30:db:
c0:84:0e:cf:c8:50:ca:4b:d7:2a:cc:4b:69:56:57:69:94:31:
7b:9e:5b:35:a1:15:8d:0a:c1:0d:42:f8:e4:0c:46:9c:36:2b:
09:f7:63:19:4b:f6:f0:74:9a:09:83:b3:3b:c6:f7:82:08:85:
e6:c2:af:d1:ce:e0:39:ed:2f:ef:70:9f:26:6b:9f:e2:51:f5:
77:31:a7:6e:e4:f3:65:32:d2:55:3b:d3:b3:7d:e5:a9:2e:6d:
8e:9a:ee:70:72:07:54:a2:fb:df:89:f2:43:9a:e7:5b:90:b4:
83:c5:d5:3f:2b:34:68:9b:45:50:e4:c7:43:bb:7a:49:a7:71:
45:81:b0:46:de:60:5b:9d:cd:91:55:a3:60:ad:6a:90:14:78:
4d:b5:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:15 2025 by rpki-client