Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: oCJkxibPbRNC09tVthc6+mVoEQAkJ3kC27il+nw51XU=
Subject key identifier: B9:98:EC:D8:54:1C:10:52:96:D4:5B:A3:16:0A:6E:F5:CF:41:01:74
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 0194C3F54FE7D9BC61E5E52E737F67F230D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 0517
Signing time: Sun 02 Feb 2025 00:00:21 +0000
Manifest this update: Sun 02 Feb 2025 00:00:21 +0000
Manifest next update: Mon 03 Feb 2025 00:00:21 +0000
Files and hashes: 1: 8CcKJiF0r4FrDqB9K7MCSFJJvag.roa (hash: oH5satYFVvZ45Q+JWd3Hf90Jew1mrnQWjIvCBL11FrU=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: CwzCwrZ+PSgpZBdPL40kIOQvypJpy0zU7W1LEAYqprQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:4f:e7:d9:bc:61:e5:e5:2e:73:7f:67:f2:30:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Feb 2 00:00:21 2025 GMT
Not After : Feb 3 00:00:21 2025 GMT
Subject: CN=b998ecd8541c105296d45ba3160a6ef5cf410174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:b2:cf:69:69:b5:30:e9:b7:8e:92:14:fc:
e4:a1:88:2b:0d:63:c6:e2:17:bb:69:de:37:ac:74:
d4:92:5b:19:07:42:79:69:0a:22:7c:fe:74:79:f7:
22:20:27:2a:55:97:67:c1:03:9e:28:55:b0:1c:4c:
63:fa:3e:79:e0:dd:fe:b1:e9:5a:05:d8:7b:04:fb:
fc:ce:e3:db:f9:f7:8f:d3:61:a1:95:ed:cb:a2:4f:
00:86:03:84:5d:24:ba:86:d6:bb:67:ef:c3:57:aa:
4e:0f:96:ec:ea:0a:9f:fe:d5:00:04:0e:30:58:1e:
ec:cc:d9:86:bc:4f:19:89:5d:b2:6d:18:d1:36:43:
2a:51:4a:70:de:7f:07:64:bb:14:ce:bc:fe:c3:fb:
ea:f4:ab:d2:b5:19:5b:eb:31:bf:90:97:d7:56:cd:
cb:6b:35:58:3a:fe:71:2e:48:1c:57:09:4f:96:3f:
12:6e:51:f3:14:48:61:7f:5a:d8:0b:39:95:26:e4:
cf:04:5b:e1:7a:72:c6:f4:13:ea:f6:b1:c7:78:01:
93:db:18:12:0c:d1:53:6d:5c:75:2d:61:37:f5:f5:
04:37:4f:4f:46:af:27:3b:55:4b:a6:74:f0:97:f6:
47:2b:44:c9:8a:fb:70:32:72:47:18:b5:6b:45:93:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:98:EC:D8:54:1C:10:52:96:D4:5B:A3:16:0A:6E:F5:CF:41:01:74
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b4:6e:e5:3c:7c:97:99:c2:d8:40:21:61:cb:f8:0e:56:67:
c1:eb:29:a5:bd:29:45:a3:d6:5d:20:f0:f3:31:47:4f:c9:8c:
0f:12:21:23:9a:a5:40:b0:e0:c3:f1:15:75:9f:4c:a7:da:f3:
05:2f:bb:e6:b7:13:a7:c4:41:42:66:a7:35:26:23:51:2e:71:
eb:5d:f5:db:8a:6f:f1:6a:23:fd:57:5c:f2:57:4f:70:f5:76:
f4:8d:a4:ed:51:3c:4c:01:1d:5e:2c:50:70:4f:76:6c:04:fe:
69:a2:fd:54:a4:16:ff:ba:29:34:9b:88:ae:ab:b1:8a:8f:1c:
1e:0f:0f:2e:b6:40:e2:05:b0:2e:4f:7d:2b:fe:a6:a8:15:df:
f7:7d:45:b7:80:c9:21:8b:54:da:6b:91:8a:c0:df:2b:90:13:
96:99:a9:ca:a2:4e:3f:c6:de:d1:e8:5d:f1:8a:e4:3c:8c:ce:
e8:84:55:bf:08:71:94:2c:6d:ef:0b:26:cc:d5:fb:f8:37:cf:
74:35:de:48:c9:65:68:f3:1f:65:9d:24:1a:67:8f:b0:fb:33:
08:02:b9:bb:87:10:62:38:95:3a:d2:f9:7f:c0:cf:fb:14:90:
6f:40:fa:14:c7:6e:b6:25:30:08:9a:89:0d:11:be:12:61:70:
7f:dc:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:20 2025 by rpki-client