Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
File: Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json)
Hash identifier: WRDX9erz1+f8smblR7zmlnhsc15xE1XYfU0TF3hB2l4=
Subject key identifier: CF:70:CB:3A:19:32:D6:E7:3A:2F:37:BC:25:80:00:F0:2A:7D:A0:44
Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b
Certificate serial: 0194BABBA76E06EBF8E14E27392F4CDC4314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
Manifest number: 10FC
Signing time: Fri 31 Jan 2025 05:00:47 +0000
Manifest this update: Fri 31 Jan 2025 05:00:47 +0000
Manifest next update: Sat 01 Feb 2025 05:00:47 +0000
Files and hashes: 1: Jz6Plky4nRwLQTJJcOF7jGNXrSw.roa (hash: /BEPfzyhvzI281lagKYoLrBP/3LTnv9Sk0+qZpDUYPQ=)
2: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: P4V31ed4/m4Wgkfp9MIoGWgpRwe86NiNs4ZGVECO6LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:a7:6e:06:eb:f8:e1:4e:27:39:2f:4c:dc:43:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b
Validity
Not Before: Jan 31 05:00:47 2025 GMT
Not After : Feb 1 05:00:47 2025 GMT
Subject: CN=cf70cb3a1932d6e73a2f37bc258000f02a7da044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:07:a0:53:56:7e:42:c0:1d:8b:97:c4:9f:
8e:30:34:69:e3:59:a6:84:0f:cc:dc:65:e8:03:8f:
22:1d:a1:2a:24:8d:f3:52:fe:3f:04:c5:9f:82:04:
8e:85:3c:de:78:7e:a3:69:f5:ed:a5:52:44:96:32:
78:e0:18:83:26:1b:83:5d:9a:49:ea:8e:0a:02:c2:
7f:45:ed:34:94:97:d3:54:c2:7e:5b:90:71:c0:cd:
84:66:28:3a:94:62:55:ab:8c:d3:dc:02:aa:ac:4e:
03:cd:45:ad:5a:27:9c:8e:ce:8e:1e:74:18:fc:2a:
60:0b:31:7e:d3:e7:31:92:a8:db:ea:dc:43:b6:46:
03:5d:f4:ac:83:82:b3:0e:4c:70:29:19:82:c8:e3:
66:e3:0a:1e:90:70:37:fd:f9:e6:ab:d6:4d:67:48:
4a:10:4b:5a:83:4e:43:98:3c:51:7f:0e:ec:8e:5b:
20:37:ed:34:c3:9b:59:57:d8:00:9f:2c:fd:ea:46:
23:49:a1:d2:f2:67:1e:57:05:c7:a3:22:51:32:1a:
17:34:10:6e:3a:1e:7a:7f:35:2d:23:35:4c:67:b8:
0e:e3:2f:4f:19:69:e4:bb:ef:81:fd:3d:87:e1:bb:
60:eb:7a:8a:11:84:6d:eb:b6:dd:27:71:e8:cf:8a:
36:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:70:CB:3A:19:32:D6:E7:3A:2F:37:BC:25:80:00:F0:2A:7D:A0:44
X509v3 Authority Key Identifier:
keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a4:4d:87:40:42:35:6a:94:4b:b3:de:13:a4:a8:53:d9:f2:
64:8c:67:6b:02:90:52:32:d7:df:33:11:7d:2a:1b:d3:be:31:
48:33:5f:72:be:e9:e3:89:43:27:a9:88:dd:47:26:a8:91:57:
c8:30:78:fa:02:cb:f5:91:99:f3:78:1a:2c:38:ca:86:53:1b:
82:85:dd:c8:2b:41:29:f1:5a:e3:61:cd:e7:0e:77:2f:35:6e:
58:17:25:5a:e2:e4:52:18:de:1e:19:1b:2c:8f:2c:88:34:0c:
86:a0:58:4e:fb:16:37:8c:4d:7b:ff:8d:01:00:f0:34:33:45:
e2:4d:77:53:54:d1:93:e8:3e:ff:53:bb:cd:80:98:07:e4:22:
30:17:97:30:95:11:79:7d:2f:b6:3f:b2:a9:61:2e:fe:36:ad:
94:ab:ec:6d:81:47:2d:af:e1:43:c2:e0:4f:ea:0d:a4:c6:0a:
b1:a3:dd:8d:b2:8a:62:59:90:68:55:9f:9b:cb:c5:51:9c:d4:
21:d6:48:29:be:eb:31:7c:26:f7:cc:7d:37:dc:d6:de:93:6b:
bb:05:a6:7c:ef:ea:15:07:78:ef:77:a9:4c:38:3b:19:dd:7e:
92:4a:4a:33:25:11:c2:0e:1a:cb:8f:d0:6b:b2:e6:69:60:07:
c9:77:3f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:21 2025 by rpki-client on console-fra.rpki-client.org