Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
File: QIS7AapYrpSxMg_UvkIT-TFOkFY.mft (raw, json)
Hash identifier: 7Uzpn4C283j0tLKqwNJHOCQl72gSa2xlJzCCmoPGpeQ=
Subject key identifier: 4B:56:EA:C3:7E:3D:2E:A8:33:E1:66:40:49:F4:8D:3E:AC:50:A5:0F
Authority key identifier: 40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
Certificate issuer: /CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Certificate serial: 0194BB29813BB2B812F6D09CA51011045570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
Manifest number: 0418
Signing time: Fri 31 Jan 2025 07:00:46 +0000
Manifest this update: Fri 31 Jan 2025 07:00:46 +0000
Manifest next update: Sat 01 Feb 2025 07:00:46 +0000
Files and hashes: 1: QIS7AapYrpSxMg_UvkIT-TFOkFY.crl (hash: GRYekUHWVvgzKiEq8PxtWNWqNMUooC3895XtKGfnXxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:81:3b:b2:b8:12:f6:d0:9c:a5:10:11:04:55:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Validity
Not Before: Jan 31 07:00:46 2025 GMT
Not After : Feb 1 07:00:46 2025 GMT
Subject: CN=4b56eac37e3d2ea833e1664049f48d3eac50a50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:b5:1d:1c:ad:82:f7:4b:41:ea:b8:62:63:
ef:81:44:20:0c:c1:25:91:cc:32:8c:fb:3d:cf:91:
a8:f3:b8:2f:55:4c:e6:44:98:df:7d:6c:be:82:3a:
c3:1e:50:48:c3:ce:ec:b2:1f:9c:0e:68:a8:2d:fd:
37:a7:92:df:79:29:db:09:89:3c:c1:a4:fb:2c:32:
54:cb:52:0c:3b:c5:4d:dd:37:43:62:02:91:8e:84:
97:c9:e5:f7:aa:81:10:82:02:0e:e9:15:12:1e:86:
85:ae:45:5d:e3:57:29:b9:dc:d0:f3:3d:b4:8c:f6:
8b:83:ec:85:48:9a:cd:86:42:53:e0:80:cf:a7:7c:
39:76:e4:13:d2:86:b7:db:bb:eb:08:43:50:c8:b9:
bd:1a:c6:a1:ad:a4:f1:0f:af:e0:4c:16:fe:35:bb:
45:19:73:b5:4c:23:72:45:73:5f:5c:19:e7:26:4d:
b0:c5:cd:d5:46:55:0a:b4:9e:fc:6d:da:22:5d:16:
91:70:be:e4:c6:fa:ba:a9:4c:a1:e7:56:dc:0a:b1:
ae:1d:60:63:82:25:c3:08:0a:ea:83:f6:1c:77:80:
a3:8b:3f:4d:db:74:de:bb:04:fb:73:37:c7:58:e6:
cd:60:fc:42:31:d1:03:72:3b:cb:3a:0f:8c:ae:13:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:56:EA:C3:7E:3D:2E:A8:33:E1:66:40:49:F4:8D:3E:AC:50:A5:0F
X509v3 Authority Key Identifier:
keyid:40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6c:a2:7c:b7:dc:85:0e:be:63:c2:7e:58:f2:b9:56:7d:7a:
92:b0:ab:45:17:f6:7c:15:f3:45:8d:e8:59:10:fa:a5:c9:05:
3c:a3:8e:5d:11:11:ae:33:bb:99:44:ac:23:46:3d:f6:b5:b6:
24:c8:97:6d:d6:c6:98:de:52:c1:92:b3:26:04:de:20:b3:10:
71:85:8a:4e:c0:97:6f:a0:1c:5f:e6:f0:8f:9c:4c:bf:b0:45:
85:43:bd:61:bc:ff:f1:f7:58:cc:62:74:49:8f:4a:3f:46:1a:
e4:e4:c6:2d:43:71:b4:64:e7:5d:d7:81:f0:55:63:35:b7:94:
59:77:0c:47:7d:95:9e:de:3e:6e:24:96:8a:0b:26:59:51:ab:
d3:6e:50:e8:00:70:35:69:ba:40:55:28:a6:13:4a:cb:ba:76:
44:40:ff:64:af:43:ba:ac:19:d8:ea:84:7b:82:8d:12:75:57:
6a:31:2a:4b:22:69:45:59:89:e0:ba:46:7a:d6:d9:ba:e8:6c:
c1:c2:74:83:37:9d:32:bb:8f:f7:a9:86:a5:a5:bc:63:79:77:
6a:43:39:b7:97:8b:62:52:0f:7e:e8:03:90:01:09:30:1b:74:
0d:c6:69:80:1a:6f:67:fe:57:35:2b:03:56:bb:50:f6:44:87:
dd:de:66:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:34 2025 by rpki-client on console-fra.rpki-client.org