Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
File: QnqV1vkbZ2udcauK4RQZQY3jww4.mft (raw, json)
Hash identifier: dPP3x4TvZw6VC0kAve5HSqSEnuTWbsljMLwP653ykpI=
Subject key identifier: 7F:B3:C4:04:DE:98:D6:C1:03:07:95:F4:C0:EA:A3:9D:C8:42:2C:A0
Authority key identifier: 42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
Certificate issuer: /CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Certificate serial: 0194BA841F6AA9098299FC8147B3443E2FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
Manifest number: 0F58
Signing time: Fri 31 Jan 2025 04:00:08 +0000
Manifest this update: Fri 31 Jan 2025 04:00:08 +0000
Manifest next update: Sat 01 Feb 2025 04:00:08 +0000
Files and hashes: 1: QnqV1vkbZ2udcauK4RQZQY3jww4.crl (hash: inXbBp46rRhO67tH8KeuRT1vlLmUgvN1K+nt3lk9t5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:1f:6a:a9:09:82:99:fc:81:47:b3:44:3e:2f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Validity
Not Before: Jan 31 04:00:08 2025 GMT
Not After : Feb 1 04:00:08 2025 GMT
Subject: CN=7fb3c404de98d6c1030795f4c0eaa39dc8422ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:c6:fa:72:c0:e7:b8:df:41:0d:e8:74:77:
46:05:5d:63:3d:48:8f:15:bc:9a:ff:4d:29:11:1c:
da:24:fc:fc:0f:cd:bd:e0:90:54:0f:31:30:cd:3b:
d4:ff:77:e1:44:aa:af:b5:c6:f7:fb:47:f1:ed:c9:
c7:f4:f5:0e:fb:8b:33:d5:f8:6a:98:dd:60:9c:46:
42:ae:47:15:22:9a:83:a7:f7:3c:51:3e:21:b9:de:
f8:5b:60:3b:99:38:e8:e1:66:11:32:b0:12:bd:29:
54:d7:63:10:c2:ad:90:47:7e:df:ef:e4:db:b5:49:
5b:df:71:91:c8:16:c3:b5:9a:19:dd:19:dd:86:bc:
b4:3e:81:cb:9c:55:9f:55:31:9c:24:f0:0f:5d:69:
47:73:6a:59:5d:ef:8a:ad:43:d0:da:b7:ee:dc:36:
b8:da:84:d4:9e:21:56:46:2a:85:f3:66:7f:8f:93:
ee:e4:8f:c7:fa:01:14:ee:b5:f3:f5:af:2e:08:09:
ac:04:45:6e:1e:b4:1b:32:bd:e4:09:12:69:82:2f:
87:d6:ff:48:ba:ad:8a:6f:ec:1c:30:84:4e:68:b4:
b5:db:8f:fd:66:85:40:1b:ff:89:f0:d2:07:bc:9a:
72:b4:35:84:b2:d8:08:d4:d2:1d:7a:3f:e2:e0:87:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B3:C4:04:DE:98:D6:C1:03:07:95:F4:C0:EA:A3:9D:C8:42:2C:A0
X509v3 Authority Key Identifier:
keyid:42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a4:8b:7f:09:d8:20:bf:44:6d:e4:f2:c2:22:af:e2:d8:01:
83:89:a5:07:5e:80:c3:13:4d:37:e9:3b:3c:2c:f4:e2:0e:75:
b5:d5:fa:b1:91:9c:44:60:8f:9a:5b:4f:f6:39:40:32:f2:12:
fa:a2:73:24:4c:38:78:a7:7a:07:69:64:c0:a6:0d:65:79:d4:
0d:f7:73:8d:a2:9b:bf:81:ce:e4:72:f6:06:1e:01:9b:7a:3a:
f1:78:ad:44:16:9c:73:15:de:ae:d3:32:6b:aa:e8:82:46:4f:
85:fa:dc:3a:f5:fe:5a:d1:72:70:b7:fa:e5:d7:9a:e9:18:25:
83:64:77:67:6f:a5:44:05:e5:53:73:af:85:12:af:6a:fc:12:
63:47:ce:9b:fb:3f:bd:b7:43:f2:74:21:7f:87:20:ef:5a:9a:
93:cf:be:e2:f9:24:42:88:50:c9:73:aa:37:61:37:40:b7:34:
67:c5:b9:06:14:0c:06:4d:24:a3:9d:95:93:71:26:94:aa:cc:
98:50:05:e8:41:8e:f9:91:9f:0b:53:92:3a:05:20:d9:fa:ee:
3e:85:ce:3f:ae:5d:e2:12:d0:b8:4c:ad:30:fa:59:9d:86:22:
11:61:fa:7b:f3:86:55:c7:a7:db:cd:e4:f3:5f:7e:09:02:c8:
f9:10:d4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:02 2025 by rpki-client on console-fra.rpki-client.org