Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: HFqr+oiLB/6+I+5nTM7eyENdIhJ9wVyrg4O6MbImYA0=
Subject key identifier: 07:3C:02:0A:B8:A3:CA:C4:BD:19:CC:FD:37:82:C6:25:61:2F:23:D5
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 019511349440796460437524533C135EB9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 109B
Signing time: Mon 17 Feb 2025 00:00:13 +0000
Manifest this update: Mon 17 Feb 2025 00:00:13 +0000
Manifest next update: Tue 18 Feb 2025 00:00:13 +0000
Files and hashes: 1: PzCzJjGgoPXtrlh76B1G7PxDa5w.roa (hash: 0mC70+WY3sICObRriEKv1EjaSi7E87FOmh2jLXs4uxs=)
2: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: cAwnGnmyN+eOjJ8MtmYen5SKW2HyaiipsEEW7i+RP5I=)
3: xkqO4aVLIZUckL31oh3PJoWcGDw.roa (hash: U3ieRFwqG7N/E8wCUCYGjMDFUjBJb6rB66D0tY2rBtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:94:40:79:64:60:43:75:24:53:3c:13:5e:b9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Feb 17 00:00:13 2025 GMT
Not After : Feb 18 00:00:13 2025 GMT
Subject: CN=073c020ab8a3cac4bd19ccfd3782c625612f23d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:09:f0:eb:be:33:dc:d4:b8:55:ac:49:b3:
f5:d0:f0:f7:bb:ca:c4:d4:ea:3b:43:b2:cc:a1:89:
c2:b3:d1:fd:0e:2e:69:cf:ec:b8:9b:90:f2:67:93:
b6:37:b6:1a:e0:51:57:1f:dc:06:ce:e3:e7:4e:1f:
3f:d5:69:27:75:db:7c:cd:f1:45:e9:da:9d:c8:bb:
24:5a:e0:06:f9:16:0b:28:f7:a6:fa:89:cc:5a:f5:
4b:73:34:32:fc:0d:8c:53:d2:0c:37:77:cd:ad:dc:
88:09:f0:d5:9e:37:df:7c:02:a2:7a:74:05:eb:15:
de:25:48:d9:b5:80:f1:08:be:3a:5a:00:dc:06:69:
ce:bd:c6:ed:5d:7d:43:80:b6:d6:59:df:a8:44:97:
30:d1:dd:8b:1d:70:56:4d:6f:b5:48:f9:fe:04:f2:
5d:f3:7f:23:3a:76:14:fe:c2:e0:65:aa:85:7a:93:
98:1f:dc:c9:ad:12:27:1d:34:83:bc:58:5d:98:85:
a5:6c:b1:b8:20:b2:bb:64:51:e8:fd:2e:08:57:a1:
e5:63:c7:31:e2:15:09:0d:37:6d:2e:43:6d:b8:d0:
94:4b:7e:64:3f:7f:f9:b8:0f:85:cf:4b:04:22:a6:
a8:04:82:c7:45:61:5a:7d:91:ec:77:51:c2:a4:79:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3C:02:0A:B8:A3:CA:C4:BD:19:CC:FD:37:82:C6:25:61:2F:23:D5
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:be:ba:3c:a8:6b:dd:db:0f:ca:81:fb:79:a3:7c:f2:ad:92:
0a:93:9b:5f:77:e3:1d:9f:79:c6:7b:4c:fc:76:0e:46:f4:c0:
a7:e5:ae:4a:92:2d:35:db:89:f5:1b:13:d6:ac:cf:b6:d8:88:
4a:4c:48:e7:b0:f8:ac:33:10:a2:95:60:38:e9:a3:94:cd:fc:
e9:07:dc:35:f7:16:43:e9:3e:4c:ea:8a:cb:21:51:56:7d:8b:
d5:95:da:a4:cb:49:a5:8d:be:f7:b9:95:57:88:38:3d:65:aa:
11:b8:a7:72:3b:56:3b:99:c6:6a:b6:5a:2a:c9:ea:4c:00:ea:
71:0e:f7:62:54:c0:8e:ec:3e:54:f1:14:d1:5e:83:ef:c1:a6:
fc:6e:43:d2:e8:bd:13:2c:00:dc:7e:95:32:60:bb:98:66:14:
85:f2:8f:d1:81:44:e7:3d:b7:b3:5c:58:e6:38:49:80:ca:a0:
d4:b5:c7:e0:d6:bc:27:74:13:2c:50:92:57:e9:b7:a1:b8:f7:
94:08:74:20:c0:70:f7:92:39:63:af:e6:e3:4b:7a:cd:34:91:
d5:4a:ad:11:71:b0:1e:4e:14:ea:e2:ca:a2:f0:05:93:f1:18:
e0:6b:e6:96:55:66:3a:13:dd:db:4d:56:6d:10:21:39:b4:a3:
16:f2:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:20 2025 by rpki-client