Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier: 1iVhL7A8rEorczNkXXx/bACvXkOARmlR6V29a1OfmtU=
Subject key identifier: AC:7A:D8:0E:9E:59:C9:64:06:1B:EC:5C:5C:9E:01:F4:C8:FB:74:3A
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 0194BA8497F185C9D41A88DE5F8E388AB17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 04:00:39 +0000
Manifest this update: Fri 31 Jan 2025 04:00:39 +0000
Manifest next update: Sat 01 Feb 2025 04:00:39 +0000
Files and hashes: 1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=)
2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: MGmDGdJrVZas6FfiF8w/ysegQdxI/vyF1bE3/25ETaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:97:f1:85:c9:d4:1a:88:de:5f:8e:38:8a:b1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: Jan 31 04:00:39 2025 GMT
Not After : Feb 1 04:00:39 2025 GMT
Subject: CN=ac7ad80e9e59c964061bec5c5c9e01f4c8fb743a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:38:c5:97:da:e9:24:50:35:a9:1d:89:b7:
91:78:61:a3:98:d1:65:5a:8c:d7:0f:b2:bc:24:16:
87:9a:c4:01:87:6f:72:3f:0d:7d:86:e9:47:4e:83:
01:d9:3a:9d:24:1b:36:f0:19:e2:98:83:3b:cc:35:
68:65:83:7d:b0:a8:b3:14:7c:a0:36:5d:87:6a:27:
38:86:e1:82:51:d5:e9:db:06:1d:be:1b:3d:b9:9e:
07:e3:15:5c:fa:ff:0b:f6:1f:79:2a:cb:7f:e9:cb:
2c:70:4b:e1:89:52:0a:0b:20:4e:8e:84:a4:82:bc:
e4:0f:52:71:77:ea:a0:cd:41:0f:03:99:f3:a7:e5:
60:8e:82:ec:df:38:b6:d1:b8:7a:c6:9b:f9:b4:66:
4a:b4:f7:8e:0b:5c:0f:32:d6:35:9e:f4:55:90:b1:
cd:ee:17:d1:6d:f5:97:d4:49:83:01:04:15:ba:d2:
6a:2c:0c:87:09:cd:aa:57:b4:23:e0:b2:32:2c:15:
f8:20:be:26:1a:7f:17:7c:51:50:23:13:5f:60:d7:
67:04:02:46:4d:7b:18:8d:c5:25:92:10:10:d9:cd:
26:06:cf:0e:66:a3:0b:6c:a8:42:3e:8f:cf:fd:f6:
b5:a9:1d:2b:4e:51:df:02:3e:a5:34:2a:86:97:71:
7e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7A:D8:0E:9E:59:C9:64:06:1B:EC:5C:5C:9E:01:F4:C8:FB:74:3A
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:80:a4:1b:00:60:59:12:3c:fc:40:7b:11:34:26:02:e9:23:
81:08:08:6b:7c:44:8f:40:38:42:5e:2b:31:6e:81:00:61:fa:
34:e9:b9:cf:57:8f:fb:a1:e9:69:08:1b:02:c2:9d:af:2f:2a:
cc:27:9e:c0:56:b8:a2:b8:40:b4:31:59:4b:cf:b4:d4:5e:a7:
14:d5:f7:ea:38:56:eb:d4:e2:85:2b:95:58:71:1a:04:30:14:
00:0b:d6:44:0c:c6:e1:2b:78:a3:66:75:8c:24:bc:bb:b3:41:
a6:e7:db:86:d4:e3:31:06:56:7e:72:62:ed:19:e3:b8:66:15:
9e:e5:20:48:da:41:52:0c:b5:13:b3:6f:33:06:be:6b:a5:95:
45:9f:be:fa:a0:e9:dd:e5:c9:55:0c:3f:c6:45:3c:ab:0f:84:
ed:91:15:0c:94:28:59:56:eb:11:8d:01:7c:94:ae:41:94:5c:
fb:77:32:5e:55:36:d2:f3:75:3f:d9:a2:64:18:31:8e:47:fb:
cf:ff:0a:a2:23:34:bd:94:3c:0f:4b:6e:de:3f:44:65:42:63:
3f:e3:7c:88:15:63:21:9c:6a:3c:a7:36:d0:61:33:9b:86:a7:
31:5e:f9:5e:04:32:40:ee:18:e0:16:7d:4f:31:ab:7b:1b:18:
cb:36:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:12 2025 by rpki-client on console-fra.rpki-client.org