Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
File: qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json)
Hash identifier: sthxIQQ8kPM81Dyfl4wTGk2lXLYIvBUrqAsdx6SWFuY=
Subject key identifier: 9C:E2:18:00:C8:68:DE:2F:AA:59:D4:21:73:84:1E:76:CB:3E:C9:A4
Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
Certificate issuer: /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Certificate serial: 0194C3F61E625597A8261D0A3185AC9FD48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
Manifest number: 08A4
Signing time: Sun 02 Feb 2025 00:01:14 +0000
Manifest this update: Sun 02 Feb 2025 00:01:14 +0000
Manifest next update: Mon 03 Feb 2025 00:01:14 +0000
Files and hashes: 1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: 2Icp7ge8UVeDLWAc1dkLkvEsOdNHFap9kPW99qz6uOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:1e:62:55:97:a8:26:1d:0a:31:85:ac:9f:d4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Validity
Not Before: Feb 2 00:01:14 2025 GMT
Not After : Feb 3 00:01:14 2025 GMT
Subject: CN=9ce21800c868de2faa59d42173841e76cb3ec9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:5a:8a:e2:54:28:bc:a6:5a:61:4d:04:c9:
80:ef:0a:a8:28:2a:06:8f:93:d2:02:36:69:df:c1:
79:c8:10:7d:cf:66:c5:d0:bf:87:9e:59:b1:cb:e5:
cc:cc:0c:87:19:e5:0e:e2:05:05:db:e3:d8:ec:2a:
64:3a:b8:e4:9a:f1:cb:a0:12:09:ac:c7:22:0f:ba:
a6:a4:ef:82:25:50:1c:07:6b:cd:56:bd:cf:5d:13:
2a:cb:07:0f:e4:cb:0e:11:cb:6e:d2:49:bc:80:fb:
b7:d0:84:e2:d1:88:89:75:4e:16:c5:47:91:78:c9:
4c:17:22:a0:f2:3e:2e:d7:ae:60:26:d5:3e:dd:d0:
94:35:45:21:ef:6b:39:b9:43:45:6c:9b:9a:3d:f9:
dd:c5:67:cc:17:20:88:81:ec:8c:5d:a2:42:df:f6:
23:b7:b4:02:78:f8:08:3a:ee:c3:94:7d:d4:a1:fe:
59:55:8f:72:d5:af:bd:d3:13:3e:65:4c:2f:84:11:
3f:af:5b:04:6d:cf:5b:fd:71:45:28:50:e3:4e:e4:
4a:57:16:32:3a:39:d7:e1:da:0a:ea:29:7f:a2:5a:
de:98:02:39:74:a4:b5:a0:64:2c:71:c8:bf:2c:5a:
27:08:54:d5:a6:a1:2c:1a:ac:d2:d2:90:f3:a1:db:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E2:18:00:C8:68:DE:2F:AA:59:D4:21:73:84:1E:76:CB:3E:C9:A4
X509v3 Authority Key Identifier:
keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a1:94:b7:0f:b1:b2:5d:9c:b7:4e:64:c3:be:7b:c7:fc:4a:
ff:14:ad:fb:18:61:dd:45:d1:44:9f:96:4d:ca:78:cb:91:43:
0a:da:a8:9d:5c:b7:2a:2a:37:8f:83:4a:89:7c:f7:3d:d7:0d:
02:b9:bf:01:ea:6d:0e:45:6c:d6:21:7d:03:d7:e8:44:66:f2:
47:3c:d9:4a:48:57:58:d2:ed:7d:9b:0a:b5:11:0d:75:c5:fa:
5f:83:0c:76:ff:ef:69:70:bb:0d:86:28:bb:f7:91:c7:ac:f4:
e6:e4:c1:89:fe:f8:84:80:16:29:6b:e6:e3:7d:f1:c0:04:db:
c2:a7:95:fe:be:ee:48:0e:6f:1f:38:10:11:6c:96:18:8a:82:
62:64:96:41:3f:dc:8c:36:0c:bf:d0:8a:e4:c6:20:cc:85:f0:
ef:b4:51:26:37:fe:83:12:90:8f:4c:85:41:94:91:60:dc:f1:
a8:b8:68:e1:a1:8b:ef:99:eb:ee:b3:52:8b:5d:f2:47:81:9e:
b7:d0:a3:d8:ac:79:6f:12:93:43:49:d5:f8:7a:83:e0:03:44:
c4:55:f3:09:1a:d0:8c:89:6e:ec:d8:40:07:77:e3:06:f0:ae:
61:54:03:b9:dc:a4:06:c6:bc:d6:80:d8:ac:27:65:2c:e0:3f:
93:a4:64:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:11 2025 by rpki-client