Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier: ufYz8+9eZOc53US49y9vluUwllgxaEm90jS6XHMN/Wo=
Subject key identifier: 89:1F:CC:AD:2A:6B:F6:72:18:68:AD:FB:28:2D:BB:EF:10:58:8D:37
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 019511A308E54B4FF6015C62BABC20AAD911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number: 0865
Signing time: Mon 17 Feb 2025 02:00:51 +0000
Manifest this update: Mon 17 Feb 2025 02:00:51 +0000
Manifest next update: Tue 18 Feb 2025 02:00:51 +0000
Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: QYp4pEm7Tiq7tY8P5WVq2vh0PUZ+FY6VFg+A0u4ohsE=)
2: Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa (hash: q2i0iB2Ep81QHqaDB0CnMDZLGuww93ap90YlQXqqvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:08:e5:4b:4f:f6:01:5c:62:ba:bc:20:aa:d9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: Feb 17 02:00:51 2025 GMT
Not After : Feb 18 02:00:51 2025 GMT
Subject: CN=891fccad2a6bf6721868adfb282dbbef10588d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:d1:01:bd:6b:3a:0f:ed:d2:c2:e1:62:bc:
0f:8f:e4:84:cb:23:76:a3:86:15:48:4a:71:29:f4:
69:bd:db:7f:37:08:6c:aa:96:41:39:b9:82:cc:25:
e1:3a:4d:2b:31:9e:3d:3a:be:a7:90:81:53:e0:7c:
85:f8:d5:e7:c3:8e:63:72:fa:11:34:90:6c:e4:52:
2b:91:01:8a:a1:9c:7e:68:17:f5:e5:cd:a6:6c:10:
bb:d5:34:66:b6:fc:8f:f1:61:74:68:b3:a4:83:80:
57:6a:ea:f9:87:3e:83:5e:fb:07:9f:8e:8a:aa:88:
34:4c:22:8f:4f:81:7d:fb:e6:6a:5e:1b:6c:0d:27:
fa:91:88:0f:b9:09:16:43:82:6c:b2:09:27:85:58:
a7:ed:b3:59:0a:54:58:de:2f:d3:2f:4c:8a:73:50:
71:de:1a:86:d2:0a:63:16:7a:3a:cf:5c:3a:0a:30:
11:de:6d:5f:ad:1f:51:15:50:4e:e8:9e:73:df:9b:
02:74:41:ad:46:2d:2b:dc:de:02:ae:bd:b9:ba:c2:
a2:6c:29:59:2a:c7:27:33:b4:91:3b:ee:22:8e:bc:
68:3d:4b:80:2b:67:b2:33:52:c0:60:01:d0:33:45:
67:f6:31:2e:d1:c3:12:88:9d:1a:af:73:57:8a:18:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1F:CC:AD:2A:6B:F6:72:18:68:AD:FB:28:2D:BB:EF:10:58:8D:37
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:50:4a:83:5b:ad:4f:54:e7:30:8a:8f:b5:2d:35:dc:15:72:
10:0e:b0:af:83:f6:80:6c:c0:bb:33:d0:27:70:8a:aa:c8:48:
7f:2d:c0:b5:03:97:c2:a4:b4:10:0d:89:af:e0:33:79:35:d0:
50:20:13:04:ff:63:ac:02:7e:90:34:28:19:22:7e:3d:39:67:
1f:d9:a9:d7:6a:8e:71:cc:65:cc:89:ff:52:91:70:9f:5c:38:
39:ba:39:68:9f:49:c3:e0:25:2a:09:1d:14:40:16:b1:88:6b:
a1:24:e8:5f:65:84:e9:90:8f:84:c0:e5:e1:c3:4e:1f:ab:b7:
4c:4d:42:25:c5:62:fd:b3:39:e6:dc:91:90:0e:8a:6c:b9:7f:
53:d6:ae:f3:26:f5:3e:23:b1:bf:a8:b7:db:c4:6f:40:b1:65:
a9:60:5d:8e:a7:60:72:7e:9f:88:ff:2d:44:ed:2c:b2:f5:bd:
8e:27:99:05:6b:19:3a:a6:7b:bb:52:13:1c:0f:84:59:39:0c:
da:c8:07:67:89:4a:3f:7c:35:05:58:30:73:68:0d:ab:4f:6e:
3f:ad:e8:49:f8:d6:f0:48:8e:59:5e:32:30:d3:54:fa:fc:03:
c4:7c:21:e8:55:50:6b:33:41:97:77:57:f7:40:72:d9:23:75:
9c:55:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:36 2025 by rpki-client