Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: t8PLSgCi6+1b56tPRulbAn2CwjC4vqktTOSMg4FSf+8=
Subject key identifier: DF:F4:E7:88:FB:34:A8:21:DE:D2:6C:21:96:1C:DC:C5:9C:A4:A4:23
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 0194BABB846CA85E392D0F479A4E5E5741C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 0F0C
Signing time: Fri 31 Jan 2025 05:00:38 +0000
Manifest this update: Fri 31 Jan 2025 05:00:38 +0000
Manifest next update: Sat 01 Feb 2025 05:00:38 +0000
Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=)
2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: 7/eUciXRA1LOh7Ns67KsWq5993fj/m6Ri+sxAr9qyUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:84:6c:a8:5e:39:2d:0f:47:9a:4e:5e:57:41:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Jan 31 05:00:38 2025 GMT
Not After : Feb 1 05:00:38 2025 GMT
Subject: CN=dff4e788fb34a821ded26c21961cdcc59ca4a423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:d0:2d:60:1c:e5:8f:6d:f6:7e:0f:6f:c3:
b1:9e:83:d3:cb:76:fa:92:6f:28:6f:ca:d6:4e:10:
18:20:cd:4a:75:15:54:fb:d2:ee:67:ab:e2:6e:99:
81:be:68:fd:e9:61:a9:aa:08:47:3e:6d:78:47:79:
2f:62:d4:20:d7:8c:08:fb:c4:d4:cd:e4:26:0a:49:
78:e8:63:c7:3e:b6:6c:82:2e:b5:c2:a8:9b:b1:73:
74:a8:a0:1b:39:08:15:fc:de:a8:0a:9a:65:6b:05:
2b:7e:f7:f9:ea:2c:06:79:2a:9e:cc:f5:09:4b:6a:
63:d5:67:09:af:99:d9:b7:94:88:4e:04:d9:14:0b:
cc:48:44:a3:a2:06:2f:6e:5e:a8:d7:ba:0d:16:53:
0e:3c:64:57:82:55:2a:6c:cf:1b:31:64:76:b6:2c:
64:4a:c3:39:32:ab:e0:3e:b6:21:2c:12:01:5b:f7:
39:65:50:06:f1:33:d5:16:e0:e5:57:8d:6b:07:29:
86:c8:00:a8:31:af:c7:ab:e1:6a:35:64:40:a2:14:
41:57:37:e3:c4:fc:f8:b7:9d:dc:bb:51:6b:8a:10:
a3:05:e2:4f:52:59:4a:fd:bb:8b:30:9b:fd:1d:62:
9b:d1:cd:22:31:b0:09:77:94:27:84:da:c0:4a:5d:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F4:E7:88:FB:34:A8:21:DE:D2:6C:21:96:1C:DC:C5:9C:A4:A4:23
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ed:a7:b8:61:1b:31:9a:90:06:43:35:ef:28:26:da:a9:b4:
fd:6f:69:40:9c:5f:a3:49:c4:c3:7d:f5:95:85:bb:7c:d0:ff:
36:e4:98:3a:27:8d:43:71:66:b9:3b:31:f6:b3:03:87:b1:c4:
77:ca:fe:95:d3:95:04:6a:a7:de:71:97:4f:9c:23:1d:ea:46:
dd:3e:6e:19:8c:65:21:fb:03:c3:95:05:5f:5e:a1:95:8b:b5:
31:85:2b:74:25:bf:8c:35:bd:b9:f2:0a:28:f7:cb:7a:bf:b0:
a0:ad:a9:e9:ec:df:9b:22:67:e9:82:61:c9:45:e2:55:5b:00:
54:e5:e2:a4:fd:ad:70:db:7f:35:8f:c3:da:9c:2a:d1:8c:df:
dd:73:5b:72:c8:19:f5:c8:07:a1:c4:d5:d2:4a:9a:24:5b:ce:
ab:bf:3d:45:d7:89:a9:e3:3c:90:3a:7b:73:b8:fd:3a:87:9e:
24:82:76:c4:49:5e:aa:23:ea:83:5a:7a:f2:36:c6:d8:7f:3b:
a0:1a:b2:2f:7a:25:14:33:d6:8c:36:99:8c:6c:33:75:e1:ea:
9f:aa:e3:21:bd:80:60:f4:07:a3:dc:4d:7d:c7:65:2a:4a:fb:
ae:4e:f7:4b:12:61:d6:fe:ea:09:70:a0:b7:47:7f:4b:79:dd:
22:42:b9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:28 2025 by rpki-client on console-fra.rpki-client.org