Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier: mB+CRrpflkhTe/WrsAasyNvzsec44t3t+bkVyqBNyiQ=
Subject key identifier: 07:6D:D8:45:C1:93:EB:F2:6D:74:DF:C5:28:62:88:2C:7D:ED:CA:33
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 01951134E9BA39E8543B7D08A1AEA1250DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 00:00:35 +0000
Manifest this update: Mon 17 Feb 2025 00:00:35 +0000
Manifest next update: Tue 18 Feb 2025 00:00:35 +0000
Files and hashes: 1: NrBghBDxVUP3b8K-s4QfPajtoEw.roa (hash: PXmrD91Lu77kd9R7RmMEPIR9q62nZX3KSQVZITYjO7o=)
2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: Vl3H3F/mYMd6VgR2+i2efV+HE+h7y1c0r+14CH2PnbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:e9:ba:39:e8:54:3b:7d:08:a1:ae:a1:25:0d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Feb 17 00:00:35 2025 GMT
Not After : Feb 18 00:00:35 2025 GMT
Subject: CN=076dd845c193ebf26d74dfc52862882c7dedca33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:4c:df:3c:77:9d:49:68:9c:ac:3e:13:5f:
ed:d0:1c:3b:30:ee:10:2c:e4:b6:c5:f1:4b:98:f6:
65:17:6f:4d:05:eb:fd:d4:50:a8:2b:e1:cf:38:dc:
b1:37:fb:2a:6f:52:b2:ba:4a:3e:50:b2:ae:39:85:
db:50:cd:2f:ed:a4:0f:ec:01:5a:f3:09:36:c7:9a:
24:e4:f0:5d:84:69:29:47:83:50:bf:b7:6f:6e:36:
d6:bf:97:94:d2:94:75:c3:a3:1e:73:40:c9:7f:49:
67:b1:2e:c1:86:a2:01:98:aa:96:d2:3d:a8:94:47:
ed:de:55:e7:85:b4:c4:96:3f:45:34:4b:b8:4c:38:
32:b3:63:3d:5e:fe:a6:28:54:dd:b0:82:4a:f2:7f:
a6:b8:94:e2:c9:10:47:fb:7d:79:18:34:7d:50:2d:
d6:58:90:a6:d2:54:fc:8e:c3:18:72:96:3d:34:7c:
61:58:70:a1:fb:7b:6a:42:c9:b6:e9:00:97:b2:4b:
cc:22:10:62:cc:5e:b6:80:01:59:3a:3b:ad:1f:15:
e9:50:52:f3:c8:06:ec:9c:5c:7a:10:09:d5:f9:09:
19:fb:06:95:7e:18:56:2c:92:72:fa:6a:b1:31:6c:
ab:c6:43:10:60:a6:d2:16:b9:89:17:82:b7:89:81:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6D:D8:45:C1:93:EB:F2:6D:74:DF:C5:28:62:88:2C:7D:ED:CA:33
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:39:b6:a1:23:8f:e1:9d:9e:a4:d8:ae:61:54:0b:62:59:2c:
7d:5a:2f:cf:10:1b:f2:3d:49:3c:88:7a:2b:30:6d:6e:bf:aa:
b8:7a:f5:0b:34:0e:10:8b:3a:7f:d0:24:86:6a:f6:50:9c:31:
d8:ff:7d:68:dd:91:f5:67:9e:ac:1d:31:7a:8b:77:d7:04:29:
04:59:37:5f:c2:fe:4e:f3:10:ba:29:03:f2:f8:34:25:a5:3d:
0c:fb:9f:4c:af:78:eb:bb:a2:a5:fa:10:b7:b5:4a:e4:ea:68:
21:5d:65:34:fe:f8:d1:87:4f:ae:21:05:4d:ba:e8:8d:b0:54:
f3:fd:d6:6e:a4:07:3d:d7:b7:78:e9:09:26:62:63:23:bd:69:
59:82:1d:3f:77:d1:d6:0b:04:c1:02:13:27:ce:76:43:b9:e8:
60:22:a6:c1:da:0f:3d:75:25:37:bc:89:70:a4:e4:f3:08:af:
6d:32:18:05:17:b4:cb:81:0a:c5:1a:94:84:ec:3e:c4:9c:bc:
8a:a3:86:a3:64:91:04:ba:09:6f:8e:3c:4c:0e:ad:36:b8:ad:
15:37:b3:c0:08:da:0c:0d:5e:b6:7f:c4:e7:a2:d1:45:4b:7e:
14:89:61:10:14:d1:3b:b2:19:7f:55:78:24:13:fa:46:d0:4a:
1b:0c:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:45 2025 by rpki-client