Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json)
Hash identifier: HH/iaUa7GDKCJuAbAYnAosyvb9uTktYfcmcLvbB6xUk=
Subject key identifier: BB:0A:1D:E1:9D:2D:B0:F8:05:1E:BA:21:10:62:D1:49:27:47:3A:72
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 0194C3BE370BEB2C048A9D17EAD3F9E04BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
Manifest number: 074F
Signing time: Sat 01 Feb 2025 23:00:10 +0000
Manifest this update: Sat 01 Feb 2025 23:00:10 +0000
Manifest next update: Sun 02 Feb 2025 23:00:10 +0000
Files and hashes: 1: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: lIDr/XDlMIdXJH7Kd8OadDPWVSQdwEzvEMiYgy4pPrM=)
2: jSlm79fFu0VgJBsIaC81oVf4nGI.roa (hash: 8IYkRLo3mCrHlEs7aBNerIrNbkB27E7Mc7prSDZuZVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:37:0b:eb:2c:04:8a:9d:17:ea:d3:f9:e0:4b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: Feb 1 23:00:10 2025 GMT
Not After : Feb 2 23:00:10 2025 GMT
Subject: CN=bb0a1de19d2db0f8051eba211062d14927473a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:e5:8c:cb:fa:64:ec:fb:11:c3:20:93:bf:
0f:9e:63:24:43:3a:60:56:ce:80:02:d5:b7:19:ee:
6e:d7:36:ae:61:0b:a6:b2:37:18:bc:55:6f:ba:70:
22:46:f7:14:62:83:fd:3c:73:10:64:05:e2:42:aa:
12:8f:1f:1f:9f:b6:fe:9a:41:43:3d:e0:ca:4c:08:
63:3c:a7:c8:6c:4a:2f:a6:07:f0:f0:05:2a:81:34:
48:c4:48:03:48:b1:dc:68:8f:af:2f:a3:2c:ec:84:
25:80:27:90:82:11:30:5a:b2:77:d8:8e:3e:fb:56:
a8:6f:18:25:eb:ea:8d:86:02:3b:0d:62:32:51:95:
33:d5:5d:b6:2c:1e:be:71:6b:4a:cb:c3:12:60:d7:
4b:eb:51:0c:e4:eb:1a:47:28:4d:6a:58:6c:88:6c:
a7:99:e7:8e:94:54:79:ca:2a:36:ce:1e:3a:8f:35:
40:ff:dd:f2:54:6e:a7:cd:d3:ee:d6:c6:3a:ec:a9:
60:7c:3f:5f:a7:7e:fe:a9:a9:bc:90:2d:79:d6:8b:
bb:78:84:36:9a:90:73:fd:42:53:4d:12:a4:48:cc:
01:c3:34:9f:dd:de:59:48:54:89:6b:ae:e4:62:69:
c0:f7:54:b5:b0:fa:be:36:31:a8:96:39:1b:78:f5:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0A:1D:E1:9D:2D:B0:F8:05:1E:BA:21:10:62:D1:49:27:47:3A:72
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:12:7c:94:7e:f1:22:20:ec:f7:62:90:0e:96:56:8f:1d:da:
5b:3b:e0:06:b3:5b:3d:87:85:19:5c:e8:5f:b4:02:28:86:61:
f2:5d:b9:9b:67:ba:f2:60:b3:8e:b1:f1:f3:02:77:05:ef:20:
85:e1:cc:10:b7:50:65:01:88:f5:f1:e8:0a:43:dc:1f:64:e2:
fe:b8:79:d3:91:75:dc:3c:e3:9a:f9:c6:ad:dd:d5:71:55:c3:
8f:50:5e:1f:91:3b:d8:4e:83:ff:99:6a:37:42:c1:39:71:e1:
7e:c5:93:41:b0:6a:3d:d0:92:49:3e:29:8e:fa:84:ed:b5:c3:
2d:9e:61:53:bc:eb:f8:90:b3:06:90:44:fe:43:01:98:3b:c6:
77:77:71:20:6f:44:3c:b9:ba:bc:ad:94:5a:a4:5f:9b:a8:a9:
10:46:24:ec:e4:87:89:b2:98:29:fa:57:2d:e7:2d:53:e7:7e:
32:10:ca:6d:62:16:e6:ef:df:90:66:3e:0d:6a:0f:70:6b:71:
46:e5:9e:af:97:32:b9:84:60:82:f5:40:79:cd:c1:48:4c:94:
c5:9e:3e:88:d5:aa:39:22:c4:79:63:c5:df:4f:6b:58:a6:b4:
52:53:17:eb:a7:19:7d:0d:a6:66:18:10:6f:29:c3:5c:37:c7:
ca:38:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:43 2025 by rpki-client