Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: q1PEsqaYRJEfiGcdAjwqCCarL/zfLxVlK5ug7oaXmXY=
Subject key identifier: 94:74:5D:81:AA:C8:F1:FB:66:FA:44:57:D8:D2:80:6B:B7:8E:0F:D6
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 0194BAF21B4AA2E49E780AEC297FF2EF4FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 1038
Signing time: Fri 31 Jan 2025 06:00:16 +0000
Manifest this update: Fri 31 Jan 2025 06:00:16 +0000
Manifest next update: Sat 01 Feb 2025 06:00:16 +0000
Files and hashes: 1: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: JUh+G6nYQ2v1Mbgh3uMXhisxKzFa3JcTFIfptvDNNMk=)
2: YVf3u5lFieXSo4MA7qYyxZHHzPg.roa (hash: LTVF5N88k7skTnyboglAJr7FjEe2LUwSGTf3pVeiANQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:1b:4a:a2:e4:9e:78:0a:ec:29:7f:f2:ef:4f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Jan 31 06:00:16 2025 GMT
Not After : Feb 1 06:00:16 2025 GMT
Subject: CN=94745d81aac8f1fb66fa4457d8d2806bb78e0fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:00:53:b7:e5:1c:d2:79:6d:5a:f7:99:41:
02:2d:13:8c:d9:4e:e7:e6:62:55:99:80:80:20:0e:
7f:1d:1c:a0:44:61:53:84:31:a3:27:9a:6f:2f:0e:
38:69:be:85:65:72:12:8a:bd:05:29:8a:e7:9d:45:
53:5e:72:ca:81:c7:cf:04:a3:9e:fc:cc:28:85:db:
63:d8:48:e2:e4:3b:e1:21:63:a6:c7:ad:26:bf:ae:
0b:35:00:ac:f6:54:71:7a:90:b8:a3:99:dd:72:dd:
c7:b2:52:e5:79:24:11:39:ee:db:71:8a:9f:bb:13:
bd:96:f5:33:4d:51:7b:5f:47:30:36:8a:74:83:1c:
f5:88:b9:01:6b:1e:98:24:2c:e0:0b:c8:ab:d9:3f:
0d:cd:0e:2c:d2:e6:5c:1c:3b:1e:78:90:df:f1:fe:
6f:b3:45:03:7c:5e:c8:17:4d:dc:d1:46:60:77:8d:
9a:57:9c:91:d2:7e:89:ea:4e:86:06:8d:53:34:63:
63:64:e3:5a:80:e8:ba:7c:25:dd:39:f8:88:9e:40:
1b:01:ca:fe:c9:35:dd:82:ca:fd:03:c1:02:5f:03:
86:37:8d:e4:c7:79:45:4e:69:09:7e:78:72:d3:d5:
6c:13:0f:bc:62:eb:13:9c:41:6d:5e:bd:8f:90:14:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:74:5D:81:AA:C8:F1:FB:66:FA:44:57:D8:D2:80:6B:B7:8E:0F:D6
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6f:45:b5:66:98:c3:c0:24:e3:d8:3d:a7:c2:c0:46:ee:1b:
c2:05:2e:c9:e3:6a:93:e6:95:ea:d2:0e:47:18:d7:2b:d7:5f:
7b:4f:e7:af:4c:2a:c8:8e:c0:60:c4:1b:34:54:73:e5:c1:a9:
d3:d2:80:1a:66:d2:5b:5b:ef:63:39:f0:49:09:5f:db:60:ac:
ba:c6:24:65:f2:ce:69:28:f3:b7:8f:69:e4:5e:27:13:51:3c:
95:1a:f4:9f:1b:39:f4:f0:f9:25:64:63:8a:f5:1b:54:4e:56:
b1:61:7a:64:44:a6:68:ed:f8:35:e5:40:15:f9:b6:21:b3:74:
bc:f9:f4:84:dc:f0:7f:da:37:96:6c:db:95:8f:24:ae:37:53:
e5:f6:63:4c:0a:e5:f5:20:4c:b9:cd:36:e5:e2:75:b6:8d:be:
68:85:da:f9:78:26:24:e5:75:19:64:73:57:a7:26:8d:4d:aa:
2d:28:5d:f1:f1:19:de:e9:d4:e9:75:d5:e8:45:f1:df:01:57:
39:cd:95:c8:0e:de:ca:9a:18:ac:75:f3:4d:5d:36:45:fd:af:
56:df:71:df:ae:7e:0b:57:46:6b:6b:7a:50:3a:e2:f6:88:9d:
22:c8:c2:db:ed:c9:ee:d8:0e:c8:a8:ab:9d:94:59:b3:2b:cd:
fc:ad:42:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:17 2025 by rpki-client on console-fra.rpki-client.org