Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: fU3uG3SdJcuCkYJ2rn2FvupTMMG1XR2OgXcysea0Fjg=
Subject key identifier: 75:DF:D7:84:39:F8:F5:12:C1:39:28:CA:8E:AD:F0:C2:3D:1C:F2:9F
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 0194BB96CACB78E942BC985632813704DC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 09:00:09 +0000
Manifest this update: Fri 31 Jan 2025 09:00:09 +0000
Manifest next update: Sat 01 Feb 2025 09:00:09 +0000
Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: GzyUvDG8is3vFojfSem1fA/MY3Se/at/AfqPXtXVgW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:ca:cb:78:e9:42:bc:98:56:32:81:37:04:dc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Jan 31 09:00:09 2025 GMT
Not After : Feb 1 09:00:09 2025 GMT
Subject: CN=75dfd78439f8f512c13928ca8eadf0c23d1cf29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:47:1e:e1:cd:ba:04:d8:b6:13:4e:74:11:
64:9a:b9:eb:2f:4c:13:d3:0e:39:07:ea:13:8a:da:
bc:5d:ed:51:2c:35:96:56:78:1b:4f:03:8a:9f:06:
a0:c6:a0:92:97:8a:da:28:c6:1a:44:2d:82:c3:98:
c1:8e:a2:e8:c2:5d:b2:cd:db:77:6c:54:c1:4d:03:
08:d2:3b:ba:d1:6b:8c:94:65:d2:33:ed:bc:c9:dc:
92:a6:a9:bc:e4:b7:96:cf:d4:e7:86:10:f0:6f:01:
f8:d4:2a:88:98:b1:ee:e4:a4:d6:e6:3b:5a:ff:e6:
46:8a:08:76:6a:23:36:d3:18:1c:d5:05:f2:7e:06:
07:6b:37:47:bf:51:38:82:d5:7d:86:dd:70:f5:ed:
6e:c5:a7:b5:ff:1a:ba:08:ae:13:ae:f4:38:50:32:
a3:31:d8:48:af:da:c2:7c:cf:0a:ff:37:be:1b:aa:
3e:5a:7b:e9:ca:9f:87:6e:a0:3b:06:d6:16:95:ae:
32:9e:d8:58:2f:39:41:a6:92:bd:40:64:e8:3a:4b:
ef:45:c5:60:ef:70:75:2f:11:03:b0:91:e2:68:61:
46:b5:41:7f:65:d4:24:4b:31:c8:cb:0f:fc:78:8c:
c7:4c:ce:a3:38:dc:5c:bd:94:3b:7b:a9:18:66:36:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:D7:84:39:F8:F5:12:C1:39:28:CA:8E:AD:F0:C2:3D:1C:F2:9F
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:77:00:75:e8:d2:88:5e:90:54:1d:56:c2:a4:f0:f4:4f:74:
f0:a4:b6:80:9a:6b:db:2c:6c:a9:62:8d:54:fe:9b:ba:36:de:
fa:7a:da:e7:b9:2a:42:37:91:2e:02:c8:13:be:1b:2b:b1:b1:
ad:54:43:5f:44:a7:75:79:3e:cf:fb:3b:75:93:e4:2b:03:51:
e9:ed:b5:14:2a:f8:51:09:44:b1:8c:96:20:74:3c:ff:30:ea:
61:97:3b:46:5b:a7:7a:ff:f6:32:58:46:87:26:61:92:f1:d6:
18:8c:95:29:6a:6e:41:be:36:b5:e1:2d:7e:52:3e:ab:00:49:
b6:34:17:36:97:36:a8:f5:c4:70:4d:be:26:e3:72:5a:2c:2b:
12:f4:bd:39:74:cb:9a:5e:67:d1:76:90:b0:e6:73:c9:2f:24:
90:db:74:db:f7:f9:f3:71:9b:c8:46:1b:b6:6d:1e:11:56:fe:
01:9f:ff:95:f0:34:9c:f2:99:6b:50:e8:27:49:44:85:7f:de:
dc:12:8d:50:8f:4c:a5:a4:48:67:58:fb:db:4c:74:36:65:57:
64:e0:a1:33:1e:cd:d5:8c:00:98:ee:99:76:d1:6a:73:cf:2a:
32:ce:03:f4:70:57:fe:19:d5:da:98:9d:b4:58:94:8c:c8:16:
8d:9c:87:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:30 2025 by rpki-client on console-fra.rpki-client.org