Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier: XXzYLNVi02HO1WJvKG/ug/AsawTEd0PaqG1TCTk2E4c=
Subject key identifier: 1E:8B:70:1A:0C:F1:03:07:FE:FA:8E:54:47:44:98:81:F0:CD:79:5C
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: 01958B4DFCAFD65B917DFC8076AEFD5186E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number: 0B76
Signing time: Wed 12 Mar 2025 17:01:38 +0000
Manifest this update: Wed 12 Mar 2025 17:01:38 +0000
Manifest next update: Thu 13 Mar 2025 17:01:38 +0000
Files and hashes: 1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=)
2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: p3KTyydHlSvrLZ0Ub268FfmGQScYn/uNGSbErm83riU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:fc:af:d6:5b:91:7d:fc:80:76:ae:fd:51:86:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Mar 12 17:01:38 2025 GMT
Not After : Mar 13 17:01:38 2025 GMT
Subject: CN=1e8b701a0cf10307fefa8e5447449881f0cd795c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:64:47:d1:77:4b:1d:fb:22:22:66:47:68:
b2:e9:9d:5a:b9:23:aa:c3:98:bf:2c:19:bb:f4:bd:
a6:5f:a3:b8:9f:da:81:ee:ec:76:ad:48:3f:dc:e0:
00:57:b7:89:85:0b:31:75:07:24:c7:a8:b1:c5:6e:
21:77:a7:67:14:ca:7f:52:05:16:f3:75:a2:7d:5b:
d7:0b:b4:27:bb:5f:62:3b:a9:50:03:5a:00:5e:57:
23:5e:6c:31:f8:94:6c:55:78:41:4f:7a:19:ec:8b:
5b:21:69:ef:f8:aa:24:f2:5b:dc:3d:0e:a1:dd:3e:
a9:d8:10:6f:87:93:b0:d2:cf:ca:84:73:dc:82:b8:
4b:16:06:f3:9f:65:c1:87:26:9b:a3:66:ea:b4:c3:
9c:7e:7d:e6:21:3e:4b:9a:f8:48:4f:c2:94:21:15:
a1:5d:3d:80:07:a1:88:39:c6:e3:65:82:b1:cf:83:
1d:b7:d4:5a:d9:3d:d7:c0:f4:7e:af:0c:8c:52:b6:
04:a2:97:fa:ed:58:0c:f3:bf:d0:dd:2c:01:d4:82:
53:e5:43:00:07:2f:ce:e1:80:4b:86:b2:75:29:e1:
4f:28:55:e6:22:0e:30:9e:05:05:4e:f6:34:38:c4:
d0:08:c6:3e:40:4f:62:b0:9b:63:f7:da:c0:58:53:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:70:1A:0C:F1:03:07:FE:FA:8E:54:47:44:98:81:F0:CD:79:5C
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:31:57:5c:a6:a9:67:21:e2:e4:b7:85:15:64:d7:f9:72:52:
0f:45:b4:eb:ca:32:8a:75:44:64:0a:35:10:5f:d0:a3:15:2f:
bf:7a:31:78:05:96:7d:48:30:1f:02:84:05:24:a4:6e:3d:15:
06:a1:9a:8e:0c:6d:b5:57:49:4c:b4:69:27:60:46:80:46:dc:
21:b9:75:a9:48:c4:e3:5a:82:3a:1c:9e:df:ac:ac:87:a6:8b:
14:c9:65:1b:52:66:bc:4d:0e:86:4d:75:b1:00:83:2c:09:38:
3e:2b:91:8a:44:66:f9:7a:17:93:37:a7:bc:ec:b6:16:8e:48:
71:80:47:cc:87:b2:90:99:41:84:35:66:7a:6a:18:3a:d4:cc:
50:37:61:2e:07:a0:78:45:64:30:a1:52:dd:0e:4a:8e:6b:da:
b1:dd:74:6c:4b:65:05:74:0f:87:47:39:57:47:6a:23:9a:96:
2e:d7:45:35:57:45:23:7c:54:2a:fe:69:8f:72:e0:a8:b7:21:
9a:05:00:28:35:46:f2:33:c0:e4:41:e2:ff:27:a3:ab:f8:c0:
5a:b1:4e:bb:7d:f3:ca:40:43:ae:7c:2f:96:2c:54:07:65:86:
8d:ea:3a:38:28:be:c7:e0:9d:99:a2:c8:a5:ed:4a:3c:48:01:
93:8f:1f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:50 2025 by rpki-client