Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
File: QM1aUDjV4S_hydn1yGZAdMPdCsc.mft (raw, json)
Hash identifier: VWCTRiQ7DNEXKvFmuOZB/GqPQuU97QgXSvaDo7W53uY=
Subject key identifier: 6F:EA:46:4E:83:5D:C4:41:7B:C7:AE:57:35:22:B2:54:DC:F8:E7:31
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial: 019512261E49EBAD31F86E697CB443A946BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
Manifest number: 0604
Signing time: Mon 17 Feb 2025 04:24:02 +0000
Manifest this update: Mon 17 Feb 2025 04:24:02 +0000
Manifest next update: Tue 18 Feb 2025 04:24:02 +0000
Files and hashes: 1: KVvOGYEyHhWhRHwS9LQjG3XK8EI.roa (hash: AFMADJ+EdA++truR6oHaQkzeXGaM562uJumCeUqnVzo=)
2: MHGZA5Y3PVpWBImn85tARMZRftQ.roa (hash: bnJhZwRrO7KGALVUCy1om+i/htb3dvM6lJ1uAmGl2G8=)
3: O1UMqFY4UYla6Wia0-cx5UTbNYo.roa (hash: yk9XmbWdQVbHd1Fk+ePRsax442yqoQX1eANsND8ceoU=)
4: QM1aUDjV4S_hydn1yGZAdMPdCsc.crl (hash: N+dCaTfFNe5+lbtdmYLPc9p8tvXouEXAMwh4Yv34ysY=)
5: TNSMUQvHGS8vGJs7QmyW0_jz86Y.roa (hash: qI6N5+Q6nkQDs5kBZ+Upq2gzqwGu3xE2kqSgmDsGATI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:26:1e:49:eb:ad:31:f8:6e:69:7c:b4:43:a9:46:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Validity
Not Before: Feb 17 04:24:02 2025 GMT
Not After : Feb 18 04:24:02 2025 GMT
Subject: CN=6fea464e835dc4417bc7ae573522b254dcf8e731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:4f:3b:55:73:63:c9:a1:b2:0f:c2:cc:37:
53:f5:98:62:7e:30:23:02:16:ed:b8:e5:de:3a:83:
75:9d:47:9f:21:8b:3b:3b:2d:ad:88:73:ae:44:95:
41:49:64:12:5c:73:a3:76:4a:07:d7:0a:34:60:bc:
fc:90:8b:0c:be:fb:1e:c1:ff:1e:ac:54:98:12:6a:
68:d7:cc:b7:5a:02:92:cf:1e:75:f9:c9:e9:aa:2f:
e9:97:d3:f8:07:d0:5b:a2:40:36:3b:75:6d:8c:d2:
e3:06:f3:33:09:22:6a:c0:08:14:59:be:e1:12:cc:
93:f7:99:0d:12:a9:76:21:f9:ca:f9:df:1f:fd:81:
ef:d7:62:5a:64:72:2f:9c:90:f9:b2:6e:c6:68:94:
a6:ab:f1:71:61:79:2c:65:21:9d:41:d3:12:17:a2:
35:d1:f3:12:88:02:31:b2:bd:2c:e6:85:e7:e1:2a:
5d:5b:7c:68:f1:b9:27:d4:8c:c9:4a:ef:04:ab:f3:
da:45:86:a6:3b:10:f1:e9:88:97:35:f5:51:a4:c6:
5f:f5:c0:0e:95:e4:22:0b:18:85:63:a6:c7:6c:a6:
0b:2a:2e:89:f2:73:fb:31:7d:21:15:6a:64:0d:0e:
83:11:a3:d5:01:f7:8c:7c:0e:19:47:f1:1f:15:79:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EA:46:4E:83:5D:C4:41:7B:C7:AE:57:35:22:B2:54:DC:F8:E7:31
X509v3 Authority Key Identifier:
keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:9c:51:91:23:96:1a:72:e1:23:12:2f:d7:9d:6f:d6:a9:18:
da:fe:86:bf:2e:71:3a:3c:44:e0:6d:48:db:1b:fc:d5:d7:a8:
5c:96:9e:be:c1:2a:55:89:a6:ca:ca:be:73:29:8b:f5:10:29:
da:5a:4d:fe:02:16:1a:de:d7:34:7f:c6:43:b2:f0:f3:88:d0:
f6:d6:c5:37:d5:9e:23:a5:19:84:c9:a6:36:ec:ac:3a:69:68:
a1:ca:90:e7:a0:fc:28:cf:13:6c:da:ca:9e:15:9b:c7:f7:16:
c2:df:14:9e:9c:a5:7e:46:e9:b9:bf:c3:87:93:bf:98:00:e2:
f0:f7:dc:60:b8:9b:0d:29:f3:46:c8:be:91:d9:8b:6a:16:ce:
a2:04:44:b9:9f:c3:10:45:9a:ec:1d:02:e3:c6:95:ef:c9:d7:
95:94:70:58:57:ac:e2:2d:8b:d0:ab:44:52:7b:a3:0e:a8:82:
49:a7:db:ec:1a:03:a9:33:63:14:00:b4:83:03:6b:1c:70:01:
4b:e6:58:55:60:27:24:1b:9e:15:90:81:34:30:a6:e1:f1:9b:
14:a3:b5:68:0f:d7:59:ed:8b:a6:d9:35:42:79:9e:56:2c:c4:
5c:7b:98:d6:88:c2:2c:df:49:98:6f:b6:e1:67:b0:f6:c5:9f:
dd:f4:e5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:01 2025 by rpki-client