Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: Uxnqqm0rtt03gE4s7ggHohmG8EmtaRsfuug/0hqEI5c=
Subject key identifier: AA:24:EF:C7:4C:D3:26:12:D6:BE:B3:5C:B9:14:F8:2E:56:B9:62:BE
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 0192102A7A5C5FCE757F6B6B3FB2F57AC95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 12C5
Signing time: Fri 20 Sep 2024 16:01:12 +0000
Manifest this update: Fri 20 Sep 2024 16:01:12 +0000
Manifest next update: Sat 21 Sep 2024 16:01:12 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: QyOaxP2A8jc6ixNJb4oJxhqljIFtRuKU4/LjsyLuBZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:10:2a:7a:5c:5f:ce:75:7f:6b:6b:3f:b2:f5:7a:c9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Sep 20 16:01:12 2024 GMT
Not After : Sep 21 16:01:12 2024 GMT
Subject: CN=aa24efc74cd32612d6beb35cb914f82e56b962be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:85:ca:98:fc:e4:10:6d:71:4e:d2:c6:fb:
9c:ac:cf:06:e6:12:2c:d8:9d:b5:c4:fa:1a:c0:ef:
f4:42:c0:cf:f1:02:3f:6f:31:8d:78:3d:bd:8a:32:
0e:73:2d:3e:34:36:27:c4:ad:54:1a:ae:80:04:13:
37:38:98:76:be:94:e8:f0:72:5e:f6:90:ea:5c:19:
e4:66:51:1b:fb:fe:2b:b2:1e:f1:32:d6:c7:da:87:
1c:f1:ac:71:c6:8f:96:a9:7b:5a:79:f8:14:f7:39:
41:bb:37:f7:42:6b:db:67:1b:e9:a3:be:0b:09:10:
b7:88:17:f7:f9:e6:8d:6c:de:76:0c:42:b8:6e:74:
55:31:f6:f7:63:1d:0a:cd:21:10:75:78:a3:09:16:
ec:de:2f:db:ce:2e:6e:cc:ff:19:79:e5:89:42:2f:
8f:9e:e0:19:c1:24:fc:51:4d:c8:b7:06:1d:8e:97:
3b:c7:4e:61:66:e5:65:d5:e8:f2:99:5b:18:71:15:
10:02:a0:25:ba:c8:67:59:8b:60:66:c2:c4:fd:60:
2b:ab:16:7d:bf:18:16:3a:43:4d:4d:5f:74:30:3c:
c9:71:b1:87:5c:5e:ca:8f:ec:f1:b1:98:37:67:66:
b6:33:90:e3:72:4e:28:72:46:d6:6e:ab:d3:1c:14:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:24:EF:C7:4C:D3:26:12:D6:BE:B3:5C:B9:14:F8:2E:56:B9:62:BE
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:87:69:bf:5c:15:00:92:96:37:f0:cc:82:99:c0:d6:6f:26:
62:ca:ee:87:93:2d:ed:8a:3a:bf:50:fd:15:7d:29:b2:47:73:
5a:7e:05:29:87:22:d5:86:df:bd:9f:a2:05:0b:e2:82:c9:46:
c5:c3:26:2a:89:ef:db:1a:23:c5:92:a8:37:16:e2:b4:b0:ae:
0f:ba:6d:ca:c5:4c:07:3a:4c:1a:be:b8:69:0a:1d:d6:44:09:
c3:e0:44:7a:20:79:12:a8:e6:8f:9d:41:34:72:dc:09:76:0a:
b7:ae:ab:8b:9b:57:8d:40:a7:7a:b9:49:bd:f5:ca:c1:59:30:
29:4e:d7:ed:2c:9b:08:f4:e6:0b:70:2e:3b:ae:5d:cb:e5:d8:
c0:ec:41:71:6c:5a:10:2c:9c:16:6c:ec:05:1c:3d:c6:76:e2:
57:be:77:63:a0:48:82:e3:2a:7a:89:e5:41:77:c3:e9:fb:16:
c8:a6:cb:7c:7b:cb:c5:01:0a:db:ca:4b:f7:5e:89:9d:ca:7b:
8f:b0:15:41:66:19:f0:09:55:c6:61:02:bd:12:9b:70:d6:62:
1d:47:bf:32:9b:d2:5a:a5:eb:9b:47:15:a3:ce:7a:e2:ea:6a:
07:d4:45:69:54:50:79:81:c0:01:a2:67:cc:e9:3f:b7:fa:4f:
4e:ef:d1:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIQKnpcX851f2trP7L1eslcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxN2VkNDFmMGFkZmRmMTlhNzE2MTRlMzkwNGMwZjA4NDk5
NzkyNTAwHhcNMjQwOTIwMTYwMTEyWhcNMjQwOTIxMTYwMTEyWjAzMTEwLwYDVQQD
EyhhYTI0ZWZjNzRjZDMyNjEyZDZiZWIzNWNiOTE0ZjgyZTU2Yjk2MmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNGFypj85BBtcU7SxvucrM8G5hIs
2J21xPoawO/0QsDP8QI/bzGNeD29ijIOcy0+NDYnxK1UGq6ABBM3OJh2vpTo8HJe
9pDqXBnkZlEb+/4rsh7xMtbH2occ8axxxo+WqXtaefgU9zlBuzf3QmvbZxvpo74L
CRC3iBf3+eaNbN52DEK4bnRVMfb3Yx0KzSEQdXijCRbs3i/bzi5uzP8ZeeWJQi+P
nuAZwST8UU3ItwYdjpc7x05hZuVl1ejymVsYcRUQAqAlushnWYtgZsLE/WArqxZ9
vxgWOkNNTV90MDzJcbGHXF7Kj+zxsZg3Z2a2M5Djck4ockbWbqvTHBTmAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKok78dM0yYS1r6zXLkU+C5WuWK+MB8GA1UdIwQY
MBaAFEF+1B8K398ZpxYU45BMDwhJl5JQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lNWNjNTgtYWMxOC00ZTBkLWJmOTEt
NmVhODkxZThjZmM3LzEvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lNWNjNTgtYWMxOC00ZTBkLWJmOTEtNmVhODkxZThjZmM3
LzEvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeodpv1wV
AJKWN/DMgpnA1m8mYsruh5Mt7Yo6v1D9FX0pskdzWn4FKYci1YbfvZ+iBQvigslG
xcMmKonv2xojxZKoNxbitLCuD7ptysVMBzpMGr64aQod1kQJw+BEeiB5Eqjmj51B
NHLcCXYKt66ri5tXjUCnerlJvfXKwVkwKU7X7SybCPTmC3AuO65dy+XYwOxBcWxa
ECycFmzsBRw9xnbiV753Y6BIguMqeonlQXfD6fsWyKbLfHvLxQEK28pL916Jncp7
j7AVQWYZ8AlVxmECvRKbcNZiHUe/MpvSWqXrm0cVo8564upqB9RFaVRQeYHAAaJn
zOk/t/pPTu/Rkg==
-----END CERTIFICATE-----
Generated at Fri Sep 20 21:11:25 2024 by rpki-client on console-ams.rpki-client.org