Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: Iizrvwdj0EqzHvlcLR9RTUeuL5TRdkLqm9uXr/JdFwM=
Subject key identifier: 14:54:A2:9F:84:89:42:57:16:9C:0E:3B:F7:41:44:93:14:FC:A6:FB
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 01941DA978D124312064FB735FBFAB8ACA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 3C
Signing time: Tue 31 Dec 2024 17:00:33 +0000
Manifest this update: Tue 31 Dec 2024 17:00:33 +0000
Manifest next update: Wed 01 Jan 2025 17:00:33 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: 15sy8ZYAzG/66G1TWhQiYKBydSq4NqYPBZvvrcx2LG0=)
2: t2PGeeCo7mF1ctL4Nu9cgVbzp6Y.roa (hash: f2iZgKG8JEdhhQV/+xEiP1qqmhAY8aZtPYiInNIe6E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jan 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1d:a9:78:d1:24:31:20:64:fb:73:5f:bf:ab:8a:ca:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Dec 31 17:00:33 2024 GMT
Not After : Jan 1 17:00:33 2025 GMT
Subject: CN=1454a29f84894257169c0e3bf741449314fca6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:3d:38:bb:45:2a:38:c6:b2:6d:54:0f:20:
98:30:53:e4:dd:61:50:71:83:43:54:ea:92:4d:a3:
01:f2:e4:ac:9c:c8:14:87:75:b4:b0:4c:b0:51:6a:
ae:5c:38:df:d9:62:ae:f1:33:bd:47:7c:5e:59:fb:
41:33:c1:5b:5d:a9:da:af:60:52:40:34:d0:d2:b0:
7b:78:9b:e0:6e:47:28:7e:e2:5e:23:11:6d:2d:f0:
9a:b7:47:c0:cc:d6:ca:80:e7:f8:fe:3d:bf:42:3c:
ea:2c:12:54:5b:d5:1b:b3:80:0b:3c:f7:f5:4e:37:
6d:61:1c:23:4c:eb:52:ee:bc:25:63:86:80:03:fe:
06:16:ff:f1:ff:60:5c:1a:ba:32:1b:f7:00:07:fd:
6b:bf:71:e4:57:7b:03:04:d3:4c:d8:12:2f:36:66:
a8:b7:dd:1d:e4:0c:ef:c5:ff:e5:8f:53:3c:41:04:
0f:08:f3:15:85:33:5d:9c:f5:ce:f9:00:db:90:f2:
83:46:55:e9:5d:e1:1f:45:c6:ed:2e:be:a6:2b:a4:
4b:19:83:d8:76:11:47:ea:39:36:3d:3f:24:51:9e:
4c:ba:2b:45:bf:14:3c:90:f8:b7:10:2a:03:b2:7b:
12:7f:b9:91:e5:fc:67:cd:9a:9d:fd:80:fb:40:a0:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:54:A2:9F:84:89:42:57:16:9C:0E:3B:F7:41:44:93:14:FC:A6:FB
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:52:51:f5:d4:59:aa:7c:b9:ce:6d:3b:c7:ce:60:12:d3:15:
14:79:ee:a6:3f:bc:24:de:1e:87:03:2c:52:79:aa:8d:fa:b7:
e3:f8:b6:25:65:1b:88:7a:85:4f:03:74:f7:3b:15:35:04:7f:
f6:8d:4f:e1:fa:68:6a:1c:53:68:4b:f4:aa:dd:da:23:ee:e7:
a6:33:89:66:6d:4d:e5:ec:2f:23:39:4d:03:dc:be:b5:37:8d:
39:13:7a:1b:f1:cc:b6:b1:8b:64:c8:6f:99:7c:97:80:e4:2b:
dd:33:63:a8:c1:f8:cc:3e:97:64:1a:15:d7:da:d7:dd:58:66:
64:6f:85:f0:04:b5:ec:71:6d:a7:78:6d:64:37:4e:e8:6e:e0:
07:63:fd:ba:c8:c5:89:81:97:5e:3e:4d:b4:47:7a:14:73:54:
49:50:7e:6a:06:05:29:6f:5a:38:a4:fb:eb:f8:1f:e3:3c:7a:
d4:31:1e:61:4f:16:0c:2f:44:db:e6:fc:2e:cc:11:f1:d5:0a:
86:4b:05:09:16:4d:ff:c8:b6:bd:60:39:02:61:9a:0a:f9:1e:
67:cf:ff:fc:2c:e2:46:59:4b:a6:be:dd:3d:ba:1b:fd:14:e8:
c6:52:97:dd:c1:0f:3e:9b:bb:73:d2:92:6c:97:e7:68:ab:bf:
6c:29:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 1 03:34:41 2025 by rpki-client on console-fra.rpki-client.org