Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File: QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier: 2WE/tQMXr6jjw03BPbUcjzRS4PNY+khvMEa197uZfQU=
Subject key identifier: 54:57:74:1D:AD:19:B1:E0:22:D5:0C:8D:8D:32:10:3B:E2:E9:48:B4
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 019510FE0E60B0F3AACD47AE6C28CC69F894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number: 145D
Signing time: Sun 16 Feb 2025 23:00:40 +0000
Manifest this update: Sun 16 Feb 2025 23:00:40 +0000
Manifest next update: Mon 17 Feb 2025 23:00:40 +0000
Files and hashes: 1: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: GQAMTmDci4zAbD5gkEYASeKl8A+1ODTId+JRHb6zjuc=)
2: lO2EUiNy5Ygni4U4ocj0hRuk3Jk.roa (hash: fuy338nopwX5IC9ItK0YIUtMYQx4XUChLczdkAXvh4U=)
3: q9jElUrbhazQFMEmmCOsDeqbLJA.roa (hash: RedQ+QOQuI2x8mkKA1C82rnZg776YlWDZwTviJY79bo=)
4: sJO10EU5Nx8_dkPBaPnnB2dtYNM.roa (hash: XB5B7Wmp004sDj3pl5z8PdpWXfh6a+r4ST0GRlHwVWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:0e:60:b0:f3:aa:cd:47:ae:6c:28:cc:69:f8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Feb 16 23:00:40 2025 GMT
Not After : Feb 17 23:00:40 2025 GMT
Subject: CN=5457741dad19b1e022d50c8d8d32103be2e948b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:10:d6:f7:7c:9a:9c:0f:a3:8c:56:d7:d0:
47:35:fe:b8:d9:ce:af:a2:59:b6:b8:bc:bd:64:76:
8e:07:cf:30:b4:70:b3:be:13:ca:58:1b:0f:c1:c8:
21:01:88:20:f6:c3:24:84:a3:c4:2a:a5:f0:06:80:
4e:b8:d8:4a:db:b6:7f:85:39:85:0c:53:c4:f6:f1:
97:ae:28:af:1a:c4:9d:a4:6b:f3:08:87:83:41:7b:
76:63:6b:37:48:d9:7f:77:c4:a5:22:de:75:97:ba:
80:f7:f2:14:3e:c8:a2:0b:bf:cd:dd:4d:bf:5b:41:
22:ab:54:55:63:7a:42:9a:32:24:7d:6d:9c:94:35:
97:49:fc:4d:d7:dc:52:da:ac:7b:a3:44:6c:fb:ec:
2b:93:e6:3a:8c:39:bb:64:8e:5d:8d:5d:ba:12:ad:
09:bb:1e:17:94:41:f1:14:3b:04:38:43:f9:b2:cc:
8e:80:ff:c7:04:f0:b1:7c:16:94:03:ef:da:ea:dc:
bf:c9:78:74:fb:1d:eb:c8:57:9a:6e:e3:1a:29:8e:
15:91:14:03:3f:10:47:3d:09:e6:d8:a4:ef:77:67:
a5:43:65:aa:88:a2:02:c6:ed:94:32:d1:b8:33:2b:
33:0f:5d:c6:66:4d:bc:53:ca:da:15:9b:8e:d5:fc:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:57:74:1D:AD:19:B1:E0:22:D5:0C:8D:8D:32:10:3B:E2:E9:48:B4
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e4:90:73:1c:9d:3c:f9:60:63:31:01:9a:72:0e:1f:78:40:
8d:fb:fb:fe:53:81:67:7f:80:81:16:07:18:fa:01:8f:fe:a3:
30:d4:ec:65:6a:fa:5c:ab:d4:e8:98:1e:17:12:9c:ac:9b:07:
70:b2:8e:2d:68:ed:2f:45:5c:c0:3f:9c:a2:ab:d2:ab:4b:88:
c6:42:d3:40:3f:f2:6c:0c:a6:7f:ee:ef:37:f6:f0:17:d3:11:
f6:21:53:f4:76:af:6b:3e:15:ba:b8:ab:14:e8:01:29:6a:1d:
f7:29:c6:77:5b:9d:70:ed:3f:64:8b:6c:c9:7b:ef:bd:a2:3a:
08:24:db:4c:b6:69:24:3c:4f:fa:7f:fc:a8:51:26:78:cc:17:
0d:da:9f:44:20:9e:90:4e:49:08:30:ce:2a:df:98:15:3e:af:
84:7f:d3:10:12:96:ea:95:c0:40:c0:e4:a3:18:62:f1:34:24:
5c:68:0c:d2:79:52:53:47:9f:b5:59:bb:3d:5e:64:f5:b1:a7:
e8:b2:e5:07:9e:70:b5:55:24:a0:a2:1c:ac:76:9f:c9:cf:91:
fc:d3:67:37:6c:2d:3f:00:07:d8:d8:13:96:51:7e:04:0a:23:
91:9d:73:c2:73:54:72:9d:9a:0d:f2:fb:0a:fd:66:28:1e:dc:
11:5b:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:58 2025 by rpki-client