Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
File: qW_WWYUaNLt3wyE8pL93JRHghzQ.mft (raw, json)
Hash identifier: I+iBYflxpb5vWjzd0rkUxYE0onUAbA8UE1e+wAWWXn8=
Subject key identifier: 17:6D:3E:F2:80:DB:67:41:EB:00:16:C2:1F:AB:61:9D:29:25:D4:17
Authority key identifier: A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
Certificate issuer: /CN=a96fd659851a34bb77c3213ca4bf772511e08734
Certificate serial: 0194C507CFE9F63C985A8C3496F0E8E5C1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
Manifest number: F0
Signing time: Sun 02 Feb 2025 05:00:10 +0000
Manifest this update: Sun 02 Feb 2025 05:00:10 +0000
Manifest next update: Mon 03 Feb 2025 05:00:10 +0000
Files and hashes: 1: qW_WWYUaNLt3wyE8pL93JRHghzQ.crl (hash: jNSq4rHTPnaw28SP0PgqIvdL7eRPQlL9nq2k/Osa960=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:cf:e9:f6:3c:98:5a:8c:34:96:f0:e8:e5:c1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96fd659851a34bb77c3213ca4bf772511e08734
Validity
Not Before: Feb 2 05:00:10 2025 GMT
Not After : Feb 3 05:00:10 2025 GMT
Subject: CN=176d3ef280db6741eb0016c21fab619d2925d417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:ed:b2:69:e6:f2:32:e1:92:61:7e:8f:4d:
5e:23:20:65:75:38:cd:73:ef:c9:40:7e:59:01:9b:
06:e3:9d:b6:ee:67:a8:f1:ad:44:82:4d:18:4f:17:
a7:b7:76:6b:9d:a8:f3:84:5c:b2:cd:ae:f9:05:dc:
3a:28:4f:6c:06:74:55:da:be:ef:9a:1a:01:16:27:
be:10:a7:55:1b:4b:09:ee:c5:24:d4:af:0f:c4:eb:
d2:11:ac:51:8e:b2:36:6b:fd:5c:96:84:f5:36:09:
dd:71:c6:83:ba:1e:9c:89:26:a8:96:09:e4:0b:67:
cc:22:88:58:a5:5f:e0:62:da:b2:09:4c:e7:9b:cc:
d8:30:2f:52:ef:af:ed:e2:de:9c:1e:8d:34:0c:57:
91:ba:b3:5e:34:e7:7e:98:66:c0:3d:e1:33:8a:bc:
e5:da:9a:cf:57:0d:03:d7:d1:78:c0:ac:3d:f0:eb:
a1:3d:6d:ea:fb:f0:70:fd:f7:23:15:c8:45:84:41:
a6:78:46:ca:95:2c:04:b2:9a:69:53:92:49:98:d9:
32:bc:a7:21:e2:14:6e:ba:03:8d:c8:ee:27:9c:56:
47:6f:aa:73:27:0f:fb:ec:bb:9a:ea:3c:f3:ff:79:
cd:ff:cf:f6:21:01:7d:ea:28:07:08:8f:e1:e5:02:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:3E:F2:80:DB:67:41:EB:00:16:C2:1F:AB:61:9D:29:25:D4:17
X509v3 Authority Key Identifier:
keyid:A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ac:d0:e1:25:bf:94:61:50:3e:15:5d:21:49:50:58:75:1a:
24:4f:79:93:b3:d4:75:40:16:16:62:a9:6d:8e:0a:7e:a0:5b:
d5:17:a8:8c:58:aa:62:8d:27:3e:d8:99:12:f4:3e:fa:8e:6d:
68:17:9a:c5:86:cd:be:10:a2:ef:56:9b:41:9a:1c:27:87:7b:
78:08:e6:bf:ec:67:50:ef:66:32:c7:f6:ec:8a:1a:a2:bc:61:
40:24:84:fe:81:fa:5a:85:2a:9c:46:db:bc:a7:ff:e7:10:38:
1c:18:bc:c0:97:38:03:f3:f1:1b:ae:3b:99:a9:ca:35:3b:55:
e8:6e:22:20:d4:08:db:e0:40:5a:f3:c6:3f:ab:84:cc:13:d8:
18:88:06:41:8c:0c:28:cf:3b:87:f8:77:bd:8e:1d:96:b4:78:
97:de:40:38:f2:10:2c:81:db:fc:e9:80:78:20:f5:7a:3a:51:
dc:a7:45:67:25:37:75:e7:14:be:b6:f0:47:53:e0:2a:13:87:
e2:85:f5:26:46:22:14:61:65:94:d9:78:a7:89:a7:77:57:bf:
58:8e:2d:5a:bb:b6:56:dd:f4:e9:09:02:f5:7e:b0:aa:42:30:
93:b9:d0:a1:61:5d:77:a8:13:f4:9a:fc:7e:21:52:71:ce:4b:
80:0d:fc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:43 2025 by rpki-client