Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: eeOqDVwKX6X7dz79lYeMtk0YghbjYJISaVDS6O4GWiY=
Subject key identifier: 86:40:69:61:2A:E3:05:55:EF:07:F9:A0:C0:03:DF:3B:8C:85:AD:7E
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 019511A2A0BF1F04CE6C94C7E28C602D5A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 02:00:25 +0000
Manifest this update: Mon 17 Feb 2025 02:00:25 +0000
Manifest next update: Tue 18 Feb 2025 02:00:25 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: R8Gab6CoDoukNN80S/WuZJrQbOTX/YqOrXNhTjeVsEk=)
2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:a0:bf:1f:04:ce:6c:94:c7:e2:8c:60:2d:5a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Feb 17 02:00:25 2025 GMT
Not After : Feb 18 02:00:25 2025 GMT
Subject: CN=864069612ae30555ef07f9a0c003df3b8c85ad7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:98:f3:9b:72:43:1b:40:cb:7c:f4:51:b0:
9f:ec:79:82:8a:39:ae:15:44:db:65:6e:34:af:15:
27:92:2c:e8:a5:f4:a0:2c:31:83:c9:c5:95:89:79:
e8:d9:94:83:d4:0d:a8:bf:ba:3f:23:fe:55:a4:85:
21:13:08:85:44:4b:71:3b:ff:af:5d:bc:6c:d5:61:
b2:38:07:58:a1:46:20:2f:39:2c:7d:82:87:70:f9:
27:7f:9b:dc:c7:33:53:2f:8d:81:31:c3:73:5b:26:
c0:f3:72:75:03:aa:c2:59:45:06:00:33:92:fe:a1:
0f:fa:9f:ec:a5:55:8b:ef:2b:ca:40:a0:21:29:1b:
1c:9f:e7:38:db:de:93:53:6a:08:b1:45:6c:e7:0a:
39:d6:e1:9a:33:b6:02:89:d7:79:ca:10:ed:dc:84:
d5:29:6b:d1:c7:2d:77:6a:bd:91:08:22:0f:ff:9a:
87:92:47:e9:59:5a:80:39:05:c4:29:3b:4e:96:29:
39:74:b5:6f:7c:77:5c:ea:c2:31:8c:a2:d4:a9:0b:
4a:e7:3c:4a:f0:ba:86:13:fc:86:e8:af:86:5a:99:
ec:60:e8:ba:47:4e:88:60:4f:7d:90:2f:fc:f5:f1:
95:79:78:89:c8:5e:95:ca:bc:ae:2a:f0:5b:e8:40:
74:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:40:69:61:2A:E3:05:55:EF:07:F9:A0:C0:03:DF:3B:8C:85:AD:7E
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:91:30:9d:78:93:51:7c:a7:ae:bd:21:ee:76:75:30:4b:ee:
18:7d:b9:b6:b6:a7:70:9e:f7:53:a7:8c:b5:e7:23:40:7e:35:
d9:de:48:39:38:b2:6f:d7:17:48:3d:40:70:0b:64:70:16:fb:
6b:ad:c4:98:61:2a:0e:2c:a2:15:98:16:fe:2b:bf:c2:db:7f:
ff:68:54:bd:01:6a:eb:55:2e:93:3d:9d:5f:41:28:19:bd:e5:
b5:72:18:17:5f:51:99:54:39:e1:d4:68:02:3a:0d:49:ce:62:
d1:12:39:96:3e:65:5f:f1:8b:8a:c2:f3:d0:2c:86:ee:10:4f:
18:2a:cb:2d:73:b8:af:a1:b8:f5:7a:06:38:a6:cb:ed:79:fe:
d6:4d:ff:2a:6e:ef:4c:6f:52:f6:af:db:9b:5f:8c:6c:86:e5:
64:2b:02:67:5f:1b:07:61:49:8c:87:a4:62:a6:c6:44:ad:8a:
55:2d:46:9f:45:cf:dd:6c:d7:91:90:e4:6e:21:66:22:6c:f3:
6d:23:88:a0:9f:0a:08:d3:0f:5b:74:4f:40:b0:4a:a0:cb:fe:
47:c5:63:7a:4b:9b:82:75:db:ff:4a:98:09:fa:1b:ed:12:1f:
69:00:de:c2:43:0d:1b:ba:97:ab:4f:c5:e3:9f:d4:b8:2e:33:
9c:3c:44:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:07 2025 by rpki-client