Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
File: Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft (raw, json)
Hash identifier: qnfe50K6RntvOkEy0tCRfOjkzduLFX6/K9G5r7pcNVo=
Subject key identifier: 02:96:C5:B1:F4:81:50:E9:1B:60:FC:E9:42:6C:55:16:FF:30:82:69
Authority key identifier: 42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
Certificate issuer: /CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Certificate serial: 0194BB9707DBE87CC6241FD69174B5D25731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
Manifest number: 0E47
Signing time: Fri 31 Jan 2025 09:00:24 +0000
Manifest this update: Fri 31 Jan 2025 09:00:24 +0000
Manifest next update: Sat 01 Feb 2025 09:00:24 +0000
Files and hashes: 1: Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl (hash: FT8mSGtfEXb76gDqWB061/JofP0DSB+rXbeXsdGPfOE=)
2: pGi5mprHxSOkx1tGIc-vLUmzaew.roa (hash: dSlWsgh48wgZDLLaxYVN9gYqMrT57evwFejA3CWUycE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:07:db:e8:7c:c6:24:1f:d6:91:74:b5:d2:57:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Validity
Not Before: Jan 31 09:00:24 2025 GMT
Not After : Feb 1 09:00:24 2025 GMT
Subject: CN=0296c5b1f48150e91b60fce9426c5516ff308269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:56:b2:68:f1:c7:c6:15:ee:14:59:01:d5:
14:52:ab:d0:45:bf:76:14:72:ae:80:cb:89:46:f9:
ce:4a:e9:36:26:93:6c:e7:df:28:d3:60:cf:9f:ab:
0e:ba:4e:13:24:9b:66:dc:fd:26:fb:bf:32:d2:fd:
cf:43:e1:71:3d:83:93:35:91:1d:cc:1a:da:96:9a:
ea:8f:a0:84:c5:35:47:5c:d9:ba:1b:cc:cd:e8:79:
0c:65:fe:df:ac:2f:dc:f4:aa:55:21:c3:13:3b:da:
93:d3:5d:83:75:32:58:11:1f:6b:98:62:f3:67:68:
ba:a4:61:53:6e:ad:57:22:2e:b9:e4:3f:66:44:70:
db:23:a2:41:d9:01:e9:94:73:aa:f5:78:86:95:f7:
49:00:b6:c1:50:31:a9:7f:f9:4b:a2:a0:e9:b6:c4:
cf:6f:e7:ab:50:9c:d7:37:12:39:d1:24:bb:80:25:
96:ba:5e:d1:d9:a9:7d:25:7c:57:85:ce:59:2d:3b:
9c:5c:f5:08:36:e6:7c:72:93:19:7d:bd:08:15:df:
19:23:c8:21:5a:cb:7c:db:a5:02:69:13:55:2c:27:
b3:16:3b:99:fd:34:e3:84:cd:98:6a:4c:50:d8:32:
07:e5:0c:a3:7f:10:73:4b:21:b3:3b:c5:5a:6e:52:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:96:C5:B1:F4:81:50:E9:1B:60:FC:E9:42:6C:55:16:FF:30:82:69
X509v3 Authority Key Identifier:
keyid:42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:20:bc:de:30:83:77:c8:6c:12:55:ba:d8:02:d4:00:be:7e:
4a:03:fe:a0:a1:8f:e0:9d:b8:bb:17:c3:e0:88:00:b3:dd:f0:
88:c2:da:92:18:e9:97:dd:8c:38:77:b7:3a:a6:90:3f:0b:be:
8f:8a:11:ca:59:ad:a5:93:6b:8c:db:79:cb:6a:0d:27:ac:e6:
6b:ba:e5:fd:5d:98:92:2d:1b:a5:d7:ef:c1:55:59:bd:15:14:
c0:ff:f3:5b:c0:88:13:06:b8:f8:91:2d:7b:ec:05:eb:1d:5b:
c2:cb:0c:ad:a3:e2:6a:24:ba:d6:4b:89:52:6f:5f:8c:71:bf:
5e:df:d5:5b:47:a0:16:e8:4d:2b:d0:08:c4:44:58:46:7f:48:
99:b9:8f:89:58:b9:9b:cb:bf:b2:dc:3a:04:c8:b1:1c:f2:2c:
9c:bc:cc:5b:8f:67:2a:57:56:f4:02:7f:dd:8c:aa:ab:59:00:
1b:e3:70:7a:32:f5:07:bb:62:4d:9b:00:41:17:02:86:70:cd:
47:24:f3:8e:4a:a5:57:e3:43:f4:f7:da:25:04:fe:04:a1:a2:
12:2a:64:c2:a4:a1:7e:0c:33:1c:c1:46:94:30:9e:8a:b2:81:
4c:b7:5c:d1:f2:c1:fc:ad:ec:99:ab:73:d8:98:18:d2:73:f5:
0a:c2:25:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:13 2025 by rpki-client on console-fra.rpki-client.org