Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
File: q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft (raw, json)
Hash identifier: TaiyLzrW0I70T0lg7p7XLOA8cFa9bluEwe8LpeOQ8x4=
Subject key identifier: B5:44:DE:61:58:A0:80:24:86:25:10:BB:0C:31:06:5D:00:0F:25:90
Authority key identifier: AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51
Certificate issuer: /CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
Certificate serial: 0195113537E42E097589EC3ED98D73A6CDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
Manifest number: 0A49
Signing time: Mon 17 Feb 2025 00:00:55 +0000
Manifest this update: Mon 17 Feb 2025 00:00:55 +0000
Manifest next update: Tue 18 Feb 2025 00:00:55 +0000
Files and hashes: 1: 0SSsSk3JYtZfVKoUdIXep-skUls.roa (hash: lo1rRlcKmSiP/o5fsPXMsNzyze1q/0lfZDjTXaH15HI=)
2: q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl (hash: 42moFpVuPE54qjCBNpgFYeNKK3jjeOX2+s3U3d0iL70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:37:e4:2e:09:75:89:ec:3e:d9:8d:73:a6:cd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
Validity
Not Before: Feb 17 00:00:55 2025 GMT
Not After : Feb 18 00:00:55 2025 GMT
Subject: CN=b544de6158a08024862510bb0c31065d000f2590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:67:8d:f5:d2:fd:34:e1:22:50:60:19:e3:d5:
f6:fc:c4:41:10:ea:e5:f4:71:1b:7a:2f:1e:ea:95:
59:d9:61:45:bc:2f:93:e9:b1:92:c0:c6:d7:2d:fc:
32:54:75:1d:37:47:bc:f9:6c:e2:39:ec:1a:33:a7:
ac:c7:b6:e5:34:1f:9d:83:2e:ba:06:d5:ee:9d:49:
47:14:89:ea:e0:9b:c7:67:56:44:19:7e:db:18:c8:
0f:c2:47:21:51:f0:29:ca:dc:ed:b6:ba:46:72:28:
2a:89:8e:1f:d5:84:0c:70:96:05:6e:93:9d:23:88:
3c:68:b1:5c:72:49:d0:66:e3:52:93:30:f9:b9:8d:
33:f1:b4:91:1c:6b:a8:a4:33:a4:ea:70:87:ab:ac:
54:58:d4:0b:38:5e:b6:43:78:7e:68:da:9c:a0:a2:
ad:b7:81:99:f0:5d:8f:32:65:7b:1c:77:c7:d6:ac:
0e:1a:54:fa:4c:b3:c2:df:e4:8c:b7:ef:5f:59:d0:
55:9d:31:bf:c1:7f:4c:4f:6a:ea:b0:4e:80:0e:11:
6e:29:42:5b:8d:e1:f2:e7:8d:8d:0a:fd:43:7d:4e:
d6:18:05:31:ff:94:bd:65:47:9f:45:e5:20:c3:c8:
88:f4:20:95:8e:38:fb:ad:cb:c8:9f:ab:9c:e7:78:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:44:DE:61:58:A0:80:24:86:25:10:BB:0C:31:06:5D:00:0F:25:90
X509v3 Authority Key Identifier:
keyid:AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2d:58:47:5e:46:ef:36:c4:c9:97:84:dd:fd:3d:b4:2e:1a:
db:23:68:05:20:b8:a8:c6:f7:72:3d:04:5f:09:3b:ea:ca:05:
05:37:19:ed:57:fc:a4:f9:13:49:e9:cb:42:28:d3:e8:e9:b7:
14:62:76:30:72:1e:00:dd:84:75:67:d7:a7:39:24:0c:4f:cd:
3f:a6:6a:68:a5:bc:46:0b:f2:5f:2e:a0:e3:04:4a:f0:0f:1b:
e0:81:b7:fa:26:90:0c:c9:40:3f:0f:dd:10:5f:fe:92:c6:57:
d7:8b:e3:5d:1f:9e:23:b6:f3:69:a7:81:0b:e2:88:3e:13:20:
cf:ab:66:08:cc:c2:87:31:d1:5d:36:11:ad:fc:a8:cd:4f:3f:
8c:f5:71:bb:6c:22:43:fe:5e:45:e2:8f:de:61:06:94:74:d9:
8e:f2:97:7d:d6:90:b0:99:37:8c:36:63:d9:86:db:e5:4b:fe:
00:16:f5:0d:fb:bb:ff:26:0e:22:f3:ba:6c:e1:52:8c:a4:76:
71:fb:52:09:35:6a:dd:e4:8a:97:96:fb:d7:04:9e:79:91:8f:
d2:46:2a:f3:f6:ee:c0:22:a7:64:70:21:53:80:98:17:65:79:
8a:6d:a1:36:63:5b:32:17:a4:41:7f:d7:aa:d1:1c:40:a8:c1:
c7:63:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:32 2025 by rpki-client