Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: cdu/Lm9/EmlGgn7jLWiH1LiCJ2CEYGdnrgHUxrGQasM=
Subject key identifier: B6:A8:74:B9:E9:B9:0B:D5:18:29:94:C5:64:DB:4B:37:23:C3:44:BA
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 01901E5884DA72A5A7BEA9705029D2863C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 025F
Signing time: Sun 16 Jun 2024 00:00:35 +0000
Manifest this update: Sun 16 Jun 2024 00:00:35 +0000
Manifest next update: Mon 17 Jun 2024 00:00:35 +0000
Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: qQcLQNkk19aBsdkiKmiYckbpTJ6eLrGHeZoU3hXEzfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:84:da:72:a5:a7:be:a9:70:50:29:d2:86:3c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Jun 16 00:00:35 2024 GMT
Not After : Jun 17 00:00:35 2024 GMT
Subject: CN=b6a874b9e9b90bd5182994c564db4b3723c344ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:65:19:25:1c:39:36:bd:ec:a0:28:9c:59:27:
a0:07:29:d0:ab:ff:19:a5:cc:3c:e7:aa:d9:4d:29:
f4:f6:4d:8c:55:d1:9e:2c:0b:17:22:07:6d:b5:e6:
5e:c9:6c:4d:4c:34:36:89:c1:e5:81:f7:ea:72:e6:
7f:77:b5:5e:12:74:1a:ac:63:97:b4:44:4d:f8:aa:
cd:b6:d5:a4:8a:7d:a2:d5:72:c0:11:ba:ea:6d:2a:
d3:61:c9:61:82:e8:df:63:2c:44:a4:7d:dd:7f:cd:
4f:56:e3:0c:e9:39:12:c4:aa:ac:cf:3a:33:8c:52:
4e:8e:77:b0:54:ae:4e:0d:b5:9a:f4:4b:73:27:34:
c1:49:4f:ad:51:25:77:06:05:74:25:d1:15:f4:aa:
b1:6a:f1:b3:92:a7:fc:ef:35:cf:d6:e5:07:ce:80:
d9:77:d1:eb:ff:0a:2f:3d:d7:26:67:a5:a7:8a:47:
66:d8:e1:64:91:40:20:ae:80:46:8c:44:0c:7b:68:
6e:d4:aa:ab:51:21:90:01:70:35:ea:08:e7:80:a8:
48:10:d2:fe:55:09:d5:0c:df:f1:57:f3:c8:7c:f0:
b7:6f:92:3a:c3:39:2e:7a:88:a0:21:34:ca:73:18:
73:be:cd:0f:3f:43:60:a5:24:fd:50:cc:c0:56:d7:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:74:B9:E9:B9:0B:D5:18:29:94:C5:64:DB:4B:37:23:C3:44:BA
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:74:b1:db:d0:a8:81:4d:92:8d:28:53:d2:df:21:f2:a9:c4:
90:e4:e5:75:57:8f:05:cf:4e:5b:49:64:f1:d3:22:2e:f0:af:
57:16:99:20:1e:67:7d:00:0a:b1:4e:4c:63:e2:9f:ad:3d:8c:
aa:d5:2a:8c:0e:03:52:6d:a7:f6:5c:9d:24:4b:b4:8c:28:f6:
7b:d8:69:a6:64:c1:76:25:0e:52:8d:b4:19:54:6c:f4:41:db:
f9:53:6a:be:aa:12:ff:82:58:7b:57:e6:17:36:06:c8:99:4f:
96:6b:ed:22:9b:55:1a:e5:8e:50:45:f2:e3:2a:d6:be:11:24:
2e:5f:b6:55:05:af:28:95:f4:d6:09:a4:d9:e9:be:98:92:e5:
c9:9a:bc:3f:49:b4:b1:eb:5c:1d:0b:6d:c1:9e:d9:67:c1:2f:
88:46:ba:2b:13:49:ff:88:01:79:09:d0:a4:c1:bb:e3:07:84:
6f:74:d5:99:8a:38:b5:dc:d2:49:14:d0:db:ae:d9:58:8e:8a:
d4:42:01:20:ca:b5:03:b0:ca:86:51:ab:0d:59:8b:d1:3a:1b:
36:b4:11:5b:f4:7e:46:a3:fd:36:22:24:d4:bc:3a:c3:9e:0e:
0a:17:f3:93:f5:2d:56:fc:8e:9d:47:86:24:48:8e:4f:ea:77:
d6:bd:8d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:59 2024 by rpki-client on console-fra.rpki-client.org