Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier: HHEcm6mTyTKoRpESup1jnBPS2ZsmLbsv9N03oxEmxnY=
Subject key identifier: 79:04:6C:45:63:35:2C:1D:93:03:83:B8:17:C1:0D:66:97:FF:15:DA
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial: 0194C3F63CFF65E185AE9B04797FCD103098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 00:01:22 +0000
Manifest this update: Sun 02 Feb 2025 00:01:22 +0000
Manifest next update: Mon 03 Feb 2025 00:01:22 +0000
Files and hashes: 1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: qwCYvc4cbW+4r4p/ewtTPm4GvhWBH48qCfD7xB9dsd4=)
2: T5gr7GnqjE8y7ukPZ3Upa6e15rU.roa (hash: IygW4LAvMnA+EIcJ9N6BryWosUgw51JGwDaJIPLdjAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:3c:ff:65:e1:85:ae:9b:04:79:7f:cd:10:30:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Validity
Not Before: Feb 2 00:01:22 2025 GMT
Not After : Feb 3 00:01:22 2025 GMT
Subject: CN=79046c4563352c1d930383b817c10d6697ff15da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:c3:18:0c:4b:1e:c3:2c:d9:fb:f5:72:9a:
68:f4:c2:4d:d9:58:a1:7b:4e:99:fd:6e:2b:12:01:
c0:2b:60:c3:6c:f9:c7:b4:f7:c8:c3:ef:6a:46:1f:
46:68:84:08:00:f8:3a:89:7f:d9:db:c3:9b:48:6e:
36:b8:8c:6f:b0:03:68:f8:49:59:fb:33:7a:7f:0d:
3d:be:57:c4:d3:fd:4c:a9:76:59:3b:a3:e1:87:91:
67:27:89:57:3f:99:b3:4e:58:33:b5:4c:97:15:a3:
c3:53:9a:47:c9:80:fd:a1:b2:bb:f8:8c:5b:0c:00:
09:f4:45:ca:6d:7e:73:1c:09:7a:67:68:35:2d:52:
8e:f8:24:b8:67:c5:9a:c7:82:2c:02:17:09:db:56:
02:fd:e9:ee:bc:14:6f:83:47:32:a9:1b:97:48:97:
a7:ec:f4:3b:77:89:f2:45:ee:cb:75:44:38:44:eb:
b8:1e:68:a7:1a:1b:84:1f:55:76:c4:f5:fc:0e:00:
21:26:54:13:28:05:9b:35:8a:1b:96:ad:1e:cb:c1:
3a:c0:ee:a0:4b:d0:c4:0d:2d:95:33:7c:bc:67:65:
a1:bb:7c:f5:20:e5:06:41:cc:65:81:67:91:0d:44:
d1:fc:33:3a:71:0c:b0:46:a0:2c:0e:af:23:e7:f9:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:6C:45:63:35:2C:1D:93:03:83:B8:17:C1:0D:66:97:FF:15:DA
X509v3 Authority Key Identifier:
keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ec:db:a2:0f:fb:e2:97:a3:a4:db:35:f9:87:c9:79:15:74:
a6:7a:a9:ab:2f:68:ec:5e:35:a1:a7:a6:f4:37:f0:91:88:f3:
19:21:6a:08:b0:c1:11:2d:08:4d:48:d6:d2:7e:ee:c6:c4:fa:
58:7c:4e:38:dd:b4:1f:cc:31:e5:60:27:20:f3:78:d2:b1:13:
a7:44:10:4d:57:c2:7e:c4:16:36:5a:6a:16:4e:2c:4e:98:e9:
4a:48:cb:fb:dc:bc:79:ad:c0:55:bb:47:29:51:bd:22:ae:f3:
c8:fe:11:ad:1c:ca:da:0b:04:5d:ae:4e:ac:c7:60:80:f9:b9:
bc:03:c3:03:80:b1:3e:24:2c:47:28:cb:7e:4e:b9:bd:4e:28:
65:2e:38:a8:9f:fc:58:cc:c9:06:47:b2:a0:44:be:9c:1c:96:
81:f4:47:bd:f9:b2:dc:e3:24:4a:aa:71:69:ae:73:a0:a8:0c:
e6:97:1f:1f:85:a6:b9:7d:e4:a3:fb:e9:dc:9c:1f:1b:7f:8d:
dd:bd:71:41:18:93:99:64:0b:05:b0:0e:c3:b5:bd:70:dc:af:
73:4b:e3:90:cf:55:e4:f6:76:c2:09:b7:87:e5:e7:a1:4c:e8:
2b:21:db:65:cb:e9:93:79:a4:16:55:00:83:70:9c:41:df:cc:
90:ac:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:34 2025 by rpki-client