Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier: jF3YhA4v+WAqZKdpJGKj0lzaAYWbRKNWJBG1vo587NM=
Subject key identifier: F3:C6:D2:13:9C:DF:58:C3:AF:49:25:78:0D:20:55:47:58:04:D3:8A
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer: /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial: 0194BA84551D08F86517EA09BDB6D5973BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 04:00:22 +0000
Manifest this update: Fri 31 Jan 2025 04:00:22 +0000
Manifest next update: Sat 01 Feb 2025 04:00:22 +0000
Files and hashes: 1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: kgUBXNxVZ/3uwYW5NWDoYzu1b2XvLKCWoFELxpZOklI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:55:1d:08:f8:65:17:ea:09:bd:b6:d5:97:3b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Validity
Not Before: Jan 31 04:00:22 2025 GMT
Not After : Feb 1 04:00:22 2025 GMT
Subject: CN=f3c6d2139cdf58c3af4925780d2055475804d38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:1a:42:74:5a:a8:2b:3d:26:a6:d4:a6:7f:
10:bf:89:6f:f0:ce:a5:5c:bd:f2:4a:08:97:47:1c:
4d:a6:b1:b6:5b:d7:01:85:20:c2:d0:63:43:18:f7:
6e:9b:ec:f0:3d:66:30:93:0e:7c:59:2c:df:1f:f4:
07:21:a2:14:05:7a:11:48:ab:0a:ce:bd:b3:2b:db:
4c:bf:28:17:69:9b:39:4d:2f:4f:80:e6:02:a5:0b:
eb:de:9b:a6:86:c5:9e:ec:e7:dc:60:13:15:16:8b:
cb:f4:e9:22:8e:e4:65:8d:e8:7f:de:74:09:ff:c1:
3d:5e:5d:6a:ef:a3:75:94:49:df:4f:bf:a8:46:33:
92:77:58:9b:b3:27:dc:97:ff:cf:06:6b:6c:01:73:
0d:c1:6b:54:5a:4f:87:1a:c1:71:b9:57:56:74:bb:
2b:13:18:5c:cf:88:8c:bc:f2:0f:28:0e:63:6a:8f:
73:c1:48:8b:3f:83:57:0f:80:f9:15:44:17:c7:bf:
14:69:28:e5:bf:82:18:2f:17:4f:2a:6c:85:a3:27:
53:2d:dd:1c:b1:fe:6f:a1:50:7e:d6:a7:c3:81:27:
90:00:40:ca:40:b4:86:20:15:9d:2d:af:f5:78:54:
74:65:71:1e:b6:88:a0:47:f0:ef:52:20:71:b8:c7:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C6:D2:13:9C:DF:58:C3:AF:49:25:78:0D:20:55:47:58:04:D3:8A
X509v3 Authority Key Identifier:
keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:25:9b:88:8c:c2:c0:3c:a3:85:6d:51:19:74:8e:25:6a:bd:
48:75:a2:99:a4:51:5e:bd:07:d5:7e:1d:88:06:ea:ca:e1:51:
7c:2f:6b:85:a4:b9:17:13:9f:99:d0:01:1f:f8:d6:8d:c9:99:
d5:24:52:16:7c:9f:39:a8:a2:d0:38:2f:57:2a:57:26:e2:52:
44:85:d2:70:11:a2:19:b1:d8:cb:21:63:c6:bd:17:55:12:6c:
79:ad:cf:fc:ee:e2:ad:75:62:b0:9d:f2:0f:85:1e:f6:d7:56:
90:ec:a2:0a:e0:88:11:64:cc:e6:dd:c0:2b:cc:57:9c:e5:93:
ff:8f:c8:0d:11:3d:4f:bd:ad:8d:c0:18:b1:7c:3e:0e:06:0a:
e3:68:ac:37:fc:a9:af:6d:c2:8c:b6:0a:5d:6a:85:fe:3a:ef:
28:cd:8e:f5:bb:dd:5a:60:05:b2:b2:00:fb:6e:89:b1:ec:0c:
8a:4b:4f:ec:2c:47:54:9c:96:15:1c:b8:2e:d5:9f:92:d0:34:
1e:1e:e0:ee:a7:f5:d6:fb:1e:e8:04:f3:f9:bc:fd:a3:4f:1f:
ce:08:f0:0e:c6:5b:c5:f7:b6:62:6a:c4:64:7c:4e:ad:ca:51:
8d:0a:76:22:49:e3:3a:62:67:8c:17:ae:2d:83:2c:b0:19:c1:
4f:aa:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:14 2025 by rpki-client on console-fra.rpki-client.org