Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
File: qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft (raw, json)
Hash identifier: AameojI29a5zlo8gTH6+CFwFd3iqgCROzUq2eq6NkXA=
Subject key identifier: 6B:12:E8:EB:6C:43:9E:8C:8D:AC:01:AC:38:8D:F4:A1:9F:C8:2F:9B
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Certificate issuer: /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial: 0194C5084A74620FEE04A4938473E0EEB61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
Manifest number: 0B24
Signing time: Sun 02 Feb 2025 05:00:42 +0000
Manifest this update: Sun 02 Feb 2025 05:00:42 +0000
Manifest next update: Mon 03 Feb 2025 05:00:42 +0000
Files and hashes: 1: qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl (hash: /3EpnAiwXePgMcaRjBtlGqKMk2X3NwLuhQicboMPXAc=)
2: qqQQvs9nXt1HjpZfeqvOvwFytUQ.roa (hash: 63Z1XFDv2thWE6305aK6hjX0RMocIGGlkCydM7bw3MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:4a:74:62:0f:ee:04:a4:93:84:73:e0:ee:b6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Validity
Not Before: Feb 2 05:00:42 2025 GMT
Not After : Feb 3 05:00:42 2025 GMT
Subject: CN=6b12e8eb6c439e8c8dac01ac388df4a19fc82f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:d6:f4:88:6f:55:23:54:df:2c:52:c0:ed:
18:a8:59:4a:42:bf:17:1d:c5:12:87:65:ab:71:cd:
f0:a1:63:93:48:d5:9c:70:7b:ba:6f:41:ab:00:48:
96:88:b4:ea:63:a6:e0:69:74:25:20:7d:1e:ce:28:
e4:d6:8e:cf:3a:54:f9:05:b3:f9:ca:d0:e2:0b:5f:
ef:96:c6:65:6f:f3:c7:96:94:eb:4a:6c:e2:7b:09:
c6:4b:3c:cf:c7:ba:a6:02:4c:6b:ee:61:53:e2:80:
a4:e7:67:b2:db:e2:34:6b:3c:b9:71:50:84:cd:bd:
71:a6:32:88:60:1e:0c:d6:81:3d:42:9a:1a:79:ab:
24:d5:32:2b:8c:ab:3b:46:01:4d:a7:f6:29:c2:2d:
3d:0f:02:70:b6:d9:6a:aa:fb:f9:58:69:11:c0:3e:
46:67:b5:69:08:90:86:48:83:b6:5d:70:ba:94:3c:
32:55:af:63:e4:fc:77:4c:a9:60:95:98:ea:ee:e0:
7c:dd:28:17:a7:c1:27:35:35:28:5d:4a:e1:53:73:
77:7b:a2:f0:93:3d:a8:a2:23:75:6c:69:12:1d:da:
43:f7:a6:cf:39:3b:a9:3a:60:42:0e:cc:32:97:96:
3c:c8:7c:9b:06:59:ca:42:c1:7c:87:e9:b6:ae:df:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:12:E8:EB:6C:43:9E:8C:8D:AC:01:AC:38:8D:F4:A1:9F:C8:2F:9B
X509v3 Authority Key Identifier:
keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d6:18:2e:d3:c0:17:29:a9:c5:05:ba:94:4f:a4:34:46:23:
44:73:47:92:71:d5:f1:cc:48:d1:af:74:7b:41:74:97:7f:df:
53:63:24:6f:d4:77:86:ee:39:f4:64:36:c0:71:15:8e:48:f1:
c4:22:be:6e:8b:02:9c:c8:51:49:81:40:a7:97:7c:62:57:78:
c3:a5:aa:67:1a:a0:7c:54:50:1f:7d:e2:4a:d0:cb:29:a3:97:
35:76:63:15:bb:b2:fa:1d:51:c3:06:2d:d7:a6:05:d5:12:64:
ef:82:00:e0:67:ca:44:3e:04:31:95:d5:9c:35:a8:bf:ab:34:
b8:24:28:14:e3:f8:52:6a:12:20:18:81:be:df:7a:5d:60:bb:
6a:86:24:5c:30:38:11:bc:fc:3c:7c:05:d5:14:e1:d1:50:39:
67:c2:68:f9:5f:0d:fb:3f:a6:98:5f:7d:29:f4:1e:a9:42:57:
58:ef:50:9d:66:c3:a1:c7:86:2b:34:5b:2a:ec:48:d2:27:c5:
51:5f:31:58:3b:7f:a9:bd:e0:8a:c9:d7:44:e9:4e:6a:2f:cf:
12:6c:85:f4:8c:b9:ee:23:0c:bf:b4:ea:0c:5e:86:ab:2c:1c:
5f:5c:15:1c:ee:7a:e4:9f:55:f9:80:e0:3e:95:ef:85:e9:79:
e8:41:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:30 2025 by rpki-client