Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
File: MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft (raw, json)
Hash identifier: Pc7mzfmjES/csZtkIyg5ClKmegyFYwYUcAkGNj9ect0=
Subject key identifier: DF:81:87:80:1A:E9:5E:C8:8B:FD:B7:DF:D4:8F:CD:E2:EA:44:88:E8
Authority key identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
Certificate issuer: /CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Certificate serial: 0194C5084E5C7F23A4E69A0062DD386F0873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
Manifest number: 0C2E
Signing time: Sun 02 Feb 2025 05:00:43 +0000
Manifest this update: Sun 02 Feb 2025 05:00:43 +0000
Manifest next update: Mon 03 Feb 2025 05:00:43 +0000
Files and hashes: 1: MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl (hash: 5R+91nRqWpbmj0WhGNlVeP7ds46NdJCQG3Wt6EBC3RY=)
2: QXjAwQSpvYGLG9EKG43DcrvrWjg.roa (hash: /g3NGPvML9niLWrxGUEsCrw0JcuhbxCMPrgB31IKq7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:4e:5c:7f:23:a4:e6:9a:00:62:dd:38:6f:08:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Validity
Not Before: Feb 2 05:00:43 2025 GMT
Not After : Feb 3 05:00:43 2025 GMT
Subject: CN=df8187801ae95ec88bfdb7dfd48fcde2ea4488e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:5b:40:5a:b7:0f:9f:b6:67:bf:40:f3:8e:
3a:72:24:a2:54:5b:f7:2a:81:03:ba:5f:87:4a:0e:
9d:1b:37:e9:0d:00:f5:d0:3c:1c:4f:e5:26:ba:f4:
fe:0a:43:4b:10:4c:7f:b7:ec:f2:83:92:4a:46:ec:
13:32:e9:b2:07:d4:c4:f0:08:d3:d8:97:a2:d6:30:
e2:15:9a:f4:0b:1d:e9:fd:02:83:6a:33:22:74:b8:
a9:c3:87:4f:53:79:3d:0f:81:a6:6d:68:b5:8d:c4:
08:20:68:5a:73:2f:7f:48:e1:31:e2:e1:d3:dc:1b:
5a:f9:fb:6b:67:52:6e:7c:48:12:60:78:67:54:3b:
99:e6:96:a2:66:d7:e1:8f:3d:1a:47:d2:e6:67:96:
64:16:4f:d1:73:9f:45:e0:ed:58:26:60:ae:d3:82:
75:9f:37:b4:53:11:32:2d:ba:75:a4:34:68:d8:22:
20:0b:89:ea:fb:be:c6:94:02:f9:a1:b8:65:46:0b:
29:e5:f4:58:22:d1:7e:c6:e0:3e:89:6c:1d:7f:61:
de:57:02:24:da:5b:93:c8:aa:d0:8f:15:09:08:e7:
6d:63:e4:98:e2:28:25:1f:c7:90:44:e8:3f:49:de:
3a:80:e5:bf:e3:ef:a1:a5:97:3a:51:c5:aa:c8:27:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:81:87:80:1A:E9:5E:C8:8B:FD:B7:DF:D4:8F:CD:E2:EA:44:88:E8
X509v3 Authority Key Identifier:
keyid:31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:26:d9:0d:e1:1a:73:c8:20:c0:e7:aa:9f:4a:0f:de:2e:96:
56:cc:5f:51:5b:10:b2:ec:ac:24:09:70:17:b1:08:48:f4:2f:
7d:49:ee:40:e3:a7:c5:e2:05:8d:7f:73:97:9f:a6:6d:c6:9a:
d2:04:79:eb:ab:ed:09:a3:99:f5:ed:2f:fa:81:24:41:df:1d:
48:4d:db:03:59:db:f5:f3:9d:70:e3:9d:08:d4:b6:c3:5c:95:
b2:84:72:c4:93:02:7e:de:29:29:51:f3:71:df:0c:3a:5e:80:
d7:94:3a:ee:5a:d0:4f:84:d9:3e:fb:90:3c:c3:2f:1e:47:3c:
2f:f3:0e:20:0b:2b:c2:38:36:5a:61:b2:a8:8f:bd:95:6e:6b:
ba:c4:b8:4e:2e:cb:c9:52:04:08:2f:73:34:7d:63:3c:0b:b2:
85:39:a6:2f:d4:8e:82:7f:6f:8a:77:cb:34:f1:fe:ad:e5:f6:
fe:4b:57:17:6b:88:ad:5d:1a:99:05:28:5f:13:a3:77:a9:8e:
d3:8f:a9:3c:49:18:95:8a:5d:9a:25:c3:9a:f9:f1:f8:1c:b9:
55:65:10:17:ae:62:47:cb:72:c8:7f:65:8d:86:ef:75:6d:52:
72:3d:7a:a7:cf:5e:01:33:60:3a:57:34:73:4d:28:b4:6b:bc:
59:61:92:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:37 2025 by rpki-client