Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: qu6DTjTf0P27ux5Gc4QVTFUDwj5xwne5atKf06TtNE8=
Subject key identifier: 7F:8A:E9:07:56:94:46:6E:8E:47:4C:54:D4:3A:A4:E4:B6:BF:58:DA
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 0195116C24826A0D963E3C765B424D648931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 0495
Signing time: Mon 17 Feb 2025 01:00:54 +0000
Manifest this update: Mon 17 Feb 2025 01:00:54 +0000
Manifest next update: Tue 18 Feb 2025 01:00:54 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: 2M67CEFXsIDH7RW+V7cADtB7dHbkzIjttPg4KHRo0gA=)
2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=)
3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:24:82:6a:0d:96:3e:3c:76:5b:42:4d:64:89:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Feb 17 01:00:54 2025 GMT
Not After : Feb 18 01:00:54 2025 GMT
Subject: CN=7f8ae9075694466e8e474c54d43aa4e4b6bf58da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:5b:06:8d:ec:1e:57:02:66:e5:da:3c:70:
5d:ea:66:41:83:fb:95:1c:59:ba:e6:ed:59:e7:10:
4a:4d:4e:41:b4:08:11:7a:eb:a9:d1:fc:3a:01:22:
18:8f:5a:3c:4c:01:e2:1e:41:5e:4f:24:c4:ad:b4:
9a:85:c4:27:4e:06:87:73:1d:10:78:3f:e0:f2:de:
05:19:95:5c:05:b3:8d:63:ad:94:d8:59:ac:0a:7b:
ba:1d:e5:24:64:4c:8f:c1:d5:2c:56:66:1f:ee:19:
74:82:88:8d:ee:db:a9:03:66:28:07:f3:6a:18:f8:
bb:b6:f4:b4:4c:2e:cf:5a:3d:16:43:cc:80:91:aa:
12:9b:ec:58:6f:67:7e:56:94:27:76:99:2f:0e:81:
74:2f:55:4a:fd:d2:7f:e7:cb:a1:9e:f3:2a:12:6e:
cd:ae:d1:ce:c1:9b:f9:57:a8:81:c6:b0:f8:76:de:
7a:81:09:5c:b6:da:f0:22:41:a5:97:cf:c1:7e:c1:
1f:2f:24:db:d7:70:d0:da:05:23:b3:15:99:df:85:
ab:f5:97:6f:18:14:3c:2d:28:75:ee:bb:f0:04:75:
bf:a0:03:d5:0f:ed:ec:e8:9a:a1:b5:df:03:1d:91:
6e:99:02:d5:e4:df:29:40:11:a5:fc:d6:b4:c1:52:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8A:E9:07:56:94:46:6E:8E:47:4C:54:D4:3A:A4:E4:B6:BF:58:DA
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9c:f6:28:27:04:a6:0d:ef:3d:fa:17:fb:71:74:6f:ef:5c:
ff:21:78:62:10:d1:dd:2c:c6:90:86:dc:e8:76:f8:81:37:8c:
f5:c5:08:ea:bb:3d:a9:e0:f4:a7:51:ba:0a:1a:c4:a5:f1:e8:
b1:68:c9:09:57:0c:86:97:9a:b6:4d:d1:7d:23:9e:51:63:d9:
77:2f:1d:af:e1:be:38:db:18:ca:2b:e8:f6:ca:b4:43:f1:5d:
2f:8a:98:c4:ca:be:17:b7:e8:02:f3:8f:62:fc:56:17:e5:15:
b2:0e:8d:57:70:b9:5c:83:1e:dd:13:28:d2:27:57:6c:b9:5d:
91:03:61:64:b1:ed:e6:1b:c8:89:9f:8a:2e:ae:dd:0b:6b:63:
2a:c0:39:03:16:f1:c1:5b:1f:e5:c2:95:4c:4a:27:16:06:06:
81:ba:41:90:7c:2b:13:71:81:41:b3:82:01:be:12:1f:cf:0e:
af:ca:e5:b0:e3:7d:f9:a5:ea:e2:a4:a6:d4:9f:17:98:3c:cf:
94:08:b2:5d:fc:b7:89:07:47:ed:0d:c4:87:ae:e9:60:f3:48:
2e:26:f8:bc:79:4e:26:bd:9f:98:a1:dd:2e:56:ed:02:83:86:
23:ae:8e:32:d4:f0:a5:e6:31:a4:cb:ee:d6:6e:02:f5:0b:91:
b3:4c:bf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:28 2025 by rpki-client