Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
File: MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json)
Hash identifier: 32d94veLFMNOo3UpiGTY9OVc4w4ngOWoMJX5vxQXQfA=
Subject key identifier: B2:31:00:F2:3C:23:A3:AB:D5:54:87:D7:4A:B9:8F:A0:DB:33:22:2E
Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
Certificate issuer: /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Certificate serial: 0195116C236761A339DFE14828B02C175593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
Manifest number: 0BB3
Signing time: Mon 17 Feb 2025 01:00:54 +0000
Manifest this update: Mon 17 Feb 2025 01:00:54 +0000
Manifest next update: Tue 18 Feb 2025 01:00:54 +0000
Files and hashes: 1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: LBySpPsX81qvF1edk9ptu5o8u1kbFnwnExKqBLacWM8=)
2: n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa (hash: aqnlDGIUWDjeSw56rbOxl68/tZN2XXXLT/oEGZEp9F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:23:67:61:a3:39:df:e1:48:28:b0:2c:17:55:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Validity
Not Before: Feb 17 01:00:54 2025 GMT
Not After : Feb 18 01:00:54 2025 GMT
Subject: CN=b23100f23c23a3abd55487d74ab98fa0db33222e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:f0:03:65:bf:b5:a5:df:d6:b7:9e:f0:89:
09:6d:37:00:ec:31:fc:d8:1e:7c:8b:ff:10:ab:b4:
b5:a0:02:0e:59:c5:ef:fc:f0:e3:c4:4d:fb:cd:61:
6f:7b:5a:18:df:01:28:65:d7:9b:f0:b3:ef:df:54:
b9:a1:c4:6e:e5:2e:01:9c:14:4f:35:b4:1b:d8:6a:
4e:22:41:56:2c:ce:1b:af:23:2b:6b:ff:0c:be:e7:
ec:20:c5:fd:d6:14:e1:16:03:a3:8e:ca:d2:9b:af:
e6:3f:29:dc:4f:3b:11:0f:3a:88:d4:a4:20:f3:c7:
96:f9:66:49:12:68:31:f3:ed:de:8f:d5:63:bd:44:
b9:24:04:9a:38:24:33:93:52:d8:7a:0b:8e:b3:68:
28:cd:20:f1:33:65:85:7b:e5:62:bd:bf:c2:0c:33:
f0:59:27:d5:86:d5:1e:33:08:c9:5c:f0:51:bf:17:
63:7d:1c:a6:da:74:dc:1c:75:72:a5:3f:84:17:b9:
c9:48:d2:ee:c5:6a:72:21:96:6c:be:67:9b:2a:12:
d0:3a:b8:f3:1a:d9:5a:d0:46:f9:97:c2:ba:49:7a:
f0:69:04:28:d9:ca:e5:1a:fa:6f:53:e7:c3:02:99:
96:1f:f0:63:bd:0c:a1:b8:2b:28:81:85:94:dd:40:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:31:00:F2:3C:23:A3:AB:D5:54:87:D7:4A:B9:8F:A0:DB:33:22:2E
X509v3 Authority Key Identifier:
keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:73:15:78:02:89:61:c4:12:c5:42:ee:cc:62:05:77:20:79:
64:c1:d3:52:7b:b9:4a:cf:86:42:4f:f7:7e:36:fa:3a:c8:22:
0d:5f:b4:7f:03:83:92:5f:e6:31:14:96:8b:2d:48:74:25:1c:
af:d4:8e:01:72:46:01:1e:08:bb:f0:e4:bf:ac:e0:87:27:1d:
14:45:f1:60:b1:b0:01:42:ac:2b:8c:4b:5d:50:0f:22:0f:1b:
69:68:43:57:cb:ee:77:e0:9d:24:1a:b5:d3:ce:95:bf:43:3e:
46:77:f2:76:65:d2:23:b4:e0:51:b9:d9:52:2a:ca:24:6a:4f:
13:6a:2e:13:8f:fa:43:25:7a:08:03:28:b6:8d:5a:9d:84:2e:
5b:99:ae:7e:ab:48:17:61:88:f2:d2:7e:e9:c2:68:86:bf:0a:
c6:3e:72:25:0c:41:06:eb:63:73:93:36:7d:33:51:59:4a:79:
85:d1:9e:ad:bb:ab:6a:5c:5f:0f:3b:bc:9f:24:e0:7b:b6:df:
f8:0e:31:81:8c:6e:1f:41:2d:74:5e:42:b8:13:bb:4e:d4:74:
5d:70:03:ef:8f:4c:51:95:ad:77:a1:92:f6:1f:c2:c4:99:32:
d6:a0:bf:5d:88:68:a8:e2:a5:ad:8e:29:1c:a0:28:29:92:1f:
22:ce:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:53 2025 by rpki-client