Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: wZWekG2Xf9qrNY599pISwHD7vgnV2KUWrvdaCXk6zBs=
Subject key identifier: 16:D1:E2:50:1F:42:53:A1:03:1E:05:C1:8F:D5:02:5A:98:20:AC:45
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 0194BB5FDF418B55D33591F5859234577DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 01BA
Signing time: Fri 31 Jan 2025 08:00:09 +0000
Manifest this update: Fri 31 Jan 2025 08:00:09 +0000
Manifest next update: Sat 01 Feb 2025 08:00:09 +0000
Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: y748AbaWf35L1Sz3Yh+kZiIDqgNvykLLCXpoRe1zASw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:df:41:8b:55:d3:35:91:f5:85:92:34:57:7d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Jan 31 08:00:09 2025 GMT
Not After : Feb 1 08:00:09 2025 GMT
Subject: CN=16d1e2501f4253a1031e05c18fd5025a9820ac45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:ef:86:42:cd:47:3e:a1:30:9a:03:43:51:
4a:2d:35:fe:8c:6b:54:f2:5a:07:33:cc:3e:4c:91:
3a:7b:23:8e:74:72:dc:61:36:b5:c8:1f:bc:b2:13:
c2:34:e6:e8:98:35:ec:30:6e:84:40:ee:80:9a:8b:
f0:0f:b0:17:b3:f1:c4:d5:99:85:85:3d:6f:54:59:
c0:f0:a9:9e:ea:c8:16:f5:c7:c6:a2:d1:be:dd:3c:
4d:5f:60:ac:b0:b9:72:12:b2:52:da:84:eb:d5:f6:
7d:6b:52:aa:18:cd:08:29:d6:bb:d2:e2:d8:d2:d5:
63:d1:ec:8e:39:c7:93:32:20:08:a4:f9:66:8a:9b:
a3:c2:5d:67:bb:27:55:c6:e8:11:ef:83:0c:03:2e:
c1:31:2f:f4:8c:b7:03:31:9b:8b:d7:6a:19:05:2e:
3a:5a:2d:48:4b:51:0f:4e:25:d0:3b:24:a7:3c:0a:
1b:6c:2d:d4:09:84:47:d6:ca:36:95:91:a0:ca:56:
62:4f:e6:a4:99:e8:bc:f5:cc:d2:1b:58:59:84:43:
aa:53:c6:83:82:73:57:e1:ef:cd:21:b4:30:5e:64:
5c:97:6d:91:f4:96:a8:f3:17:5a:ab:00:7b:4c:4f:
31:6b:e1:04:ad:fb:21:ef:a7:ab:39:9c:5c:d1:84:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D1:E2:50:1F:42:53:A1:03:1E:05:C1:8F:D5:02:5A:98:20:AC:45
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c0:1c:e7:c1:62:d6:e2:b0:45:bb:a4:7a:89:c3:3d:48:53:
18:56:9f:af:32:c7:fe:54:ca:13:84:14:47:46:e2:b7:77:09:
10:ce:99:77:cd:eb:ba:f0:67:bb:d2:f0:f4:6e:ef:6c:02:cd:
91:fc:61:15:bc:bd:c2:84:86:cf:07:18:6b:cf:ae:8c:c5:c7:
8f:1e:e7:86:f3:7e:c8:67:27:0b:f1:38:e7:2b:5e:91:0e:e3:
de:bf:e5:04:c2:a2:55:09:f0:d3:48:44:74:4b:53:27:90:f8:
c2:c9:64:c0:43:3c:e3:ff:eb:2b:bd:cc:66:d0:2f:45:21:07:
dd:aa:bc:2f:cf:7b:8f:83:88:ca:ab:dc:c4:cd:4b:0f:b3:da:
e1:28:f3:fe:6e:96:a6:d2:39:e9:79:83:c9:77:20:00:33:ba:
8e:06:78:a7:0f:34:db:98:3d:56:0d:18:74:1f:1b:e5:ac:72:
8e:b5:5b:28:2a:5d:fc:a8:c1:81:c8:80:dc:2b:53:ce:af:0c:
f1:9f:5e:f5:36:7a:b6:40:73:9b:6d:0d:9c:96:30:19:ed:79:
a6:56:df:b7:71:44:54:c2:c5:14:3b:4b:59:62:49:65:c3:41:
8d:10:65:21:72:8c:f1:33:4a:53:eb:23:4d:5b:ca:fa:5a:c6:
9e:94:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:12 2025 by rpki-client on console-fra.rpki-client.org