Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
File: Q5p_k_yoCMgtJvv-D94bloz26NM.mft (raw, json)
Hash identifier: PFRZNdEBo8tXa6RaS8ThiRJYj3hcnWpqp8ZfPylCCCA=
Subject key identifier: 60:35:45:D8:35:E6:5D:60:92:84:F4:E1:F2:7B:46:D9:00:79:BB:7E
Authority key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
Certificate issuer: /CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Certificate serial: 019510FDAEB7D3706422FCCCFA3ACAC7F4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
Manifest number: 0676
Signing time: Sun 16 Feb 2025 23:00:15 +0000
Manifest this update: Sun 16 Feb 2025 23:00:15 +0000
Manifest next update: Mon 17 Feb 2025 23:00:15 +0000
Files and hashes: 1: O9UxuLNdjVpPMRVJ8_xamVbi3ck.roa (hash: w7PnuXi3vgOvtTP6oScaXCDqYyS0FwVpkDFtt58ndZ4=)
2: Q5p_k_yoCMgtJvv-D94bloz26NM.crl (hash: lYDpxSPdXh/s0eVMgQdz1Ly0kde4tVoxts4SHiGpTQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ae:b7:d3:70:64:22:fc:cc:fa:3a:ca:c7:f4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Validity
Not Before: Feb 16 23:00:15 2025 GMT
Not After : Feb 17 23:00:15 2025 GMT
Subject: CN=603545d835e65d609284f4e1f27b46d90079bb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:23:43:37:b2:0b:ee:0e:5e:b2:0d:c5:e4:
b9:b6:96:e5:6d:75:30:d5:97:e2:2b:5d:b0:e7:7d:
5a:9c:7e:d7:24:ab:a8:55:15:ff:cf:ab:c8:c2:35:
14:f0:6d:84:ae:76:2b:1e:32:39:76:41:95:12:b9:
86:fb:7a:fa:db:6e:f6:ee:9c:85:36:67:5a:71:11:
0a:bf:be:4e:ea:33:1a:ee:95:4a:4d:1e:b7:f6:13:
55:ed:b9:3b:e7:2c:27:8d:6d:34:43:84:49:0b:a6:
70:26:f0:49:48:63:4b:ee:bd:02:1b:9b:65:64:18:
6d:d7:f0:8e:9d:7e:19:d6:f5:cd:d3:88:85:18:21:
b7:1b:38:cb:65:44:c7:b3:75:86:1d:a3:a4:6a:f7:
92:1b:41:75:b1:c7:56:9c:50:88:30:3a:d8:09:00:
61:82:39:71:67:84:96:6f:fe:54:5f:d7:80:4d:07:
ef:b6:92:50:2a:a0:50:cc:78:16:b6:aa:01:38:61:
78:87:5d:ef:10:c5:98:ff:9f:ef:e2:f0:9e:40:b9:
99:12:c4:75:62:d1:8d:59:11:cf:06:55:54:92:27:
73:49:5e:34:f1:46:9f:bb:b9:53:0d:df:2c:4f:d7:
f9:51:84:ec:d9:a4:4b:92:40:43:84:92:90:1d:d2:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:35:45:D8:35:E6:5D:60:92:84:F4:E1:F2:7B:46:D9:00:79:BB:7E
X509v3 Authority Key Identifier:
keyid:43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:41:ef:b8:9d:0a:e7:3a:09:eb:bf:65:2b:b2:2c:19:bc:24:
6a:43:00:bb:cf:86:44:ae:e3:59:86:49:44:2f:e4:18:39:51:
54:b8:08:f8:e4:5d:ce:b5:d7:8f:d7:c6:25:e1:72:f8:70:33:
d2:c5:8c:0a:81:95:eb:bd:97:63:53:61:91:61:96:a6:7b:34:
c5:40:27:71:a0:6e:67:b4:a2:c9:b0:43:b5:ae:8b:50:e6:70:
98:06:f8:0d:21:84:50:31:99:e8:7b:e3:13:7e:9e:e9:76:c2:
5c:a6:86:26:04:11:21:f9:f5:a6:23:36:3d:11:9a:d6:85:49:
cb:60:2f:65:ea:81:ea:0a:a0:b5:3b:07:fa:1a:ce:0b:98:e0:
82:85:21:cf:ac:70:95:cb:99:7e:24:eb:1f:0f:bf:05:19:b2:
9a:b5:fe:a3:ee:76:ab:13:b7:de:47:dd:02:42:5e:54:7e:fc:
0d:78:99:6e:51:75:dc:0f:c3:d7:37:ce:90:69:49:27:d7:fa:
2f:4e:ab:bd:43:52:5f:39:55:e9:96:a7:3a:4f:71:13:d8:aa:
71:db:12:7a:65:15:2b:fe:20:87:73:6d:69:bf:3e:12:c3:25:
51:22:ca:a6:25:a9:29:b1:af:fc:62:dd:ee:8a:72:61:3d:aa:
66:33:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:49 2025 by rpki-client