Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: IfyqHOnQ4hhJ61lAmLIBVZ22FwpOHNywA7x9LqCyDqY=
Subject key identifier: AC:0B:CB:8C:46:E9:F1:3E:A9:4D:10:7B:18:0F:DD:0E:CA:AD:2A:B8
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019510C75980DFE9A963EBA5CB83C38A5924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 22:00:54 +0000
Manifest this update: Sun 16 Feb 2025 22:00:54 +0000
Manifest next update: Mon 17 Feb 2025 22:00:54 +0000
Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=)
2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=)
3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: q19DTv2YVhxp2nmjd3BQ9MYRba/MjWZetrLHSKLEEDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:59:80:df:e9:a9:63:eb:a5:cb:83:c3:8a:59:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Feb 16 22:00:54 2025 GMT
Not After : Feb 17 22:00:54 2025 GMT
Subject: CN=ac0bcb8c46e9f13ea94d107b180fdd0ecaad2ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:2c:ca:74:b9:44:d0:f5:9e:df:46:24:6c:
94:9f:98:4d:5a:74:60:91:76:63:4e:09:03:46:74:
6f:00:46:5e:c7:34:77:77:f9:45:61:2d:87:37:8a:
6d:b4:ee:b2:7f:7a:c0:70:78:5e:d8:f2:c5:ad:8e:
c8:84:07:2d:65:fd:84:9a:37:dc:19:29:1f:a4:1d:
bb:b7:6a:fe:d0:5c:01:bf:d1:aa:82:80:17:da:9c:
04:b6:63:f1:dc:ad:d5:bf:bb:f4:9e:32:5c:b7:1b:
5d:9b:bb:d0:49:2b:4d:94:2c:be:26:6a:c1:41:58:
43:54:dd:d7:5d:b9:d0:5d:1d:d5:ff:5f:d1:5b:bc:
62:d7:e3:71:cb:77:32:a1:9e:06:3f:2d:71:66:d0:
41:b5:1a:df:cc:d0:82:5e:0d:b1:a9:d2:26:94:41:
9e:88:e4:74:8a:4e:a1:ea:f3:08:6a:31:f8:0e:3e:
74:80:9a:15:a3:80:27:0f:93:19:13:98:5f:ed:3f:
00:89:88:d7:70:43:50:7c:32:2b:76:c2:c9:d5:52:
60:e2:85:bd:c9:f9:2f:f2:0d:43:be:0e:c9:17:18:
99:fb:6c:65:20:67:8c:1f:c6:11:f5:e3:e2:07:f4:
f3:4f:ba:45:51:5a:2e:e1:4f:a1:56:90:f1:38:42:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0B:CB:8C:46:E9:F1:3E:A9:4D:10:7B:18:0F:DD:0E:CA:AD:2A:B8
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:38:02:aa:89:e5:c7:ec:d2:7a:1c:c6:b9:b2:8d:10:91:b2:
d4:54:c4:ab:b1:0a:85:23:c1:1d:69:c2:3b:33:06:7d:d5:42:
ed:64:4e:8c:e3:42:44:39:5b:e1:f7:79:ce:92:29:f1:a2:51:
32:39:4e:d3:3a:55:89:ca:ad:57:f2:ea:5e:b7:85:c8:4b:c7:
1e:4e:63:36:c3:e4:b1:13:5b:73:f9:9a:1d:e4:c0:0f:6b:4e:
94:3a:28:a1:b2:2b:b1:f5:3b:e0:9e:57:01:1b:60:c0:c0:46:
7e:f2:0d:cd:3b:75:5f:54:18:30:00:a2:0a:01:dd:ce:8c:84:
a9:87:cb:7a:6c:d2:79:f5:e6:cb:10:62:5e:5b:b2:4e:e6:6a:
87:60:5a:de:e6:2a:a8:2e:dc:af:d1:fc:42:6c:52:2d:41:cb:
ba:62:af:a5:4c:f4:f4:d2:7a:f2:38:4b:88:44:6f:81:48:0c:
1a:4e:02:c1:f0:b0:ae:03:69:de:fb:a1:60:88:31:aa:a0:02:
4b:11:58:a9:f6:d1:22:2e:2a:00:90:36:c9:49:92:72:82:2a:
a9:f3:fd:e4:58:7e:90:ab:cc:e5:8d:ad:d2:b3:f9:a6:54:1d:
f5:3b:e3:81:f6:be:ac:b4:f5:16:8d:d4:e7:54:1e:f2:b5:96:
5e:47:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:11 2025 by rpki-client