Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json)
Hash identifier: QSS525UYgMMULfZdJDnRU7f/P6D19nVw7slUsE9Kl/E=
Subject key identifier: 44:50:62:7A:2E:D5:02:58:09:81:F3:9F:D4:56:38:3A:B2:C4:3F:91
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 0195127E65CFFC9FAB1D71D08A20042AD922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
Manifest number: 034B
Signing time: Mon 17 Feb 2025 06:00:28 +0000
Manifest this update: Mon 17 Feb 2025 06:00:28 +0000
Manifest next update: Tue 18 Feb 2025 06:00:28 +0000
Files and hashes: 1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: qJh6fKESlRZAS9s+qoUktJsYMBLyTjsHBMLq2Kdet7g=)
2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:65:cf:fc:9f:ab:1d:71:d0:8a:20:04:2a:d9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: Feb 17 06:00:28 2025 GMT
Not After : Feb 18 06:00:28 2025 GMT
Subject: CN=4450627a2ed502580981f39fd456383ab2c43f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:44:23:ed:b0:9f:c3:76:e9:f4:f8:1b:da:
4c:9b:a9:48:5c:56:91:cb:81:30:44:a1:ff:15:0c:
2d:2c:68:6f:a1:aa:f8:8d:f7:95:f2:9b:9a:ed:50:
d7:df:72:c2:98:b1:31:89:1c:be:8b:14:88:9e:45:
79:15:0f:a0:bd:3a:83:bb:c9:f3:c3:56:8b:d7:ca:
fb:bd:73:30:83:23:68:7f:2f:14:2f:3e:ad:8a:e9:
54:66:f9:2b:67:16:5e:94:70:35:ac:d1:b5:8c:34:
d8:a8:6f:5a:16:dd:45:58:6d:87:5e:ae:ba:e8:a2:
88:c1:0a:02:13:04:47:8b:37:2b:ad:d4:6b:e8:36:
62:b4:31:6f:7d:f4:a6:4a:73:38:f2:cf:42:25:e7:
76:c0:0e:0b:52:82:e3:8d:5a:21:94:b0:77:6e:b6:
3f:25:dc:c4:60:df:13:e1:ec:c9:31:18:fd:72:07:
e0:80:46:7c:87:65:ea:d2:b7:23:9e:37:6a:d0:66:
2b:94:b2:db:b6:be:ab:19:8c:3b:63:e3:56:2c:74:
3c:ec:2c:23:63:6e:8c:25:da:b7:3b:2c:92:60:cf:
dc:06:ea:82:22:20:19:73:2a:96:9c:8c:a7:ef:41:
0c:86:54:9e:2c:a2:43:5b:e7:50:c8:70:79:c5:ad:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:50:62:7A:2E:D5:02:58:09:81:F3:9F:D4:56:38:3A:B2:C4:3F:91
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e0:cc:2f:a9:5a:7d:0c:41:4a:54:22:35:80:ac:2d:5d:98:
72:fc:a4:ad:34:57:36:2f:11:1f:bc:f0:d3:f0:de:75:13:b6:
54:0a:0d:ca:07:9f:80:11:63:37:4f:fd:8a:d7:ae:00:c2:71:
ed:42:0c:fc:4a:07:45:f6:7c:ec:8a:ef:35:6a:e1:2c:5a:fd:
68:e9:00:9d:c3:f3:b3:ad:a4:80:33:38:f6:08:05:6d:fe:f9:
da:6d:c0:7d:ba:cf:89:ff:a2:1c:fb:f9:50:e0:f8:3b:cf:8a:
f5:e2:37:84:a4:b9:7e:a9:7b:5f:bd:69:62:66:f9:ff:83:ab:
56:20:a5:f4:18:33:31:eb:22:6c:78:4a:00:45:8c:a9:a2:2f:
fb:14:96:55:2a:2d:44:17:09:e0:5f:04:8c:6f:5d:aa:e9:c4:
ce:17:ef:5e:8c:97:09:57:70:ac:3a:57:63:80:1b:c3:fa:34:
ab:61:b8:9d:0d:c0:5a:a4:b9:32:5f:09:59:08:30:d2:08:f7:
e5:26:81:d7:3e:e6:60:9c:b8:73:0d:fb:36:9c:d8:dc:72:91:
ab:aa:e3:f6:80:45:36:0d:58:5a:4a:15:f4:83:8f:be:df:0b:
a9:10:a6:ab:80:19:d7:63:5b:f1:c9:95:74:1f:35:55:66:9b:
a9:e7:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:16 2025 by rpki-client