Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier: bSDN9mQVc+86Bh7yz0xQlneRnh2RPgM6Iq6dmMU5qFk=
Subject key identifier: 82:E5:4C:15:16:B8:ED:B4:40:1E:CA:8B:D9:7C:FF:3F:49:FB:2F:61
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial: 019511D9AF512DC623DF4E17D1C7D2897282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 03:00:33 +0000
Manifest this update: Mon 17 Feb 2025 03:00:33 +0000
Manifest next update: Tue 18 Feb 2025 03:00:33 +0000
Files and hashes: 1: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (hash: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=)
2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: Caosx9lBCSy7bed/pJ+9o3lc36idhu06qOJH5pGqstw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:af:51:2d:c6:23:df:4e:17:d1:c7:d2:89:72:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
Validity
Not Before: Feb 17 03:00:33 2025 GMT
Not After : Feb 18 03:00:33 2025 GMT
Subject: CN=82e54c1516b8edb4401eca8bd97cff3f49fb2f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:ad:81:aa:8a:a7:bf:03:81:d0:e8:a3:7a:
40:1d:d4:81:71:e4:b8:b1:28:48:51:4f:a9:e3:15:
5b:35:cb:91:76:0d:b0:94:7f:43:46:a7:14:54:e5:
00:aa:56:a3:d1:c2:47:d7:32:a1:08:f2:42:f3:d2:
86:0f:09:7b:22:66:18:0a:83:c5:91:d1:20:87:5c:
ec:10:2d:79:ab:38:dd:5e:e1:01:1c:30:53:72:48:
e6:9d:0b:98:80:30:ea:72:5d:f8:4f:4f:1f:f3:03:
1b:bb:22:a7:0a:a6:1a:8d:ec:05:b5:fe:75:92:1a:
ee:32:f0:e0:05:ad:3d:7b:8c:5d:1b:86:a1:60:b0:
84:a7:c0:1f:2d:f0:2d:4c:a9:c3:04:69:b4:d5:85:
0e:a9:26:17:b6:87:7d:65:5b:28:7d:24:74:af:3e:
3b:a2:02:6d:6b:88:7f:9d:8b:66:6c:47:52:40:a7:
f3:74:c3:d8:a0:6c:d5:49:c1:89:8f:fd:18:e6:5d:
2f:a7:67:b4:9a:ec:8a:cc:6d:68:32:0f:b3:a0:e7:
30:9e:e2:f5:47:b0:04:bc:6a:b2:1a:8e:4f:c0:d5:
ac:dc:f0:bb:63:20:f2:33:04:63:f7:6d:45:81:9e:
c0:67:5f:5c:42:95:97:93:2c:95:26:1d:0f:2f:62:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E5:4C:15:16:B8:ED:B4:40:1E:CA:8B:D9:7C:FF:3F:49:FB:2F:61
X509v3 Authority Key Identifier:
keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:61:9a:5b:aa:43:9b:aa:1d:f7:e3:fa:72:8f:24:83:f2:e9:
1b:41:e7:cc:e6:b7:72:d2:ac:0e:52:1b:3b:ce:81:2b:e1:e8:
29:9f:39:e2:94:78:18:ef:94:17:04:b5:d1:89:8b:91:a4:00:
7b:f3:10:1d:a0:b0:c7:c8:5d:07:af:74:c3:59:50:7e:70:18:
5e:5e:3c:7c:ff:29:25:a1:9a:8f:7a:34:0d:82:e7:71:e0:da:
67:b1:1f:52:b1:a7:95:4e:4d:c2:42:b2:60:65:25:03:bd:4c:
c3:8d:73:1c:94:5f:5f:7a:9f:15:92:89:7f:d9:31:d6:9e:9a:
31:a4:5b:b4:d3:92:95:86:f1:74:d8:2e:6e:0b:d4:4c:e9:83:
b2:29:5c:9d:2d:9d:cb:ef:eb:b8:d7:36:da:ed:73:6a:dc:b8:
25:24:58:8f:a8:69:17:1c:e8:ee:15:29:fc:ea:fd:79:19:df:
d9:9d:0f:45:bb:d6:d3:01:4b:32:8f:52:9e:9e:86:42:05:a4:
5b:1d:43:94:01:2a:e9:ed:57:5f:8d:f1:fe:66:2e:bd:00:bc:
ad:8d:40:63:57:cf:93:b3:ca:7d:4f:52:5f:c8:7b:13:fa:4d:
67:52:ba:9d:12:18:c0:64:6d:df:4e:a8:50:eb:2a:50:c9:a7:
05:9d:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:24 2025 by rpki-client