Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File: sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier: Y/F+fOmEjnJYNoUPdknowrlnIkV/Oj50FimhDzYgKjM=
Subject key identifier: 7D:D6:05:18:0A:48:B1:C7:08:D7:C1:67:1D:1F:60:39:2D:6E:40:26
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial: 01952D50FD5FADB1E860E4F567AD4887D5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number: 18
Signing time: Sat 22 Feb 2025 11:00:37 +0000
Manifest this update: Sat 22 Feb 2025 11:00:37 +0000
Manifest next update: Sun 23 Feb 2025 11:00:37 +0000
Files and hashes: 1: etRjZbIj12dLl3Cu-wmUuq9jXZg.roa (hash: sbMAcUZawu8ywXd9mLfTWYNQ0XvVNOGuwfVUKcBp2Bo=)
2: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: PjfhI2UEnmZohwrSLSRhS/21DRPyI3Zoj9eDL4hW4wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Feb 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2d:50:fd:5f:ad:b1:e8:60:e4:f5:67:ad:48:87:d5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Validity
Not Before: Feb 22 11:00:37 2025 GMT
Not After : Feb 23 11:00:37 2025 GMT
Subject: CN=7dd605180a48b1c708d7c1671d1f60392d6e4026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:69:40:5e:77:e8:d1:cd:e0:8c:75:7d:46:
a9:b5:63:21:b9:4e:40:d4:dc:5d:af:9e:c4:04:5a:
58:4a:77:fa:99:ed:7a:a9:3f:5b:57:c2:29:d0:27:
96:01:d7:85:9d:eb:f5:fb:be:10:e5:1c:a4:8f:ea:
2f:9c:50:9b:3a:1f:c7:55:5e:53:15:99:6f:31:47:
84:bd:e4:ae:a9:84:dc:38:25:d6:77:85:70:ee:c4:
55:16:2c:64:66:d6:31:13:2d:14:3c:53:db:bd:cd:
3f:5c:c8:6d:14:1b:e3:ec:6b:d1:1a:f2:72:d6:d4:
21:42:91:e8:c9:d4:56:f1:2a:8e:65:4f:f1:24:3f:
0d:fc:79:ef:e1:32:e3:4f:a2:83:6f:20:02:64:74:
33:38:94:0a:c4:6f:dd:60:de:6c:e9:b1:4f:a5:6b:
db:f7:cc:e0:73:46:2e:cc:c8:58:ad:2a:43:72:68:
0d:94:ca:cc:81:16:92:a4:dc:9e:5d:38:41:99:af:
d5:92:a5:0f:fd:8e:1d:40:04:c8:1d:73:4b:2e:52:
7c:42:5c:19:0a:9c:39:ab:ab:df:14:cd:b7:60:74:
89:b9:d2:66:ec:24:70:f9:a2:ae:67:cf:fb:73:39:
ee:f7:40:1b:03:9a:a5:f7:6b:32:f0:a8:31:df:24:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D6:05:18:0A:48:B1:C7:08:D7:C1:67:1D:1F:60:39:2D:6E:40:26
X509v3 Authority Key Identifier:
keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:02:11:f3:fa:46:43:61:25:d8:c1:d0:9f:d3:e1:f1:80:06:
ca:93:e3:e4:7e:55:da:0f:cd:89:03:1a:09:07:85:5b:70:e6:
d3:60:27:30:89:c1:98:8c:04:e1:3e:df:0f:02:30:94:85:9f:
c9:23:67:19:92:93:91:b2:2a:1a:50:f8:5d:ee:57:fc:06:03:
87:09:68:44:4e:6c:14:09:0f:8b:13:79:ac:f1:6a:b6:92:e3:
20:3a:46:fe:c1:c6:ab:48:75:ba:cb:38:59:74:30:0d:25:de:
bd:bd:07:6f:b9:59:d1:63:34:d4:af:ee:76:2e:ed:57:c5:79:
64:ab:1a:64:ee:ad:68:ff:2d:9a:6e:d2:cd:31:c4:e2:f9:df:
3c:95:a7:4f:60:88:df:20:3b:45:02:64:69:4e:4d:b1:f3:0d:
4f:0a:e9:63:c4:a2:e5:a7:39:c5:02:f8:13:39:8a:cb:f9:d5:
1a:f1:ea:1d:be:b0:23:a2:68:9e:bf:c1:d4:d5:64:d0:d4:ff:
18:f8:0f:a8:ea:1e:1f:2f:ff:aa:cb:79:cb:d5:76:ec:80:43:
67:1b:98:6f:97:78:d2:aa:9e:e3:20:7c:f6:07:c6:bc:da:79:
e8:a6:83:d6:f2:86:8a:f2:3f:b4:dc:eb:60:3b:fa:cf:a0:3a:
08:ca:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 21:03:52 2025 by rpki-client