Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
File: sq-PF3TgWSXyTkHe5p5bYj2axj0.mft (raw, json)
Hash identifier: BUOhQXJYOMD4xRH/N2xiTfZyX+2OiXa9NQ4witvZeNo=
Subject key identifier: 16:E0:E9:6E:9D:27:9B:D0:E0:D2:C2:00:D7:D6:4F:3F:EC:6F:E4:7C
Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
Certificate issuer: /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Certificate serial: 0194BB603AE1B305C805F0A14292F630A40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 08:00:33 +0000
Manifest this update: Fri 31 Jan 2025 08:00:33 +0000
Manifest next update: Sat 01 Feb 2025 08:00:33 +0000
Files and hashes: 1: dHmQJZqThrz58J_TSvHl_H-39E8.roa (hash: lBrrDh2GaFmnqywSNW3PsD5utU5WNEXu75PvBG3VZjI=)
2: sq-PF3TgWSXyTkHe5p5bYj2axj0.crl (hash: LQbIwbqqaEnOy5IfXBEJFDvQyRa/WlF5BPapGAG3ewE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:3a:e1:b3:05:c8:05:f0:a1:42:92:f6:30:a4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Validity
Not Before: Jan 31 08:00:33 2025 GMT
Not After : Feb 1 08:00:33 2025 GMT
Subject: CN=16e0e96e9d279bd0e0d2c200d7d64f3fec6fe47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:b2:38:b6:73:86:99:fa:04:93:3d:d2:69:
b6:fe:42:32:5d:5b:7f:be:cd:8e:d2:17:c5:3c:47:
3b:93:58:fb:52:8f:c7:e1:43:d6:e7:b4:34:6f:41:
e4:ed:60:e6:7e:85:f6:82:ca:41:c4:8f:a1:0c:9f:
01:89:38:57:93:7e:bc:3e:17:f9:e9:6a:24:f1:30:
15:b5:cd:84:30:80:e8:48:46:00:6b:2c:8d:4a:6b:
e8:6b:e5:7a:d5:4f:fb:6b:e7:fe:ab:97:2a:7e:2c:
fa:b1:68:b3:24:e8:b1:6a:2e:f2:f1:a4:79:fc:8d:
49:6c:a6:1f:8a:b2:0d:28:53:45:a5:5f:8e:6e:36:
5d:be:b7:a7:f6:af:7b:58:43:1a:99:50:f7:4f:9e:
1c:bf:06:6f:df:fc:86:81:8a:55:79:cc:e3:64:ed:
71:70:17:87:e8:66:5e:25:be:fd:c7:2c:c7:79:db:
89:7b:08:fe:32:ce:f5:c0:6c:9e:9e:e2:20:5f:8f:
e7:f9:d9:ca:0a:db:2f:d5:10:1f:2d:65:03:b7:63:
23:58:6d:08:df:94:2f:b5:1b:f9:ec:b5:fb:c3:20:
80:f0:d7:4f:08:61:40:b0:ad:2c:7a:e5:7c:6b:84:
68:c7:ca:d8:ab:79:02:4c:2b:b1:8d:be:75:09:b0:
0f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E0:E9:6E:9D:27:9B:D0:E0:D2:C2:00:D7:D6:4F:3F:EC:6F:E4:7C
X509v3 Authority Key Identifier:
keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:81:e9:a9:45:81:a5:44:76:1f:82:6b:48:d8:49:2e:98:b8:
c5:18:90:e0:0a:4b:1d:52:4e:8c:cc:b9:ca:51:55:a5:b7:e2:
55:e8:41:2d:af:59:31:1e:bf:a6:2d:db:65:03:8f:b4:ac:0c:
fc:da:55:10:c1:b4:b0:49:20:3a:71:6f:3d:45:d6:0b:17:4d:
42:f9:2f:f9:17:a6:4f:96:ae:f4:cb:19:5f:6c:7d:6e:da:de:
06:f4:cc:2b:c8:5d:ac:60:25:4b:67:61:de:80:aa:a0:c3:65:
85:b0:b8:7f:1f:de:f0:63:d0:1f:33:6d:53:4d:33:b5:ab:07:
71:f2:94:92:18:bf:98:cd:b0:ff:c4:26:75:a5:07:12:43:65:
ff:b4:3f:d2:b9:35:28:c2:ef:4f:37:ed:0e:45:2e:04:c3:5f:
34:53:e5:37:2a:c1:4f:0d:70:80:e8:3b:b4:cd:2d:87:4b:64:
df:a4:52:d7:3d:e7:7a:5b:73:82:22:63:73:f0:4e:48:a2:fe:
74:79:c9:49:bb:7a:79:7a:ca:8f:41:91:29:f2:d2:ca:9d:80:
40:a6:85:eb:74:aa:18:13:48:13:1a:4c:2e:9b:8e:b7:d0:5d:
d0:62:97:67:84:16:b3:c3:0e:08:63:ec:5c:7a:7b:48:d9:ef:
c9:33:98:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:13 2025 by rpki-client on console-fra.rpki-client.org