Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: Q7sKlXtsdL/O0KTGPJJilanYkevli4EzRRGsvT6e0Kw=
Subject key identifier: 85:A4:3B:A9:28:46:E6:2C:B5:9C:E7:7A:5A:7B:44:09:BA:C7:9C:E1
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 0195124770CF3EBFE8B96A45F894300BA421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0963
Signing time: Mon 17 Feb 2025 05:00:26 +0000
Manifest this update: Mon 17 Feb 2025 05:00:26 +0000
Manifest next update: Tue 18 Feb 2025 05:00:26 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: kdSp/2Roor+Cjt7XMC7v8K4TVyXw5j2bj4Y13BIaUCo=)
2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=)
3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:70:cf:3e:bf:e8:b9:6a:45:f8:94:30:0b:a4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Feb 17 05:00:26 2025 GMT
Not After : Feb 18 05:00:26 2025 GMT
Subject: CN=85a43ba92846e62cb59ce77a5a7b4409bac79ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:d6:2e:c8:d1:45:c3:47:fb:c3:d0:d7:6e:
d4:dc:34:7e:3f:b3:f7:54:ae:57:90:02:61:31:8d:
bd:5b:30:7c:a2:85:73:1f:84:a7:6c:86:84:cf:f9:
b3:98:50:72:dd:b3:15:ed:23:86:b8:88:e5:98:1b:
15:21:94:9f:09:67:2c:c9:91:b6:5c:ec:1b:b1:80:
c6:9c:71:55:40:a6:2a:9f:ea:d0:a1:6a:a4:5e:f6:
f9:e4:bd:9e:9a:b3:3d:61:40:25:b5:2e:54:46:90:
c9:2e:46:b1:9d:f7:a2:e5:83:81:7f:f8:eb:41:e0:
97:0f:1d:70:ab:35:3f:77:e0:18:88:af:6a:8d:62:
6a:ce:f3:e1:95:02:0f:56:0c:b6:a4:ff:15:c5:83:
dd:e2:63:07:62:88:8e:7e:dc:dc:54:65:6d:6e:65:
cb:09:09:13:2c:2a:f6:ce:bb:c4:c6:e9:73:4b:1d:
13:f9:f4:33:af:89:69:4e:58:f8:b5:51:e5:93:dc:
86:22:af:57:c7:79:ff:1a:cd:94:f5:74:69:1b:4d:
b5:a7:f1:6c:67:b9:1f:f0:ae:5b:b3:87:fc:10:4d:
5d:b1:75:4b:1f:c5:f0:c8:4a:e6:5d:1f:a5:cc:2a:
d2:85:e2:ed:07:cd:f2:ca:fb:51:5a:ae:58:e1:c2:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A4:3B:A9:28:46:E6:2C:B5:9C:E7:7A:5A:7B:44:09:BA:C7:9C:E1
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cc:0a:5a:80:48:89:21:84:e5:f2:61:aa:8a:f5:ba:a1:1b:
e8:fd:ce:a4:16:13:5f:fa:db:cf:f0:fb:4f:bf:cc:a5:1f:7d:
41:e8:b6:62:8e:37:82:3f:45:93:fd:3d:ec:b7:84:f5:32:9a:
d3:52:44:af:47:94:da:82:48:7d:c7:0d:2f:b7:50:dc:5d:ff:
b5:05:86:ae:f5:a3:ae:2e:b2:6d:52:b8:bd:4e:6a:4e:c9:a3:
60:ee:c1:81:b0:72:72:4e:be:f8:a0:24:fe:fa:31:a2:8b:49:
33:57:4d:81:05:ef:1b:54:f5:cc:6f:80:17:8c:da:0e:7a:bb:
a9:ea:ef:81:ff:31:1b:b3:ef:37:2b:dd:50:e7:6c:b8:18:40:
0c:ff:73:a4:26:d6:08:fe:b4:51:4d:50:a8:31:af:50:49:85:
99:a4:0b:5d:fc:3b:ad:32:a4:47:e5:e0:74:eb:89:b2:26:e9:
b8:70:7b:a6:0c:85:56:e9:26:72:24:9b:fb:91:55:5e:78:e5:
31:c1:1b:13:cb:2a:3e:79:09:ea:5a:ee:eb:f8:66:e7:b8:99:
be:60:43:7d:48:44:54:a9:56:57:27:ea:3f:2a:3b:f1:bb:12:
a3:83:f0:a3:aa:e8:01:3d:43:4d:54:9b:db:45:95:63:e9:14:
5c:be:df:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:54 2025 by rpki-client