Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: /JNZKAfpW/vD+xdgRFk3hVmEnJQ8xGDp1f7z1oAdt0g=
Subject key identifier: 40:48:B0:F4:40:19:B6:D8:23:64:0F:17:66:9B:2F:E7:5C:B6:96:27
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 0194C4D13C8DEAC5DD59A2DB6D2CF5C76827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 04:00:34 +0000
Manifest this update: Sun 02 Feb 2025 04:00:34 +0000
Manifest next update: Mon 03 Feb 2025 04:00:34 +0000
Files and hashes: 1: S0sJgeFKsSQM_Y24-bMbEEazWOE.roa (hash: y7ujKOOyPaVjZL4Z2dl77e4qeqFzdcjNTXADyZzs44w=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: DmJMgrXeRKQhAK2RsJ1P75vTOU0wc4UBz9itYcVjny0=)
3: r-ygRbjtxxgO3t3aGjdEJ1nnCcw.roa (hash: WR2yF8mNXvC7JDBK3ZnnxThACZnLlRj8L9WEQd6jnY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:3c:8d:ea:c5:dd:59:a2:db:6d:2c:f5:c7:68:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Feb 2 04:00:34 2025 GMT
Not After : Feb 3 04:00:34 2025 GMT
Subject: CN=4048b0f44019b6d823640f17669b2fe75cb69627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:aa:70:31:0f:ad:78:d0:9d:6d:ec:d5:f5:
6c:85:29:12:e7:c2:21:57:b1:db:25:d6:38:1b:ed:
b5:4b:c2:7d:58:74:f4:05:cf:8b:39:03:b8:c0:ff:
7b:f1:1e:9d:9e:c5:2f:d4:b1:70:c2:55:7a:81:82:
25:e2:5d:a3:99:b2:7b:49:68:15:c2:6d:78:18:81:
17:e1:66:c0:52:62:04:7d:44:e6:da:b6:b3:31:1b:
9a:2c:72:f0:6f:b9:4a:19:b1:db:11:2c:2d:e2:7e:
2a:51:26:bd:39:7a:04:9c:9b:ac:bb:3a:d1:df:bb:
62:90:46:fd:2a:fb:c7:24:db:fb:57:00:2c:6b:eb:
e1:9f:7d:f3:73:d1:84:ce:12:9a:5c:ea:fb:be:34:
d7:62:cf:e4:b6:ab:af:18:98:31:34:c7:75:37:29:
f7:fe:06:b3:c9:60:30:02:d2:c5:40:0f:0a:b9:14:
8f:51:e0:27:9e:98:88:42:40:77:f2:83:f4:b2:0c:
14:04:be:5c:36:5c:d5:bc:dd:55:44:63:d6:1b:39:
0b:2c:7e:5c:65:0a:fa:ac:4a:4a:ed:dd:51:35:d3:
27:09:b5:2f:90:0f:35:cd:68:64:41:f7:09:b7:f5:
96:f2:1a:91:7a:df:4d:4f:a7:24:96:4b:fa:13:ed:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:48:B0:F4:40:19:B6:D8:23:64:0F:17:66:9B:2F:E7:5C:B6:96:27
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b6:b9:3c:86:49:13:12:88:70:0f:44:ab:4d:3c:e7:8f:74:
86:67:22:23:f6:b4:3b:59:5f:70:ab:19:57:7f:94:0e:8b:94:
04:e5:d2:20:a4:ad:c3:07:f8:08:90:e4:5c:2d:de:e2:7b:1e:
cb:86:c6:f1:2c:5c:f5:67:f5:be:6e:1d:a1:a7:e1:9f:2f:f6:
54:b9:f4:3e:55:24:f8:7c:34:2f:ec:83:2f:49:d9:16:8a:21:
45:02:0c:14:58:1a:eb:39:e9:73:b7:45:be:2a:ee:c3:c7:55:
8f:24:59:d0:6f:59:01:15:55:b4:a2:f7:a1:87:87:bd:38:27:
57:19:2d:cd:8e:50:d5:4a:c9:72:1b:35:1d:c8:ef:51:06:c9:
d5:2f:76:73:f2:e0:37:b5:69:18:6a:9b:9d:9a:7b:ad:84:23:
09:4c:63:91:fa:37:0e:7c:de:3f:47:c5:6f:f8:a5:6a:7d:d4:
50:6b:43:af:fc:91:e8:a6:d0:22:ea:ec:75:ed:01:71:63:b8:
66:da:b9:ee:fe:48:80:29:1c:7a:9e:4c:de:a8:96:78:01:0c:
b0:c1:13:52:7d:48:ae:ab:aa:1d:66:1e:46:26:35:f0:51:e2:
f0:3c:5b:6c:e0:61:78:70:e2:cf:8b:0d:d0:cd:88:04:12:81:
03:cb:e3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:26 2025 by rpki-client