Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File: Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier: Z+KiIb3o6GSgi46rRoA8Vk/TZFVRGf2FpJdlwom0b/U=
Subject key identifier: 7B:0C:38:82:2F:8B:D1:AE:9A:6B:E0:45:14:DB:2B:02:31:8B:D8:48
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial: 0194BAF23C0B43DDB5094672A0F151DA8E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 06:00:24 +0000
Manifest this update: Fri 31 Jan 2025 06:00:24 +0000
Manifest next update: Sat 01 Feb 2025 06:00:24 +0000
Files and hashes: 1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: p7EccIYpNGEA8YQ5cgsuI106npxT6wfw+lwcUGllHfQ=)
2: _hUSVwhR2AzTAQ2XfzdiOZjBm8w.roa (hash: QKR3oa2M9EI3ncjck89yXzV0N57ZeZLJb3UZ6dMHc2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:3c:0b:43:dd:b5:09:46:72:a0:f1:51:da:8e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
Validity
Not Before: Jan 31 06:00:24 2025 GMT
Not After : Feb 1 06:00:24 2025 GMT
Subject: CN=7b0c38822f8bd1ae9a6be04514db2b02318bd848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:af:d7:b0:85:d2:db:29:99:1a:b6:aa:db:
89:c1:06:eb:df:67:87:68:50:6b:e2:32:73:e3:ed:
4a:7f:a3:7e:38:aa:79:9f:f9:2a:d8:1c:6a:20:cc:
8d:fd:a1:0d:b0:de:c1:ff:3e:95:27:ce:56:22:bf:
91:b4:3e:cf:ec:29:5a:10:b1:fe:ce:37:ac:ee:3f:
c7:07:38:b7:b9:e6:95:6d:d7:65:f6:78:ec:72:ab:
ca:14:fb:a3:81:7d:13:c1:09:29:0d:75:b3:a8:d5:
3a:81:fa:68:f1:25:c7:8c:2e:08:da:fe:40:52:2b:
5e:67:f0:a3:0d:74:6d:f9:69:f7:db:17:ed:68:ab:
99:4d:fd:69:f9:b8:5d:58:fb:f2:4e:e0:c5:7f:ce:
30:c1:fa:77:f2:72:07:cc:f7:3f:80:c4:cb:36:0d:
98:71:97:da:be:f6:d1:2f:42:f3:75:11:7e:60:e0:
9d:cf:43:39:87:b9:4c:69:34:d6:02:de:4c:1d:2a:
b1:77:e7:4a:65:6e:e6:0d:b5:b5:0f:c6:b1:31:5f:
43:71:a9:96:d4:03:e1:0a:5c:c9:08:55:62:3e:14:
30:3a:da:17:39:c9:86:98:65:c0:32:1e:da:13:8c:
d0:04:72:8a:47:de:1a:25:19:60:83:b4:18:56:21:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0C:38:82:2F:8B:D1:AE:9A:6B:E0:45:14:DB:2B:02:31:8B:D8:48
X509v3 Authority Key Identifier:
keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:58:ac:88:78:17:f6:2c:e1:60:3b:a0:d9:72:8b:f2:f6:17:
40:ad:d3:57:54:c1:27:d2:d0:1e:e3:4a:a8:c8:51:40:77:f0:
92:5e:7a:3f:bf:e1:3b:a4:1d:ef:94:36:5e:56:0c:9b:f6:1b:
4e:30:a7:7e:66:a3:87:04:a8:98:f7:f5:27:17:27:d7:60:9b:
63:f2:3d:a9:47:e9:cb:c7:f1:aa:66:e7:64:99:58:05:17:33:
9f:34:c3:eb:31:ff:46:5d:10:fa:17:6e:d4:71:0b:a1:c4:56:
16:06:a2:d0:b0:2a:34:08:7f:5a:b1:15:93:0d:e1:52:63:03:
4b:78:be:cb:c3:e5:fc:46:d8:6d:3f:11:6b:2a:ad:e3:7e:19:
cf:4c:47:75:50:ab:2c:c2:d0:a1:cc:93:9d:c9:3e:f7:5a:10:
67:29:60:03:e2:c3:39:1a:6c:5d:fc:9e:fc:6f:ad:fb:6c:16:
22:cc:a1:73:0f:2b:0b:48:97:4e:18:0b:8c:16:d0:e0:a9:14:
72:7f:53:bb:d0:e9:39:f0:99:6b:cc:be:fe:be:7d:9c:33:cb:
86:80:0e:13:93:38:72:79:f0:96:be:21:91:da:87:6f:07:76:
45:5f:36:f7:95:a6:bd:b8:e2:2e:e3:52:08:ff:f8:5a:fd:97:
73:8a:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:05 2025 by rpki-client on console-fra.rpki-client.org