Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier: 1RRRhyt3oaZxt4edwox6Ik5z+Ek3nq2WYcOndZROpWI=
Subject key identifier: 01:AB:B4:31:A3:AA:27:ED:66:8E:B4:B8:CE:DE:E5:DA:28:4D:4C:FB
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial: 0194C35081D07E08D83BC58C66330AEF6188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number: 142C
Signing time: Sat 01 Feb 2025 21:00:20 +0000
Manifest this update: Sat 01 Feb 2025 21:00:20 +0000
Manifest next update: Sun 02 Feb 2025 21:00:20 +0000
Files and hashes: 1: Ksr0uLkRk2xgBxHqi3sQnitvzew.roa (hash: WSC+ZUBgflwaiPFD1qCd7YKaOxvqrLSTyitqpFIOSP4=)
2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: lQupROxxhBjlFGQ5Ftq2bf+wGbMC1FByDY7MOrWRPPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:81:d0:7e:08:d8:3b:c5:8c:66:33:0a:ef:61:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Validity
Not Before: Feb 1 21:00:20 2025 GMT
Not After : Feb 2 21:00:20 2025 GMT
Subject: CN=01abb431a3aa27ed668eb4b8cedee5da284d4cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:d6:35:83:59:6a:78:ad:8c:75:11:7c:46:
9f:97:ca:4c:b3:e8:35:5d:93:3d:c2:2b:74:d8:10:
28:fe:69:b0:ed:dd:3c:a5:f1:14:dd:c8:94:50:67:
d4:09:6e:f5:10:40:f9:40:de:12:21:18:ac:0f:32:
cc:47:64:07:ae:2e:4f:7f:ea:9e:a5:b6:64:24:9d:
72:d7:2b:c4:78:44:fb:86:83:1a:88:bd:d5:c3:c3:
8c:53:c1:2e:0e:6d:cc:32:83:10:1c:94:02:85:47:
25:65:e3:b0:79:5f:a0:83:c5:6b:c9:60:8b:58:d0:
63:e5:74:9d:80:c4:17:41:39:2f:f1:ae:13:66:1d:
a7:34:ed:47:94:3d:1c:e3:57:c6:90:f9:98:01:8d:
22:88:e9:cf:77:99:9b:52:9f:af:b9:8f:e4:1d:07:
4b:52:09:d0:1c:4d:1e:71:27:ee:b0:d9:cb:65:66:
e1:bb:60:59:d3:80:5b:0e:68:06:ed:36:31:c9:cc:
3f:c5:f8:aa:c6:00:f1:31:8e:cd:b7:78:68:a1:28:
7c:00:12:9c:a1:dc:77:8e:8d:b8:10:c7:9b:a9:e4:
1c:3a:67:88:4b:a0:f7:c5:92:0a:18:79:a1:40:07:
5a:6a:56:fb:3a:1f:e1:d5:28:f9:fb:ea:b8:af:62:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:B4:31:A3:AA:27:ED:66:8E:B4:B8:CE:DE:E5:DA:28:4D:4C:FB
X509v3 Authority Key Identifier:
keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:af:22:f6:7c:23:44:a4:2e:f2:1a:be:94:6a:1e:9c:70:31:
be:04:24:fe:ce:8c:04:56:08:4a:32:26:4d:77:f6:5b:71:0b:
36:6a:f2:44:4c:d1:7e:e4:b8:ee:ea:e6:a4:fa:f1:05:ed:9e:
4b:20:da:86:0d:ca:2f:ae:c6:7f:2b:ea:b6:45:c2:2d:42:ec:
ab:e1:35:4f:20:a4:c0:f0:9e:93:d5:a0:68:af:f1:96:29:bb:
37:c5:44:41:db:b3:31:b5:4e:c9:20:7d:f3:bf:22:d4:ab:5e:
8b:b4:1c:ac:70:2c:6e:a6:86:7b:35:ec:64:2b:6c:e6:06:4b:
fe:d6:c0:17:34:3c:dd:21:4f:4e:dc:b0:89:19:d1:0c:08:8f:
96:3f:a7:61:d0:58:ab:dd:03:a3:77:be:39:cb:bf:90:0a:fa:
4d:56:fd:cc:d1:da:48:43:82:dd:fa:9c:3e:ec:ad:bd:71:c9:
b4:0e:b0:2d:82:c4:6d:4f:92:cf:73:ec:b4:3f:a9:f4:b2:3c:
2f:73:c5:6b:54:00:00:6c:3c:44:8c:d2:ba:a4:3c:19:ce:a8:
df:86:47:07:0d:d4:17:41:17:0b:6e:f1:56:63:bb:9b:ef:63:
83:6f:d3:0c:75:67:61:1b:9e:4b:a7:37:9a:f7:35:65:bc:ad:
8f:7f:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:43:31 2025 by rpki-client