Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/198eca-b029-428c-b1c9-a04823cefc64/1/QDxEw1yTwSM_BWMIwgNOcTDrmjc.mft
File: QDxEw1yTwSM_BWMIwgNOcTDrmjc.mft (raw, json)
Hash identifier: m9LyrBjiTEZc+CZA2jtYnLHUVx+0siPHsmFUsght8Ig=
Subject key identifier: BB:F5:F8:CE:8E:70:34:23:1E:C6:3F:15:8F:FE:78:99:EA:F2:0C:8B
Authority key identifier: 40:3C:44:C3:5C:93:C1:23:3F:05:63:08:C2:03:4E:71:30:EB:9A:37
Certificate issuer: /CN=403c44c35c93c1233f056308c2034e7130eb9a37
Certificate serial: 0194BB29AE1A24A29849118A8E84EA134A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDxEw1yTwSM_BWMIwgNOcTDrmjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/198eca-b029-428c-b1c9-a04823cefc64/1/QDxEw1yTwSM_BWMIwgNOcTDrmjc.mft
Manifest number: 01E8
Signing time: Fri 31 Jan 2025 07:00:58 +0000
Manifest this update: Fri 31 Jan 2025 07:00:58 +0000
Manifest next update: Sat 01 Feb 2025 07:00:58 +0000
Files and hashes: 1: QDxEw1yTwSM_BWMIwgNOcTDrmjc.crl (hash: u+SfdyLKWxNM5iKsn3ojQjE9FG7i5/1E1d2nXSM7Pnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/198eca-b029-428c-b1c9-a04823cefc64/1/QDxEw1yTwSM_BWMIwgNOcTDrmjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/198eca-b029-428c-b1c9-a04823cefc64/1/QDxEw1yTwSM_BWMIwgNOcTDrmjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDxEw1yTwSM_BWMIwgNOcTDrmjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:ae:1a:24:a2:98:49:11:8a:8e:84:ea:13:4a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c44c35c93c1233f056308c2034e7130eb9a37
Validity
Not Before: Jan 31 07:00:58 2025 GMT
Not After : Feb 1 07:00:58 2025 GMT
Subject: CN=bbf5f8ce8e7034231ec63f158ffe7899eaf20c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:aa:37:c1:34:8e:66:44:20:ca:58:58:5b:
de:80:8c:ab:c7:94:78:95:03:8e:fb:1f:ae:ed:61:
4d:a5:a7:cd:11:36:50:a7:8f:b8:85:e1:5f:34:b8:
49:20:74:f8:0b:4d:30:27:ec:7d:87:f5:24:02:5d:
b2:aa:bd:64:4a:2c:5d:c2:ef:2a:2f:db:e3:ce:9c:
86:dc:76:4a:48:d3:0b:b3:bd:b7:18:cf:65:04:a4:
4a:d5:38:84:e3:95:eb:16:b0:23:d7:b6:f5:c8:69:
0c:c3:2e:02:88:09:b8:99:28:79:d7:7b:fc:87:b1:
26:f4:fd:1d:cf:03:db:10:5b:f6:4b:17:ea:ec:56:
81:17:e3:ed:e3:a9:2d:e7:fe:3c:39:ae:a9:44:81:
56:64:9c:96:96:eb:64:dc:c7:39:43:01:b1:92:96:
84:a7:7f:49:68:b4:76:80:72:8a:a4:06:ff:54:10:
e9:61:90:19:cd:d2:aa:3d:27:46:2b:7c:55:40:51:
e7:be:4f:7b:ac:dc:5d:68:8e:b3:06:66:79:b3:2d:
c3:d7:23:7d:65:87:18:3b:00:da:a0:01:f3:b4:79:
0c:42:2d:18:fe:f1:af:ae:9c:ec:c5:c9:eb:3c:4a:
9d:85:71:23:25:d3:58:d2:cd:2c:0c:6e:d1:a7:35:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:F8:CE:8E:70:34:23:1E:C6:3F:15:8F:FE:78:99:EA:F2:0C:8B
X509v3 Authority Key Identifier:
keyid:40:3C:44:C3:5C:93:C1:23:3F:05:63:08:C2:03:4E:71:30:EB:9A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDxEw1yTwSM_BWMIwgNOcTDrmjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/198eca-b029-428c-b1c9-a04823cefc64/1/QDxEw1yTwSM_BWMIwgNOcTDrmjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/198eca-b029-428c-b1c9-a04823cefc64/1/QDxEw1yTwSM_BWMIwgNOcTDrmjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d5:b2:0d:9d:dc:0b:31:a6:f9:1b:d0:95:71:c7:e8:da:0c:
8e:08:36:d2:a6:7c:9d:e7:34:cd:7c:2e:02:69:57:33:bc:73:
64:63:dc:cc:fc:01:38:2c:6f:73:e2:a7:db:a7:06:09:f6:3e:
c0:6e:14:9f:59:b2:e9:45:e7:49:ba:78:04:d7:6c:b9:bf:4a:
fb:54:34:18:8f:01:71:56:d7:a2:f9:dc:64:ba:a7:71:d8:4c:
da:77:ba:e3:1d:71:db:d8:f8:c8:95:f5:4e:e6:83:69:71:b5:
06:10:4a:6c:a5:53:93:bd:a6:8a:b1:5e:07:54:d0:6b:40:40:
16:b3:4b:13:6f:82:c6:ec:54:32:d1:e7:b4:c8:39:2f:66:bf:
a2:37:41:3e:d8:8e:cc:40:83:70:b1:01:61:f6:6b:8b:bf:25:
cf:b5:00:69:50:ab:04:3d:6d:56:7f:2b:d6:2f:85:46:ab:ba:
e8:c0:14:15:3c:84:d7:1c:5e:f0:a6:cf:29:b8:d1:57:4e:4e:
14:d8:85:30:df:bb:96:21:34:fb:1f:13:f1:f3:85:a9:d0:2c:
08:d7:f1:93:77:a2:7e:fd:ff:78:68:e6:9f:81:99:a0:db:e1:
24:3d:9c:8b:7e:2b:0b:20:dc:23:ed:8d:02:b7:26:d4:1e:8c:
86:6e:9b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:10 2025 by rpki-client on console-fra.rpki-client.org