Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: 0MwAhsCQmPwDiGwpgvVE2K05la9Kr0TxCBORA6tpdEA=
Subject key identifier: 79:41:3E:37:D8:19:B7:9C:0D:69:2B:86:0D:92:B2:99:16:7B:99:EC
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 01951134909C7DD08831A289869BEFD9726C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 00:00:12 +0000
Manifest this update: Mon 17 Feb 2025 00:00:12 +0000
Manifest next update: Tue 18 Feb 2025 00:00:12 +0000
Files and hashes: 1: 83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa (hash: /GIKVjlq0TkCjqFIvHfnkG7+yghgu5kkQctxwrpV6qw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: DtauIyWqumxHWORE2+WQBuI0a1+svAnBXcBK5vyBs1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:90:9c:7d:d0:88:31:a2:89:86:9b:ef:d9:72:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Feb 17 00:00:12 2025 GMT
Not After : Feb 18 00:00:12 2025 GMT
Subject: CN=79413e37d819b79c0d692b860d92b299167b99ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1d:08:28:c8:d9:98:1c:fc:36:f3:fe:15:cf:
58:15:5b:3a:bb:57:47:af:13:05:72:20:af:62:7d:
c1:1e:d6:d7:53:c2:55:8d:76:33:84:47:72:95:ac:
7b:7d:e3:0d:c5:d4:cc:79:75:24:bf:6c:48:c9:5b:
b3:05:31:1a:1b:a2:c5:39:1a:9d:01:02:1e:12:0b:
c2:d9:07:5c:91:b6:a9:99:df:92:9a:01:ab:95:d5:
55:52:ea:00:8d:2e:01:1a:3f:a1:3a:5f:d9:52:c5:
6a:f5:5c:12:ab:74:6d:ce:f5:29:f0:ce:3b:2d:a1:
08:77:97:c1:4e:ad:18:62:e0:76:05:4a:b8:64:94:
e7:c7:6a:f4:c3:b4:3d:62:b0:bb:a0:09:69:96:a5:
17:3c:a3:db:6c:e4:45:63:a9:a3:e5:d5:02:b0:ce:
77:02:8c:ab:5d:af:8c:58:c9:7f:4f:50:5e:75:c9:
35:40:d6:0b:77:cc:40:81:6b:05:7a:89:fb:f0:36:
43:71:d5:f4:b7:ed:2b:8f:78:24:53:e1:93:61:98:
6e:66:06:a5:ab:8b:81:65:69:98:c6:47:1f:b6:90:
36:e5:f5:e8:90:a9:8e:36:09:8d:f4:ad:7e:15:e0:
d1:87:56:e5:57:38:52:2c:76:20:86:77:a0:b1:5a:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:3E:37:D8:19:B7:9C:0D:69:2B:86:0D:92:B2:99:16:7B:99:EC
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6d:fc:ab:91:bb:d5:eb:b8:a1:40:c3:55:4a:5c:2e:2d:0a:
1c:7e:fa:31:4f:7d:a1:ec:8d:2d:83:38:44:37:24:b7:8d:b1:
39:f4:58:55:9a:f4:03:97:64:cf:39:c9:93:7c:ba:53:29:5e:
b0:83:21:f9:33:25:d8:a7:34:f1:cd:f9:97:52:54:c4:de:f3:
ed:4c:8e:b8:b3:96:82:c5:ee:2f:d9:ed:f5:f8:0d:a4:f0:e3:
bf:49:31:58:06:c1:4f:6e:24:cb:7f:5c:d3:ca:c6:51:2f:09:
11:61:aa:ec:af:81:aa:e1:9d:da:de:bd:be:4e:97:12:22:f7:
88:bf:73:65:67:d6:3e:9c:77:18:85:0d:ec:4e:22:60:0a:91:
9e:ea:56:5d:15:66:cb:1d:35:26:e3:fc:af:1c:1c:8f:fa:66:
44:3b:c3:1e:98:5e:f5:27:95:c7:ce:0e:17:18:be:44:22:1b:
d8:1a:d7:08:0f:95:bc:29:72:e9:a4:a1:ff:04:3a:1d:5d:14:
65:78:e7:b2:9f:40:63:e1:5a:40:03:63:d4:1f:3c:33:cd:89:
e8:fa:fb:dd:0b:ae:02:5b:98:a1:74:43:35:a0:7e:7c:11:43:
32:9d:15:0b:85:89:0c:b9:bf:78:fb:90:81:d1:e6:f8:fd:00:
1e:0f:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:31 2025 by rpki-client