Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json)
Hash identifier: DC8c6Juu+aXEZlnlIOihow+KFCT+v5WNiHR6lQVTyoE=
Subject key identifier: 4B:BE:F5:D5:26:97:18:87:27:11:B1:DF:1E:B2:E4:4E:77:39:CD:11
Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Certificate serial: 0194BABBD6F15573088028BE37092FDFF7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
Manifest number: 0DA5
Signing time: Fri 31 Jan 2025 05:00:59 +0000
Manifest this update: Fri 31 Jan 2025 05:00:59 +0000
Manifest next update: Sat 01 Feb 2025 05:00:59 +0000
Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: r72hHWYzL+ujQk2sbDXlKQ9Wf1vCaTEwQw1lsWvq23I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:d6:f1:55:73:08:80:28:be:37:09:2f:df:f7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Validity
Not Before: Jan 31 05:00:59 2025 GMT
Not After : Feb 1 05:00:59 2025 GMT
Subject: CN=4bbef5d5269718872711b1df1eb2e44e7739cd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:87:bd:06:95:5a:bb:fc:0f:52:1c:c3:77:2c:
e3:70:0c:ef:48:a2:8a:b7:b9:cb:f1:cc:88:e1:d6:
ee:5b:4d:9a:a0:20:3f:90:b5:23:cb:29:f2:e2:4a:
df:2c:72:25:17:65:75:a2:b5:4b:3f:5d:c4:09:89:
65:92:97:35:4d:2c:c5:fb:38:7f:52:ac:40:0b:c0:
cd:d0:4e:17:41:f1:fb:c7:f2:55:8a:64:c7:c7:cd:
8e:63:0b:fe:54:2f:c9:6f:bd:81:51:aa:8f:fd:6f:
7b:57:86:8a:c8:17:0d:a9:2b:6e:1a:bd:81:43:90:
cc:c5:95:3d:7e:24:0e:07:f1:87:c4:22:b2:e9:55:
eb:61:8f:42:ed:a6:1d:dc:85:ce:36:b7:60:5d:d2:
a1:4a:73:35:15:8e:47:17:60:43:28:d4:02:df:c1:
79:b5:8b:21:78:8d:25:b3:0c:fd:03:f0:9b:56:31:
63:cb:a5:83:a9:5b:05:77:89:8e:3a:84:1f:37:6e:
46:5b:5c:7a:43:17:88:38:67:d5:d1:37:61:ad:fd:
fc:88:3f:fe:08:ce:dc:65:83:f8:fa:66:31:53:b8:
3e:20:8b:ec:d8:8f:27:9f:48:77:c3:18:3b:c7:f9:
e5:2e:06:6b:91:08:34:2a:eb:2f:ec:fa:2f:6d:59:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BE:F5:D5:26:97:18:87:27:11:B1:DF:1E:B2:E4:4E:77:39:CD:11
X509v3 Authority Key Identifier:
keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a0:35:28:53:6b:7e:5d:22:eb:26:49:ec:92:c1:f3:0a:12:
9a:da:2c:ca:0d:c7:a4:f4:88:a5:6d:80:5b:b3:48:00:1c:c8:
6e:c6:3c:98:51:89:d5:81:ca:52:f3:05:c8:f0:d4:0d:2d:e5:
a5:9d:ac:78:c3:17:b0:65:0a:3f:a9:e9:ae:5f:df:51:1c:af:
4e:ee:5b:27:f0:9a:aa:9e:89:1e:c2:65:f5:7b:04:5b:e0:ca:
c7:89:a2:0a:a5:73:2b:eb:4d:b6:f5:b7:3b:1a:9b:4e:72:5f:
a1:d2:6a:dc:a9:51:d5:89:12:c3:22:66:49:86:72:ba:50:31:
18:bf:32:92:83:08:31:af:0e:58:28:48:4a:18:c3:2f:3f:2c:
de:60:a2:a7:fc:98:7d:77:fb:8d:52:8a:31:db:94:44:51:51:
1f:ff:c5:c0:c5:65:4f:11:dc:b3:37:d9:f5:4f:be:02:e8:22:
c4:ee:cf:e9:f9:55:9a:15:8f:eb:3a:7e:8c:3f:d6:e7:60:a5:
d3:f3:58:ec:04:51:2c:78:3e:32:cf:38:ea:6e:72:2a:71:49:
67:ba:b0:ce:40:4f:2b:25:cf:ec:63:07:90:43:30:cd:25:33:
83:a3:13:14:6d:6e:99:eb:e7:5b:61:70:bc:fa:97:9b:bd:ea:
b5:80:10:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:11 2025 by rpki-client on console-fra.rpki-client.org