Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: VAR/6AyxS9alSOaNJdJxvDn2/wWYyqJS67W6cTKsOt8=
Subject key identifier: 7B:64:AE:40:C2:7F:DE:F2:7E:20:92:3B:A7:AD:70:70:26:55:A5:3A
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 01950F7D841D526CB72A8468874806B7B2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 14B6
Signing time: Sun 16 Feb 2025 16:00:38 +0000
Manifest this update: Sun 16 Feb 2025 16:00:38 +0000
Manifest next update: Mon 17 Feb 2025 16:00:38 +0000
Files and hashes: 1: B_Tk3gL-p_aDMGxj8mFQXz7p6IU.roa (hash: towVudD3ZHXUrLOMltR/8PyVnF7v/kv+y5JbOeuwBgs=)
2: QIAcGzg1E-mkwGlMwIaZKUybW5U.roa (hash: vPFlVcoFxwCs0hnXKdVw9v7+IGUFGVEz3iANXdrxvec=)
3: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: mig9tsf71WiohQj5xSL0RcxnfcamM/bgcZWFJju8JBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:7d:84:1d:52:6c:b7:2a:84:68:87:48:06:b7:b2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Feb 16 16:00:38 2025 GMT
Not After : Feb 17 16:00:38 2025 GMT
Subject: CN=7b64ae40c27fdef27e20923ba7ad70702655a53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:d2:87:60:0b:6b:a8:a0:9e:c6:58:38:97:
28:95:d2:23:90:35:da:cf:83:3d:16:20:9a:e4:09:
ff:d4:f9:5b:50:04:73:a9:47:07:dc:cb:7b:99:a8:
96:8d:6a:03:5a:61:e8:68:53:7e:1e:12:0c:72:cd:
9d:db:cd:46:41:51:14:12:a1:4b:cf:cb:96:d0:a4:
9d:35:da:ac:cb:71:88:30:ba:ee:80:5b:52:66:c9:
75:4f:93:c4:6a:8f:a9:61:5a:c6:93:01:b5:9f:f3:
c8:c4:62:16:5f:3e:df:9a:90:8c:94:9c:b3:0b:c3:
c9:cd:a8:4d:66:8d:d9:94:c8:fd:3f:a7:94:4f:6d:
90:a8:af:b4:50:64:7d:fa:18:05:53:61:5d:1c:fb:
3e:9b:e0:02:f6:6a:0c:30:ee:8f:da:53:82:b6:0a:
a2:af:b6:25:ed:0b:6b:79:e7:6c:41:77:5c:c7:c1:
ad:54:b5:fe:15:d6:5c:a0:42:dc:ea:61:18:11:fd:
7b:80:f3:b7:4d:52:b3:32:d5:3b:45:72:2b:6b:94:
7a:c2:5d:d0:24:0c:67:9b:b7:02:f2:6b:07:dd:e7:
32:61:6b:16:81:88:1c:ff:d0:9e:39:4a:00:82:87:
29:76:c6:69:ea:13:30:da:3f:9d:4b:b5:3a:e5:07:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:64:AE:40:C2:7F:DE:F2:7E:20:92:3B:A7:AD:70:70:26:55:A5:3A
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b3:6e:21:0d:b1:b5:9d:5e:f7:ca:60:ca:29:3a:1f:52:84:
d8:97:e4:61:a4:e7:7a:0f:d0:e2:8c:5e:e3:9a:66:10:d3:be:
61:05:0a:3b:b7:f1:28:5f:69:20:dc:c3:33:af:29:37:8e:d3:
a6:e2:32:55:18:8f:5f:35:86:2e:af:66:f9:e1:bd:9f:67:69:
c1:c3:76:b6:06:43:1d:5c:0b:84:15:31:48:62:1d:91:ac:e2:
aa:2d:96:7b:cb:b7:f1:b7:05:95:ec:ce:f3:04:3d:58:01:e5:
fa:af:f0:8f:9e:24:19:74:dc:1e:01:49:9f:df:37:ad:7d:f6:
7a:90:16:e7:69:f2:bd:6e:2d:fa:83:52:9c:62:2a:93:32:d0:
92:4e:19:11:18:5c:6e:da:9d:cd:1d:ab:32:52:d0:24:8a:ab:
eb:15:6f:a9:c6:a3:7d:77:30:c5:2e:38:52:ae:4f:51:e1:dc:
67:78:84:6a:1e:55:fd:93:8f:e0:2d:cc:69:6e:01:20:d9:34:
7a:97:55:72:71:cd:9a:26:4f:98:b7:c2:b7:7e:20:1b:e9:b5:
a5:e6:40:33:31:ba:d1:09:75:c5:37:8b:7a:eb:79:15:eb:fd:
cc:5b:89:68:ad:52:2d:a7:31:9b:4a:6b:73:36:95:86:c7:db:
9b:00:02:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:20 2025 by rpki-client