Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
File: QnzFUqtX26-kYh-13Fk6RWB8-wo.mft (raw, json)
Hash identifier: EdoNO6YLvnGUWW/wlHEYVo4ckJOqFSmNKJiaQibMQgs=
Subject key identifier: 9A:84:5F:E6:39:38:82:F1:D9:B5:C9:F7:3A:63:B2:DD:82:3D:87:44
Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
Certificate issuer: /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Certificate serial: 0194BAF24E82CE68EF2FFF4F8AD6D58A0DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
Manifest number: 0D2D
Signing time: Fri 31 Jan 2025 06:00:29 +0000
Manifest this update: Fri 31 Jan 2025 06:00:29 +0000
Manifest next update: Sat 01 Feb 2025 06:00:29 +0000
Files and hashes: 1: 1-TZK_G6hwE-t-fU2NYP8ZvugDnw.roa (hash: qg8DBlQriKARcHCeDE8QZVuHoTokdR4kMT39E92MHFQ=)
2: QnzFUqtX26-kYh-13Fk6RWB8-wo.crl (hash: OaBOZf5nND/61ER/kgYsHH6GbBBTUF8gBGCyYh8+ci0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:4e:82:ce:68:ef:2f:ff:4f:8a:d6:d5:8a:0d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Validity
Not Before: Jan 31 06:00:29 2025 GMT
Not After : Feb 1 06:00:29 2025 GMT
Subject: CN=9a845fe6393882f1d9b5c9f73a63b2dd823d8744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:cc:70:df:75:20:b2:47:8a:ca:71:6c:f0:
51:bf:e8:e1:f2:9b:db:da:5b:bf:77:4e:19:39:db:
34:4e:7d:8c:46:79:f0:d2:36:86:73:17:f7:da:81:
c5:1f:9d:45:18:84:7f:a9:3d:41:c6:09:68:c8:6c:
de:48:2e:cd:18:c9:31:32:f9:16:6d:39:2d:92:ad:
ad:68:da:d7:bc:39:c8:d6:c2:8e:49:8e:22:4c:e1:
21:d5:f1:6c:35:36:3f:49:ab:1b:0c:79:ba:0a:f5:
0e:5e:05:af:8e:e3:a1:b1:53:f5:32:52:4b:48:c1:
ab:e9:7f:1a:08:9a:01:6d:5f:d0:49:7c:4a:b9:fd:
c8:80:b5:43:ff:d1:17:a7:86:ea:6b:20:56:34:79:
d1:73:99:54:c2:d4:72:95:06:7b:16:0e:0c:42:fc:
40:0b:c7:2c:e5:5f:e9:8e:b8:b7:00:09:d5:96:6c:
70:11:5b:91:54:a8:ae:95:dc:f4:85:46:46:67:c0:
12:64:37:b0:1b:50:d8:f5:bb:76:c0:fc:17:e1:b3:
a8:b2:eb:be:7b:0f:4d:b9:c7:72:29:b0:ef:20:04:
5c:2e:40:4c:f4:1b:ac:5f:06:be:b6:3d:f0:2e:9c:
c0:a6:14:19:1a:eb:2e:c1:73:a5:12:ba:93:d3:e4:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:84:5F:E6:39:38:82:F1:D9:B5:C9:F7:3A:63:B2:DD:82:3D:87:44
X509v3 Authority Key Identifier:
keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:16:25:07:cd:a6:63:64:0b:1e:ad:5c:bb:f4:2f:b3:f6:77:
79:14:be:d9:4e:12:22:86:f9:16:1a:a1:a6:1a:e2:bc:8e:f9:
32:b9:b0:83:66:38:51:7d:30:9e:db:a7:f4:fa:fb:81:a4:c3:
3a:c9:f3:fe:1c:ce:d4:4c:5f:30:9b:6e:ed:a9:d4:66:3a:6f:
8b:82:28:2b:5e:63:e6:20:66:ba:a7:5a:bb:8d:60:3b:41:9a:
23:96:2f:e4:23:aa:f5:85:41:e4:7b:bc:e0:cf:6d:61:77:b8:
31:ba:2c:e3:6b:94:fb:38:3c:7a:9a:08:4c:e9:81:1b:11:cc:
8c:7b:58:9b:c6:79:f1:8f:cf:1e:03:02:c1:a3:79:61:5d:e0:
66:72:1a:b5:c4:65:0b:2f:30:91:f4:66:d3:1d:b8:34:fd:1a:
c4:6b:46:ec:d0:27:18:69:bc:ab:7e:52:2f:ff:5a:8e:87:22:
a4:ea:e5:27:a0:6f:31:20:fc:2c:cb:a3:9d:f5:7f:52:71:b1:
f8:68:25:d8:6e:14:40:8e:95:95:71:4c:42:8c:5d:f8:e1:33:
43:16:da:d8:2b:98:b6:74:18:cd:ff:c5:3f:a1:2c:25:b5:71:
7f:b1:55:0c:b6:3a:99:c1:78:16:06:2e:53:57:58:cf:1b:79:
9a:dd:02:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:48 2025 by rpki-client on console-fra.rpki-client.org