Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: 6/BHTRvFjzSBvoc4e6UXbIayxXpMST4XcPUdFrlzBZE=
Subject key identifier: F2:60:F0:EA:F3:59:DD:89:5D:73:F9:3A:AC:4B:7B:B7:8E:B0:50:20
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 0194C3509160EA41605F7845E45242A1B17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 142D
Signing time: Sat 01 Feb 2025 21:00:24 +0000
Manifest this update: Sat 01 Feb 2025 21:00:24 +0000
Manifest next update: Sun 02 Feb 2025 21:00:24 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: w/T6bDkt7W0/BS3Y0VSJVF2d9lIRWjpmr7OwFfnR3EE=)
2: pFcInvEW15iKWvoPMx5EVwuCano.roa (hash: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:91:60:ea:41:60:5f:78:45:e4:52:42:a1:b1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Feb 1 21:00:24 2025 GMT
Not After : Feb 2 21:00:24 2025 GMT
Subject: CN=f260f0eaf359dd895d73f93aac4b7bb78eb05020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:59:c1:84:b8:92:c9:39:62:5f:9a:4f:da:
b0:fe:4b:38:c3:5e:af:bd:ec:ac:de:9a:4b:b3:09:
2b:79:d2:62:95:7c:ac:95:b4:eb:a7:0d:46:37:70:
f0:4e:09:a6:90:3e:0d:7f:b4:6b:d0:0a:af:4b:ff:
fe:b5:6a:08:77:c8:c2:2f:2f:9c:da:ad:09:6f:37:
5c:86:ec:9a:1d:30:46:1a:de:1c:6f:03:1d:92:c2:
6d:a8:e0:d4:f2:03:c8:92:38:84:cb:89:d0:9e:c4:
c4:fb:88:ca:e2:05:20:c7:79:e6:38:49:80:d8:ea:
0b:5c:89:d0:5c:61:f4:0e:26:f1:9d:18:ac:c4:e9:
00:25:34:da:8c:a9:2b:30:2e:02:bc:4e:98:a3:5f:
00:04:9f:20:20:a6:5b:8c:9a:14:28:7c:5c:f9:eb:
c7:c9:b8:65:87:c8:59:70:1b:d9:4e:6e:11:cd:d4:
e3:40:8e:da:7e:e4:71:21:b0:ec:99:d9:58:24:93:
5e:dd:5d:ff:81:59:b3:5c:d4:ac:aa:9c:49:43:64:
3d:2c:bb:bd:a5:27:12:76:cb:df:2b:50:e3:17:a4:
f1:00:fb:8b:f4:b7:d5:61:27:82:66:fb:81:ec:be:
f4:77:9a:d9:cf:12:55:56:9d:c2:2c:e4:29:42:d0:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:60:F0:EA:F3:59:DD:89:5D:73:F9:3A:AC:4B:7B:B7:8E:B0:50:20
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:11:45:a8:44:51:a9:fe:cb:1e:8a:63:aa:9a:55:46:83:e6:
01:2d:31:28:b5:4a:c7:c1:66:80:29:ab:9a:06:13:15:59:c2:
98:33:6f:1e:02:b6:50:71:d0:e4:00:01:91:ea:0c:86:10:58:
7c:14:88:47:f1:6c:e4:83:16:ae:c2:ed:59:2b:00:5b:88:5c:
af:81:e9:9f:f4:da:f1:b2:f1:6d:a2:f7:4d:25:4d:3d:17:ea:
2b:33:11:85:a6:f2:4a:64:7b:16:87:e3:db:80:f0:6d:5d:9e:
38:b9:4e:cb:ba:6c:22:92:92:2a:c9:31:e2:bf:a0:38:f2:a2:
35:98:ed:3c:37:fe:31:3f:27:2e:58:6c:75:f1:5a:42:70:98:
e6:2b:47:ca:26:53:da:a9:8b:46:a6:ba:68:72:de:6d:1c:67:
77:5c:af:56:2c:df:e9:c3:30:f3:87:8e:9b:9a:dc:4e:d6:a6:
6b:6c:ff:e5:ba:1c:30:8f:90:76:2c:36:92:87:13:f6:f4:33:
b9:50:83:d3:a1:8b:c5:b2:47:aa:6d:6b:87:b4:82:12:34:67:
97:ae:26:7b:4c:dd:ee:c8:80:a0:4f:71:d0:97:60:c9:44:88:
ec:d7:77:b1:0d:b1:a1:f5:29:f8:59:02:e1:9e:e9:69:76:f8:
f9:54:d6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:17 2025 by rpki-client