Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: ITOh8DeguwSoH+4/+/HO5i2nDtdFMsDy/XG2e+jQ9Zg=
Subject key identifier: FF:1E:CA:D0:BD:47:47:A0:4F:A6:97:E9:C6:DE:04:20:55:DA:68:77
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 01950E6B1465E428D93C628641ED05A29EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 11:00:53 +0000
Manifest this update: Sun 16 Feb 2025 11:00:53 +0000
Manifest next update: Mon 17 Feb 2025 11:00:53 +0000
Files and hashes: 1: 72XzTn7rpHovI8hKbF-XuNhiqpk.roa (hash: meAQIU9WXZ6ZgwY3KNsha4oJxSUE/USL+RvW40fZUXI=)
2: 9a42cuWC_BNDA4DIJ7JykE7wjb4.roa (hash: qRT9zf7xfXIljPHzFl0mxSNGtfeCmpUyqkEyE4RnCGQ=)
3: KqEu5jotrlVlkvOlW0cERo3_YvU.roa (hash: Ef6oWYOyhbekzNl2fidznurlFufl1VnCP1Vvg7sBYuQ=)
4: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: 3iQyqwd80kkgnGR11JzO1fhZN+CPrFosE6eyW76HHgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:6b:14:65:e4:28:d9:3c:62:86:41:ed:05:a2:9e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Feb 16 11:00:53 2025 GMT
Not After : Feb 17 11:00:53 2025 GMT
Subject: CN=ff1ecad0bd4747a04fa697e9c6de042055da6877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:f1:81:79:93:06:82:16:f3:17:ed:23:f3:
cb:2b:4c:80:fd:c9:45:01:9c:4b:1a:89:f8:5b:fa:
5b:83:5a:19:14:e6:01:8e:9c:4c:7c:95:02:d2:8f:
43:23:7e:74:d9:f2:91:03:98:63:8f:d0:08:33:28:
85:e5:52:7a:8b:5e:37:7f:e4:2b:ee:2f:28:c7:36:
10:e9:94:ff:f5:52:a2:f1:c2:a8:ff:95:38:e1:4d:
74:62:f9:d6:18:a6:7d:6c:a4:72:04:2a:9a:8e:94:
0d:21:26:a2:c7:78:c9:f0:ba:8b:ad:06:5a:35:16:
cb:d3:ad:79:c0:f3:57:d8:53:68:d0:86:fd:fe:88:
ab:6e:e9:76:d9:94:65:a9:35:76:c0:18:7a:0a:33:
e5:3b:c2:91:9e:25:1a:0f:47:db:ab:b3:4e:ae:c4:
28:3d:a1:10:10:23:60:91:a6:f9:96:f9:7f:41:3f:
c6:21:96:fc:e2:c1:c1:f6:c2:4c:42:15:e3:bb:89:
ae:83:90:b8:9f:cc:16:fa:13:20:98:70:c9:a5:0e:
43:3b:b1:e5:02:1c:61:30:17:0b:ac:2f:44:8b:7d:
20:b4:64:c0:be:98:de:bd:b7:90:7c:a2:c9:e5:2c:
47:f4:59:b3:dc:10:74:16:fd:d9:c5:14:da:bf:35:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1E:CA:D0:BD:47:47:A0:4F:A6:97:E9:C6:DE:04:20:55:DA:68:77
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:72:b6:2b:70:28:15:ec:18:6a:20:c8:67:54:5d:58:7d:96:
ea:f8:4f:6e:18:be:e9:2d:d0:82:00:3b:42:4f:b3:77:a2:5a:
f8:0f:2e:b1:5a:34:98:e8:a9:86:43:02:a6:e6:9e:cd:02:d2:
7a:46:01:96:84:25:1d:9d:2a:12:23:68:1d:63:29:d7:5a:33:
dc:a1:16:f1:fb:c9:cb:7e:e2:87:fb:7a:aa:b0:ce:38:74:6a:
d0:42:5a:37:0d:00:7e:24:96:91:b1:3b:57:ae:00:12:7d:ca:
5d:e4:32:e9:ff:14:f3:26:69:a2:68:b8:20:d0:e0:7e:6d:73:
23:43:8e:ba:eb:6b:43:b6:83:bd:0b:c8:75:ad:05:06:a4:05:
46:02:b4:41:a8:b3:1b:e6:3b:5c:a7:1e:e7:c2:f4:e0:6f:e1:
87:75:74:cf:77:3f:c4:51:ee:35:29:cb:cd:46:74:3d:72:52:
9f:91:c1:a5:19:d6:89:cf:46:02:a7:a6:ab:71:89:02:6f:cc:
63:da:07:1a:31:89:32:c6:79:09:2a:cb:fb:63:84:40:ec:01:
a0:50:b4:f4:ed:ee:01:64:86:cf:70:68:34:96:b2:eb:91:46:
5f:d3:1e:b4:7a:68:43:b9:a4:38:e9:4b:9b:b7:3b:d2:76:30:
07:c4:00:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:48:22 2025 by rpki-client