Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
File: QM1aUDjV4S_hydn1yGZAdMPdCsc.mft (raw, json)
Hash identifier: c86g/F7IzPavU3DEa5WDuQ6buhVfRNPC/U6Y5u1ZJQI=
Subject key identifier: 83:87:99:FE:2A:FE:E6:EE:A5:FD:FE:5B:A2:2F:77:8E:98:79:08:F9
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial: 0194BA849AC052DFB992BECACF8316547BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
Manifest number: 05D3
Signing time: Fri 31 Jan 2025 04:00:39 +0000
Manifest this update: Fri 31 Jan 2025 04:00:39 +0000
Manifest next update: Sat 01 Feb 2025 04:00:39 +0000
Files and hashes: 1: O1UMqFY4UYla6Wia0-cx5UTbNYo.roa (hash: yk9XmbWdQVbHd1Fk+ePRsax442yqoQX1eANsND8ceoU=)
2: QM1aUDjV4S_hydn1yGZAdMPdCsc.crl (hash: 2Y2tpHqf3avA/iVJ7g1lAAnd/e1Tvm98/UBv/uo9zZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:9a:c0:52:df:b9:92:be:ca:cf:83:16:54:7b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Validity
Not Before: Jan 31 04:00:39 2025 GMT
Not After : Feb 1 04:00:39 2025 GMT
Subject: CN=838799fe2afee6eea5fdfe5ba22f778e987908f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:16:19:74:7d:0b:e7:ab:f0:60:18:d1:50:
9e:63:76:ef:69:e0:a1:f5:db:05:00:ee:b8:46:df:
bf:6c:8e:fc:ba:fb:53:17:dc:af:6c:59:1a:9f:90:
47:c9:22:75:ed:58:e2:e8:21:2f:82:4a:53:f0:33:
1f:af:e1:b5:fc:35:11:12:04:6f:b0:9c:c5:67:a6:
42:7e:41:e9:b2:b5:42:91:20:98:d3:03:58:8f:ec:
a2:0a:99:72:60:1b:c0:90:f7:3c:86:80:23:33:c2:
fe:a9:7a:14:7b:bb:d4:c8:56:38:52:30:68:c5:03:
0a:3a:be:6d:d3:09:28:5e:22:f7:18:0e:26:fb:80:
ec:d4:a1:31:cd:7f:e4:51:de:1d:3d:41:d1:bd:d5:
9f:90:dc:1c:a0:16:61:4e:e3:4d:6f:93:67:e9:45:
78:4c:33:e4:80:84:1c:76:df:12:f4:ae:51:ed:00:
10:98:e1:7d:e6:3f:9d:02:71:18:e6:53:38:4d:7e:
0e:c7:10:d6:c8:d1:58:7d:2e:b5:03:bf:39:92:38:
fa:33:5e:6a:16:44:80:77:d7:96:ac:27:a6:a2:fe:
2a:04:98:b0:e7:c4:46:ef:2b:16:57:2f:fd:c7:48:
3c:15:95:92:aa:e0:7e:61:8b:88:ad:a9:0b:3f:a5:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:87:99:FE:2A:FE:E6:EE:A5:FD:FE:5B:A2:2F:77:8E:98:79:08:F9
X509v3 Authority Key Identifier:
keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:36:c5:f9:ec:b5:7d:5d:28:49:7b:87:80:d2:31:85:d4:6b:
9e:b4:3e:f1:56:ea:c7:86:e9:3d:70:ab:5a:87:7f:cb:55:0d:
91:ec:e6:db:c4:df:f4:9b:3d:c5:f7:ee:36:1a:43:ee:c1:c1:
00:69:d1:e5:a7:54:a4:81:d4:69:fe:96:63:95:eb:a7:9e:f8:
e7:a7:da:50:31:21:8a:9f:aa:65:0d:8d:ac:36:55:da:e7:f2:
40:0e:c8:40:f7:88:9a:a4:63:11:bb:d9:f4:7e:cd:02:33:d0:
77:d3:69:12:f0:92:92:7d:9a:7c:82:5c:d9:fe:48:f6:e1:1f:
f9:87:77:b3:79:72:88:2d:97:c1:31:1d:ab:d5:81:44:a9:65:
81:66:63:8a:a1:8d:22:c9:a8:e9:58:11:0d:c6:fa:94:28:e2:
0f:24:80:33:2f:15:aa:ff:a0:45:84:17:61:22:89:f7:2a:ac:
6b:49:70:ac:ec:af:a0:86:b4:c2:7b:16:4a:d8:75:1c:07:fb:
5a:2d:ed:d6:67:e8:4a:3f:e5:16:ef:5d:48:d9:46:2c:bb:d1:
5c:18:d4:a8:51:ad:df:13:9f:21:95:01:1b:3f:fb:a3:29:73:
e9:ba:b3:55:8b:85:fc:f4:86:4c:82:48:7e:02:e5:06:50:c6:
83:ee:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:41 2025 by rpki-client on console-fra.rpki-client.org