Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File: q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier: TV7UFGC834ga51+ygZ4KfoHMjhxzmAJjX1YIBpcLvb4=
Subject key identifier: 2F:F6:B4:1A:63:FE:1E:BF:FF:21:37:2A:89:74:81:B0:82:36:AB:5C
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 0194C350FE9AC02D8BCDB3C300DC47A42624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number: 142F
Signing time: Sat 01 Feb 2025 21:00:52 +0000
Manifest this update: Sat 01 Feb 2025 21:00:52 +0000
Manifest next update: Sun 02 Feb 2025 21:00:52 +0000
Files and hashes: 1: WxKERWcgZHE3QlVsylKc45ZZndo.roa (hash: ZntJzaaGEPPPr8RAncg56sX3jW5j5m9ABQj+rx3cm+Q=)
2: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: 3LFdJkBndO+hV3jvmmDUc1cAZ/0Zs98sIGh52cI50+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:fe:9a:c0:2d:8b:cd:b3:c3:00:dc:47:a4:26:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Feb 1 21:00:52 2025 GMT
Not After : Feb 2 21:00:52 2025 GMT
Subject: CN=2ff6b41a63fe1ebfff21372a897481b08236ab5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0e:5f:83:30:ae:77:cc:ae:c5:b8:b5:b0:23:
d5:9e:f0:d3:59:54:27:99:84:05:58:d9:6d:6f:da:
99:ad:f4:01:85:6f:93:33:7c:8a:e7:1e:ac:b6:80:
6c:d2:4e:38:fc:5a:d4:5c:55:8d:56:9e:79:32:95:
7c:c3:7e:5e:fe:2e:28:2c:ca:91:b2:78:61:8e:f0:
4a:57:17:77:c9:ac:68:8e:d0:df:a0:85:01:ca:16:
31:4b:e0:47:86:7f:7c:f9:5c:7d:4f:b4:11:52:ec:
4f:72:02:23:15:94:12:14:ca:46:b3:e0:ac:e3:44:
81:c8:9b:42:95:2c:ba:5e:1a:29:7c:ee:59:a5:15:
66:a7:58:49:ca:18:fc:a7:c0:af:4a:f3:b0:b1:57:
91:b9:f3:d1:24:9c:2a:a0:93:5a:42:b4:6c:b2:f2:
bb:bb:9e:89:ca:a9:6f:f5:b8:96:4d:e3:42:16:99:
7e:4b:01:2c:d0:c4:25:71:7a:13:96:5e:b3:4e:a2:
65:38:48:7b:37:df:ae:10:f2:33:b4:97:8d:ac:34:
9a:40:41:88:08:8f:e2:d5:00:5c:63:bf:a0:56:7c:
25:e6:a7:51:e6:f6:a6:9d:87:f2:fe:8a:d7:0d:d1:
ef:f4:f1:28:7c:6b:45:07:c6:cb:21:fc:20:25:b2:
f0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F6:B4:1A:63:FE:1E:BF:FF:21:37:2A:89:74:81:B0:82:36:AB:5C
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:94:68:35:d8:92:3b:0c:0c:00:aa:0e:dd:8e:c5:99:4e:2d:
4f:cd:08:1f:6f:90:3b:28:90:12:a8:93:26:14:42:44:be:83:
a2:47:bc:90:c9:ec:c2:6a:12:e6:5a:f4:e3:74:de:67:21:91:
fb:07:da:a1:be:bb:b3:ab:00:d1:9e:19:b4:c7:1f:fd:7e:ae:
e5:c5:82:dd:7f:b0:59:83:db:ac:8d:c0:41:a6:5d:8b:60:16:
40:28:62:15:dc:86:cb:1a:4b:f6:e6:99:ae:4e:66:70:e7:01:
1c:15:a4:a7:2b:d8:33:6b:9a:59:7b:10:b3:87:b8:79:72:2e:
a1:61:cc:cd:0f:d4:45:31:dc:56:65:08:3d:48:f9:97:15:aa:
74:51:13:4e:a9:9a:73:ab:dc:2c:ad:77:ec:2c:f6:00:cd:43:
df:3f:dc:9a:b8:08:cc:ee:65:a2:60:b1:86:d5:85:4d:dc:4a:
9e:8b:01:87:15:96:c4:ed:28:e8:65:f0:bf:65:c8:df:bc:c1:
ac:9d:e6:9a:29:0f:dc:ac:8d:6b:49:f2:3f:4b:90:44:a0:ca:
2d:e0:39:62:3a:4f:bb:ae:f0:fc:97:ec:fb:de:7e:78:5b:db:
75:5a:03:a3:b6:56:ab:15:b9:3f:c8:ca:f9:20:59:09:63:f9:
39:12:89:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:12 2025 by rpki-client