Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
File: Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft (raw, json)
Hash identifier: WygAsuaXzk1bx7e9/MC8ht1PrXWDi75hGtjKPCoWe1k=
Subject key identifier: DA:8F:E2:88:28:73:09:BB:4A:7F:BC:29:71:34:08:8A:21:C4:FF:81
Authority key identifier: 41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
Certificate issuer: /CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Certificate serial: 0194C3F5F577F991F19A01AE2686DB44BEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
Manifest number: 0A02
Signing time: Sun 02 Feb 2025 00:01:03 +0000
Manifest this update: Sun 02 Feb 2025 00:01:03 +0000
Manifest next update: Mon 03 Feb 2025 00:01:03 +0000
Files and hashes: 1: 9DaFft1ZRBebRPooZGGkOPjqAbQ.roa (hash: lYC82jjgh3RxcDkcuO3IXX6eKV+DE4TIh12Xui9zOW4=)
2: Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl (hash: ZOmGuB/zCpN4klHQMYdESMtb3o0kjlC3SoqMU/yZd8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:f5:77:f9:91:f1:9a:01:ae:26:86:db:44:be:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Validity
Not Before: Feb 2 00:01:03 2025 GMT
Not After : Feb 3 00:01:03 2025 GMT
Subject: CN=da8fe288287309bb4a7fbc297134088a21c4ff81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:cd:3e:d4:be:56:db:99:e6:27:8b:5e:eb:
7a:1d:b9:50:bf:45:b4:3b:d2:63:49:3d:3d:30:2b:
b8:05:93:48:c4:df:8f:61:64:39:96:3f:66:d6:fa:
fb:6f:09:70:c1:24:b6:04:3c:f2:35:66:26:98:d2:
70:d7:f6:cb:85:66:c8:49:bc:e7:43:e4:79:17:7b:
9b:e7:e6:25:3d:54:bc:56:ad:40:59:a1:20:ce:7b:
26:a0:b1:05:ce:c5:28:4b:28:a5:80:4d:86:35:fa:
87:16:da:37:49:c2:3f:64:a1:97:7a:23:1e:2c:f9:
fe:d4:99:cf:91:94:12:8a:73:c5:61:9a:1b:4a:b9:
f9:c4:4d:df:83:07:ec:bd:90:0b:10:d2:f6:83:9b:
85:d5:87:c3:6d:25:ad:69:91:78:d2:0b:db:e6:da:
fc:2b:31:0e:a2:34:3f:91:88:cf:ef:3c:76:1f:bd:
74:9a:58:62:1c:94:25:cb:d4:92:82:f8:40:f4:47:
7d:c8:7b:55:4c:1f:d4:ba:07:03:f6:cb:b8:5d:51:
fa:af:b1:8e:0d:46:e9:2a:c1:ae:01:9e:6d:0c:2f:
80:05:a7:38:a1:7c:ff:14:0b:44:e1:f7:2e:94:f0:
11:a5:6e:dc:44:1b:f6:ef:cc:f6:37:f0:43:67:6d:
a5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8F:E2:88:28:73:09:BB:4A:7F:BC:29:71:34:08:8A:21:C4:FF:81
X509v3 Authority Key Identifier:
keyid:41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:eb:96:90:22:78:57:21:e7:a4:e9:20:da:83:0e:3e:d1:4f:
dc:21:be:13:ed:cb:7e:4e:59:bc:79:84:46:ab:51:6d:30:7e:
f3:03:f5:3e:ee:4a:cc:cd:33:fb:7b:4f:76:4a:84:8a:98:14:
3b:56:03:b3:29:f0:1e:1d:f1:32:6f:b6:da:95:0b:0a:11:6b:
c6:4f:12:33:4b:a4:d7:d5:39:64:84:b5:73:4c:a8:59:b6:aa:
27:26:5b:1d:53:fb:b1:ce:d9:b6:dc:60:cb:ba:6e:a9:d9:18:
e9:bb:39:14:f0:27:bb:c0:35:30:0e:c6:a5:bc:6d:30:37:ea:
37:a2:a4:72:22:ad:34:1c:95:e8:66:84:f2:1e:10:2c:16:54:
c5:0d:14:fd:11:72:16:14:c7:dd:c1:00:49:56:f3:c1:fa:cd:
cb:fe:a8:5b:5a:1f:0a:7b:1d:ed:8d:c5:18:e8:95:ed:95:be:
de:04:d9:29:f4:a8:8c:46:f9:2a:d2:e8:38:73:d6:a5:6f:62:
31:f2:8e:be:45:2c:88:47:b9:57:35:51:22:e9:f5:77:80:61:
b6:d0:59:a3:7c:29:3b:b4:be:92:ff:86:b2:70:7c:db:4d:0f:
8b:6b:85:84:63:4a:47:97:b2:a2:d5:5d:6c:c0:de:34:71:8a:
f4:27:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:11 2025 by rpki-client