Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json)
Hash identifier: oAGmp7ThkFWegAYcY73rGcaTpOjyWBLmrNX7WJUMcns=
Subject key identifier: CC:C6:C1:E8:E2:16:4B:ED:35:C1:E8:03:39:5B:12:8F:C3:4F:92:E7
Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Certificate serial: 0194C3886677E953038C73E8EAADBB3A9BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
Manifest number: 142D
Signing time: Sat 01 Feb 2025 22:01:23 +0000
Manifest this update: Sat 01 Feb 2025 22:01:23 +0000
Manifest next update: Sun 02 Feb 2025 22:01:23 +0000
Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: jqJ13oafhHWqjRqLxm+zmq9SeKvqhKJ4lf5vPMzaY2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:66:77:e9:53:03:8c:73:e8:ea:ad:bb:3a:9b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Validity
Not Before: Feb 1 22:01:23 2025 GMT
Not After : Feb 2 22:01:23 2025 GMT
Subject: CN=ccc6c1e8e2164bed35c1e803395b128fc34f92e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ed:80:d2:f2:40:d0:ae:18:66:6d:8a:f8:6a:
a2:62:85:a0:24:23:33:a6:2e:f5:a8:39:ea:f8:d5:
1f:3e:9d:8b:12:58:e3:9a:fd:39:d2:ad:4f:c7:45:
8d:62:f7:0b:6d:ee:af:32:a6:e5:95:c0:8a:be:8a:
b3:6e:71:65:fe:31:53:c6:b8:c5:b5:ee:ed:7f:f9:
88:be:51:f6:fb:8d:c3:c7:ef:00:dd:f1:0a:11:d3:
7c:a3:4c:ac:86:49:10:d6:aa:c1:d7:f3:2a:bc:bd:
31:14:a4:4d:2d:07:c7:35:4b:89:37:bd:ed:06:62:
bd:46:f0:55:b7:25:58:b3:21:18:b8:4d:07:c2:14:
cc:26:57:1e:99:80:2b:34:aa:99:21:f2:fb:b8:1d:
d8:46:61:74:96:ab:0e:5c:5c:e6:97:25:ca:d8:bc:
49:db:4b:58:5a:d4:16:58:36:98:1f:b4:c3:de:95:
e3:9a:72:58:fb:99:dd:53:05:86:af:bb:3f:5b:ab:
33:4d:bb:24:01:af:f5:65:ca:78:91:f7:1b:a6:f8:
fe:c0:0d:d4:95:5c:09:63:15:1f:ea:42:c3:65:a0:
cd:7c:eb:56:8f:02:53:8d:6f:2a:1e:51:4e:b2:02:
ec:e9:06:6c:9c:30:60:d2:17:eb:cd:a0:46:4a:67:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C6:C1:E8:E2:16:4B:ED:35:C1:E8:03:39:5B:12:8F:C3:4F:92:E7
X509v3 Authority Key Identifier:
keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c6:3a:5a:1c:4e:17:eb:ed:2c:29:dc:d6:9c:b2:cd:ae:6c:
22:4b:63:25:cc:33:02:9a:cc:f1:fc:12:00:c6:69:42:1f:6c:
d6:b1:b5:12:8b:bb:56:91:a8:5b:1f:05:6f:fd:ce:0d:bb:ed:
f7:31:88:23:19:78:6c:fa:1b:79:e6:8d:75:6e:b4:db:56:78:
de:75:31:48:b7:53:76:8c:e5:ca:ee:6a:b8:2c:9a:2c:e7:d9:
b8:30:bb:80:b5:42:31:d7:ab:ab:2b:bb:4b:d1:6f:c3:34:33:
88:6f:e8:5c:70:52:9e:40:3c:e4:c2:b2:54:51:ea:12:63:f9:
35:4c:6d:06:83:a8:69:6f:60:7a:70:8c:7a:67:c6:ec:a5:5a:
6c:33:d5:02:46:37:c8:42:40:6e:88:1b:e0:39:94:80:13:f8:
85:14:33:46:20:d0:c8:41:73:07:26:c8:b1:ab:3b:61:92:56:
40:85:9f:73:74:08:62:d7:8d:a3:a0:4b:25:6f:b4:9b:aa:46:
c9:66:be:6f:52:e3:ae:2b:24:12:16:23:38:ec:85:ad:14:62:
1b:21:f7:fb:0c:ce:c3:58:fb:78:1a:88:37:a2:4f:4e:c6:9e:
8c:36:0f:38:d6:02:a7:79:f8:e8:e1:24:b2:cf:ce:76:4f:68:
d9:4c:e0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:53 2025 by rpki-client