Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
File: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json)
Hash identifier: z7IzEtqfXqY8A7YHPHztTu8Y31gdOrejZyIYBqpXL7o=
Subject key identifier: A7:15:D4:3E:8A:EF:B9:50:41:17:43:17:9C:BB:0D:2E:94:FF:9A:D9
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial: 0195116C2D8F640204AD239F048203AB4B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
Manifest number: 11E2
Signing time: Mon 17 Feb 2025 01:00:56 +0000
Manifest this update: Mon 17 Feb 2025 01:00:56 +0000
Manifest next update: Tue 18 Feb 2025 01:00:56 +0000
Files and hashes: 1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: uaS+QN901O7iE6b+GQYrRPHnsjaQidGm/3ik/s5OZQo=)
2: s2rqpwumhtmvSEX63lF_jSCCIqI.roa (hash: 8m00LdhJd4srRCMsExEiNSzzG4jj/QWLsZ3SSDUCdOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:2d:8f:64:02:04:ad:23:9f:04:82:03:ab:4b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
Validity
Not Before: Feb 17 01:00:56 2025 GMT
Not After : Feb 18 01:00:56 2025 GMT
Subject: CN=a715d43e8aefb950411743179cbb0d2e94ff9ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:53:8b:27:68:6c:54:85:d9:10:c8:85:ba:
9d:b5:b4:d9:1f:60:1d:1c:b3:48:d2:07:8e:e5:69:
86:ab:88:5f:2d:b6:ab:ef:6c:98:dd:eb:2e:7e:ef:
fc:b0:6c:05:78:8c:d5:dc:ff:63:78:68:f5:c1:e6:
d7:68:9d:5f:88:9c:ed:02:70:45:bc:1e:b1:00:6a:
40:8a:d1:6f:41:0c:c1:ed:84:5e:ad:5f:2e:92:60:
fa:7d:d3:82:e8:9e:8a:ce:ff:a7:f2:94:92:fd:29:
b5:59:fe:1b:07:4a:e8:4a:1e:67:82:b9:8d:cc:85:
7e:10:b5:72:6b:97:cf:21:73:3f:55:d5:e4:e1:ed:
71:d9:65:31:a5:69:d3:32:97:ac:06:7b:98:db:ff:
fb:fd:2b:0c:35:33:5e:71:95:38:64:bd:d5:27:ba:
d9:15:8c:47:27:69:90:ba:13:de:ba:24:16:c3:dc:
d3:0f:6b:ba:32:a6:62:b0:9d:1f:2d:fe:f7:bc:af:
bc:b9:d6:c2:c9:9e:d2:db:92:91:72:ee:38:f4:6d:
57:2f:39:04:b5:43:c4:c3:a9:0f:94:ed:63:17:2a:
63:e2:2e:85:05:38:60:f3:36:f6:3d:59:93:ab:54:
c9:0c:bd:a0:34:9f:e8:cf:cf:1f:11:a1:3b:51:94:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:15:D4:3E:8A:EF:B9:50:41:17:43:17:9C:BB:0D:2E:94:FF:9A:D9
X509v3 Authority Key Identifier:
keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a5:08:e1:72:62:02:0a:90:b9:ff:d2:df:e3:b6:f2:a1:35:
d8:86:56:ab:f0:da:06:b2:2d:b3:84:d7:18:aa:a1:4f:9c:aa:
40:ee:b9:57:61:0b:e4:98:b5:0c:68:17:dc:56:94:c1:70:0b:
d7:53:4e:8c:fa:94:50:b3:74:48:b9:35:12:54:64:f9:b1:6a:
3b:83:df:07:db:8a:d0:b3:a6:ba:f0:54:e4:a5:26:80:c0:d2:
68:51:6d:46:c6:f1:1a:b6:e7:28:a1:94:1a:09:e4:34:60:c8:
0a:58:63:bf:62:d7:42:eb:9e:1a:77:a4:93:04:41:65:fc:1c:
38:98:b0:ca:8d:ce:c9:9e:65:3b:ff:0b:aa:32:e8:4e:76:e4:
99:f2:b6:ff:43:b3:2f:e3:81:1e:a8:f3:ab:49:f6:af:68:09:
fa:b3:86:21:14:cb:57:67:6a:c9:a1:ff:36:17:6a:a1:cd:26:
5d:2a:b4:8d:30:9d:d9:34:0a:77:99:b4:78:f6:14:df:b1:d6:
a8:30:31:9a:81:a3:21:c5:52:f0:25:e9:54:19:54:d2:23:82:
9e:2d:46:13:f2:3d:3d:b7:f1:6d:82:27:38:f3:79:dd:d6:62:
14:f3:e4:be:8d:ce:83:89:f9:2a:aa:4c:d3:da:f3:dd:d4:48:
41:68:19:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:01 2025 by rpki-client