Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier: SnLqsvEfBiIntDGDFiLAT/FqR7jzdGN3kbA4MPTJ8M0=
Subject key identifier: 0B:0C:9D:BC:08:9B:AB:06:1F:1E:65:D7:76:81:10:E8:33:92:4C:C8
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial: 0195116BF9607DCD6EDC17890E607AD23793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 01:00:43 +0000
Manifest this update: Mon 17 Feb 2025 01:00:43 +0000
Manifest next update: Tue 18 Feb 2025 01:00:43 +0000
Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: NaMOiQQ7GBzUrC+9wCx0n7sQ/LGDx0ugfsLhmgh7Q9U=)
2: MJ3Ujpsu932Kq9qToC3uCXh54hU.roa (hash: l3V5KY6EuXVHlgG1l6ReQGHr0W/s/8NEtWYweJ7lAL4=)
3: P_fOQuoMuGlAOPCmfzTnkjBIl1I.roa (hash: 7StdsKvi1Pne8B1xArTjZazqt8/ZqEM0Iq/sVM/3q5k=)
4: hrAYR0420UBtvUw-GSTKs3FQjCk.roa (hash: EUwZ4vaZd8b1hNex2hrQ4tIUkpR7m+MzQOOzSNGo02A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:f9:60:7d:cd:6e:dc:17:89:0e:60:7a:d2:37:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Validity
Not Before: Feb 17 01:00:43 2025 GMT
Not After : Feb 18 01:00:43 2025 GMT
Subject: CN=0b0c9dbc089bab061f1e65d7768110e833924cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:b6:86:93:55:00:8f:cb:1c:da:93:d5:94:
f5:72:28:98:72:59:f3:3a:7e:71:f8:3d:b8:d8:82:
a5:08:e2:4b:99:61:dc:82:02:95:5c:91:d0:eb:85:
72:e4:11:ab:82:5a:86:ad:aa:1b:35:27:8c:74:98:
bf:ff:66:32:83:fb:28:7f:d8:82:70:e2:4f:29:36:
3e:3e:95:d6:e5:5e:ae:31:ce:b3:8f:d6:b6:27:f8:
18:cf:0a:00:d8:f1:06:d5:f2:25:a8:4e:d1:45:e4:
cb:1a:ac:5d:d5:76:e2:95:da:30:9f:8e:b8:0e:cc:
51:e8:e0:3f:b8:d1:f1:ef:47:20:7d:1d:37:3b:43:
a4:2e:0d:e6:07:77:91:97:9c:a3:bf:7f:7e:66:cf:
56:9a:e3:e2:0a:57:91:73:0d:65:1a:b5:29:8a:fe:
dc:ff:bf:a7:c7:d9:0a:82:b9:42:97:a5:4a:d2:03:
42:f1:c9:e8:30:26:c8:4a:98:79:c4:a3:1e:9d:88:
24:15:da:83:f6:de:89:90:28:fa:69:40:bf:36:01:
4d:a1:28:0b:c3:e5:76:06:ae:8c:94:4d:d2:84:89:
1e:87:b4:56:ae:58:3e:c5:5f:dc:0f:74:aa:2d:3f:
ab:78:b9:d2:e1:e4:42:63:7c:81:f0:df:bd:c1:7b:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0C:9D:BC:08:9B:AB:06:1F:1E:65:D7:76:81:10:E8:33:92:4C:C8
X509v3 Authority Key Identifier:
keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:70:fc:e4:21:ed:d0:b6:18:b0:69:70:3a:77:0a:dd:48:4c:
ac:24:e0:fb:59:d7:86:17:d6:7a:33:e8:49:3f:a9:8f:44:10:
29:ef:e0:69:cf:bd:f5:84:76:77:ae:76:8d:87:8e:c3:23:37:
68:13:63:ac:e6:41:80:88:57:02:ff:56:7b:9a:0b:55:02:07:
e6:c8:17:65:ff:99:f5:07:d3:e3:03:7c:4b:65:61:66:bc:ee:
de:8d:c6:53:51:c2:2d:b8:f2:74:95:df:ac:16:46:ef:00:b1:
e4:56:3b:a3:ca:47:2a:94:7e:6b:c1:05:f0:9f:c3:f5:1b:78:
7b:ab:a8:cb:5a:bf:b9:db:3d:e6:26:5a:cb:3f:35:36:e9:ca:
d6:4d:e1:a5:f0:3e:d4:1f:65:b5:a9:39:82:6c:1f:ba:c2:bf:
71:87:b5:d3:8c:9c:9d:62:97:4c:4e:4c:ef:13:cd:bd:ea:6d:
e9:16:5b:bd:ef:41:41:20:71:b2:71:4b:f0:a3:b1:f7:c4:84:
94:a2:57:94:bc:8f:ad:3a:83:c0:05:1f:bc:83:48:e9:f9:7f:
44:34:8a:65:7e:f3:3c:2d:61:08:43:22:bd:3d:7b:cb:da:db:
b6:1a:d2:5f:0b:1e:a7:85:43:d3:b4:75:47:d2:d8:90:0d:dd:
d8:64:51:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:32 2025 by rpki-client