Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
File: qZPrBqu5jUolXPsrMjpl88T3G60.mft (raw, json)
Hash identifier: vOzTr6Ah1CKR+eAnWzwG7dHZD5SSqYBxQpTWtXzFnUs=
Subject key identifier: 0E:7A:71:5A:7F:E4:AA:66:A7:ED:4C:D6:94:B9:C3:C7:0C:46:80:8E
Authority key identifier: A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
Certificate issuer: /CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Certificate serial: 0194BB2925F68C35A7375D7978F98E4A47CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
Manifest number: 0706
Signing time: Fri 31 Jan 2025 07:00:23 +0000
Manifest this update: Fri 31 Jan 2025 07:00:23 +0000
Manifest next update: Sat 01 Feb 2025 07:00:23 +0000
Files and hashes: 1: qZPrBqu5jUolXPsrMjpl88T3G60.crl (hash: F8OExBjEo/s16NwSbqNkasHLd5TByE0lnYPd3nEi72k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:25:f6:8c:35:a7:37:5d:79:78:f9:8e:4a:47:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Validity
Not Before: Jan 31 07:00:23 2025 GMT
Not After : Feb 1 07:00:23 2025 GMT
Subject: CN=0e7a715a7fe4aa66a7ed4cd694b9c3c70c46808e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:5e:c6:c3:44:dd:4c:91:8f:5d:48:a7:42:
19:01:1f:42:bd:3d:c3:eb:0a:90:a9:7c:b2:20:55:
f5:e6:3c:54:1e:2e:be:91:6c:a7:04:c5:a6:23:0c:
c7:c4:6e:de:ae:fb:f7:ab:c9:18:c3:c9:e8:32:43:
08:91:09:05:12:c1:0d:5a:5a:b7:90:10:18:3e:c7:
70:af:fd:d6:e3:15:ca:29:60:07:88:9e:2c:b7:25:
13:9a:cd:48:28:3a:02:b2:49:98:e2:7d:9b:01:6f:
ea:44:07:7c:80:a5:bf:45:4a:66:07:bd:d0:91:72:
27:55:3b:36:cd:98:ac:a5:b6:25:fe:b6:9a:3e:f3:
67:23:83:63:53:6e:87:3c:e2:45:e5:26:01:35:96:
84:ef:b9:c5:9f:80:06:4f:93:22:fd:a8:b2:b9:73:
98:29:3a:d6:9c:3f:12:03:80:a2:64:f5:40:a4:58:
fe:5b:99:72:73:6c:07:90:76:eb:d9:b7:f2:d9:32:
77:d0:b4:90:3b:aa:72:b0:35:15:ad:a9:1e:05:62:
84:7a:65:36:87:3a:6b:2f:e9:1b:c2:51:1b:3c:cf:
6e:1c:24:ef:ef:78:83:3a:7b:6b:41:51:bc:f2:00:
27:79:24:1c:59:6f:cb:90:dd:56:0a:28:65:d4:fd:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7A:71:5A:7F:E4:AA:66:A7:ED:4C:D6:94:B9:C3:C7:0C:46:80:8E
X509v3 Authority Key Identifier:
keyid:A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cb:2c:be:84:88:ec:02:58:ad:bb:89:ac:33:0c:ae:30:f4:
08:61:e1:b2:c2:a8:ce:ca:4b:0b:ac:e4:f9:2e:d4:c8:6c:15:
0f:6d:7b:84:9e:05:ba:a4:e1:dc:d4:80:b1:f8:aa:85:94:92:
cf:11:8e:2d:5d:03:55:3b:09:76:b2:c9:06:62:ce:fd:6e:29:
4a:5c:d8:9a:1d:63:33:3f:08:3a:e2:68:3f:0c:8f:dd:60:86:
85:66:2e:ac:fb:35:c3:03:6d:32:79:71:2e:77:e2:09:bf:07:
46:9a:93:ae:1e:97:56:2b:be:62:a2:70:4d:49:3a:12:5f:ca:
ef:44:a3:f2:e5:af:45:05:b1:71:a8:54:03:c6:c2:10:6a:3a:
99:ae:24:f1:a5:e5:e4:35:41:51:af:21:02:f3:54:69:d0:8f:
60:0a:32:0c:3a:95:58:de:a9:e1:92:8f:69:62:ff:bf:a4:ce:
dd:09:3a:12:ed:5c:ab:09:2b:b8:08:01:d4:43:5e:04:9a:e8:
dd:b2:cc:b3:3a:03:c9:b8:78:d0:05:a4:ee:b1:84:9f:c1:f4:
b7:7b:65:89:0a:6d:1e:ab:ac:eb:53:98:7d:27:c7:c0:8f:f9:
cb:06:a7:32:e0:18:a3:3a:3e:b7:1c:67:2d:4f:ad:6e:3d:f1:
6f:ba:ae:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:31 2025 by rpki-client on console-fra.rpki-client.org