Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
File: QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json)
Hash identifier: aJFZjZzgWvTw4Q55NJ1vzmAzU3sg8cXnw1LKtOPT8Zg=
Subject key identifier: 0F:B0:C8:48:EF:9F:45:E1:4F:D8:EF:0C:97:0B:B8:05:2C:5B:8B:0D
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial: 0194BA848C2039EA68874F892493C5D67258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 04:00:36 +0000
Manifest this update: Fri 31 Jan 2025 04:00:36 +0000
Manifest next update: Sat 01 Feb 2025 04:00:36 +0000
Files and hashes: 1: NDvYoDRKvIsz-6V9rVmhTDCa2sQ.roa (hash: dhgjcITIcU0jzfd0xbGSpC/kzQFCv6MxYX9SO45zGFg=)
2: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: rTZ7tl7mIsBbH/5/Idtwst9cHaqnEifPWPffT3JiSuY=)
3: cIiLeLQjSOta8uBuSJamYJA2bp0.roa (hash: HNS0nyiGUfnG1aMP87O2udQ4Nk+kwAFUsHx1btTnPvE=)
4: pYhcj4jriDQOw9AurBjLjtrgCIY.roa (hash: 7LD9r3XdAs/ISMzQa0jD1EGLbfWfSA0NQe/HoYtppdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:8c:20:39:ea:68:87:4f:89:24:93:c5:d6:72:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Validity
Not Before: Jan 31 04:00:36 2025 GMT
Not After : Feb 1 04:00:36 2025 GMT
Subject: CN=0fb0c848ef9f45e14fd8ef0c970bb8052c5b8b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:d3:da:7b:fc:15:08:3a:38:1a:af:dd:34:
a4:88:aa:49:a2:ef:04:54:5b:5d:fa:1c:b9:ed:ce:
3b:50:14:c5:13:47:1f:7a:d0:4d:22:25:9b:c9:d2:
b4:16:c0:74:b8:1b:86:2c:e8:9a:c7:26:3b:18:e6:
38:0f:4d:9a:9a:be:43:32:58:61:34:6b:72:24:9c:
22:52:c9:ae:51:f6:3c:d7:f7:b1:23:7d:c9:44:94:
b9:f0:18:84:f6:3a:7b:d8:e1:2c:04:af:c8:59:0e:
be:ac:18:59:b6:29:d3:6c:e5:85:af:21:5c:1f:39:
59:7e:a6:8f:38:5f:98:5a:2f:ef:51:05:ee:76:cd:
02:1b:4e:67:57:21:3c:32:25:33:ae:38:63:d4:bf:
92:22:68:6a:e1:ae:88:5b:cd:df:54:89:11:e7:9e:
d7:2e:bd:ba:e5:3f:70:d8:c6:06:d8:95:1f:5d:db:
b4:44:a7:2e:d0:1f:9f:16:07:3f:59:36:17:1e:19:
93:67:6a:f8:b7:2a:00:d2:6c:8e:e6:cb:72:bf:9b:
a8:5d:55:eb:32:bb:7c:b0:1b:80:26:ef:8b:9a:2e:
9e:1b:43:b1:8e:ef:f8:b7:39:1a:af:9e:07:c4:9e:
7b:29:48:1f:f5:5d:e9:72:ae:4a:32:12:5b:38:f4:
d6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B0:C8:48:EF:9F:45:E1:4F:D8:EF:0C:97:0B:B8:05:2C:5B:8B:0D
X509v3 Authority Key Identifier:
keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:00:04:20:0f:87:e2:c1:8d:f5:4b:9e:7c:61:b3:e2:dd:44:
0d:d9:27:69:5b:d1:6f:fc:d4:4e:60:e0:cc:9e:c1:db:9c:43:
31:d7:e5:02:97:02:c2:0f:53:91:62:13:5e:70:d3:4d:20:85:
84:81:d3:b7:21:fa:c8:ce:22:6d:08:d0:6d:11:2d:94:96:da:
93:a3:cf:d9:85:c9:ea:8b:9d:45:30:75:62:c3:a9:bd:ab:95:
d4:fd:29:5d:6d:a9:bb:43:cf:d2:54:06:21:bf:bb:3a:9e:62:
d7:0f:d3:a0:83:e1:9d:7c:29:f4:4a:31:67:8c:c7:3f:21:fe:
b0:58:8d:8e:20:b1:7f:d6:c7:d6:d9:15:40:f9:b3:5e:de:26:
ed:5b:ad:b2:2e:9d:1f:d1:96:27:5e:41:04:00:fa:76:e6:37:
21:6f:cf:e7:53:29:d2:5a:91:c3:5b:e9:18:14:ba:4d:3f:82:
22:cc:83:cd:58:54:d3:b9:f4:03:3e:73:5f:32:0f:e6:b6:da:
0d:d3:61:80:d8:6b:3c:34:c0:93:32:f9:1f:ed:97:84:88:4e:
61:97:61:42:9b:a7:3a:a3:86:6f:6b:42:ca:b3:59:9e:79:f3:
0e:65:cb:84:9c:da:11:8b:95:a7:c4:93:63:e8:b6:40:e9:e4:
e5:23:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:35 2025 by rpki-client on console-fra.rpki-client.org