Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
File: qafBolN_0DVAh1mXh8qoQv7WC38.mft (raw, json)
Hash identifier: 7cMVLiseB+5G6FHNDFwrPRx/Oah5k/NIv/zyxOr2GrQ=
Subject key identifier: D3:BA:4E:F6:46:D8:35:DD:4B:F7:F2:AF:8D:D7:9E:38:A8:75:CC:22
Authority key identifier: A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
Certificate issuer: /CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Certificate serial: 0194C3875F9DA0664344955A99C5BCF553D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
Manifest number: 06CD
Signing time: Sat 01 Feb 2025 22:00:16 +0000
Manifest this update: Sat 01 Feb 2025 22:00:16 +0000
Manifest next update: Sun 02 Feb 2025 22:00:16 +0000
Files and hashes: 1: qafBolN_0DVAh1mXh8qoQv7WC38.crl (hash: gOpD0utmi1Ke9yKIJ+AyMuCZv/SWTyXmC/aWM0M4UG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:5f:9d:a0:66:43:44:95:5a:99:c5:bc:f5:53:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Validity
Not Before: Feb 1 22:00:16 2025 GMT
Not After : Feb 2 22:00:16 2025 GMT
Subject: CN=d3ba4ef646d835dd4bf7f2af8dd79e38a875cc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:25:53:3c:cd:f7:2a:0e:32:54:01:1a:13:
63:07:57:69:36:64:5a:62:d1:1c:26:58:1f:8b:32:
1b:ab:42:2c:e6:9b:d6:3b:fb:4a:1e:6f:15:79:ec:
7e:ec:10:97:db:c6:f9:6e:14:03:d6:29:c4:c4:e2:
1e:75:12:df:11:86:48:db:65:02:40:e5:ac:3f:93:
94:66:30:34:92:0b:62:06:f2:30:b8:3b:8f:7a:d6:
ef:c8:90:d1:4f:04:e6:fe:73:b5:27:29:97:21:3c:
73:4e:03:17:85:ea:9e:92:49:0b:f3:d7:3b:d0:40:
db:ae:b8:f0:bd:05:7b:ed:72:2f:4d:c9:15:45:63:
32:90:5f:1b:b8:ed:ec:e5:88:d9:67:cb:4f:1e:59:
fb:1c:12:68:09:6c:1b:e9:41:87:8d:c0:fb:e8:0b:
4b:55:6c:b4:27:43:9f:9c:ba:dc:f1:88:cd:f4:b5:
aa:ff:1e:16:7d:7d:4b:e8:b8:07:2d:19:c5:b4:e6:
5c:ae:83:5c:50:de:0b:84:2e:4a:b4:da:61:e9:11:
27:b1:d0:76:43:e6:ed:8d:08:2d:c9:7c:95:d7:5d:
d7:30:24:ea:cf:5a:f5:4b:65:fb:3d:e4:95:6e:60:
58:83:69:07:99:64:94:2f:17:0e:cc:42:80:21:7f:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BA:4E:F6:46:D8:35:DD:4B:F7:F2:AF:8D:D7:9E:38:A8:75:CC:22
X509v3 Authority Key Identifier:
keyid:A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0e:fe:4e:e0:b2:93:ee:4b:e6:a2:69:a5:9c:67:e8:36:66:
e8:e6:e5:0c:c3:fc:51:61:22:f0:c1:10:89:24:79:68:17:eb:
60:5b:30:f9:48:35:91:d5:29:ec:70:77:02:6c:6b:2c:7b:17:
d1:42:25:3f:29:35:aa:f7:d7:76:c5:2b:97:16:17:21:df:67:
9a:85:4d:ef:69:a6:f3:db:4b:90:80:08:f4:c4:12:63:df:32:
14:92:d5:98:07:e2:b4:bf:81:ef:b3:28:5f:17:3f:ae:c9:c3:
ea:9f:46:14:b6:f6:02:0f:a9:70:ba:08:d6:ae:dc:8e:45:7d:
b2:53:df:11:68:31:ab:dd:6e:c3:00:b7:d7:fd:ca:38:af:c4:
19:8c:14:ae:2a:35:20:3f:91:ba:c9:f8:86:e4:5e:4b:88:6c:
a0:7e:a6:af:11:26:45:02:1b:4b:5c:50:c7:0a:c6:54:d3:84:
3e:0a:99:c7:90:e1:38:99:cd:02:23:cc:70:4a:d0:b8:9b:93:
f6:49:79:fc:32:fd:68:3a:8a:bb:1d:c6:7f:36:b9:88:e5:6b:
fa:2a:5a:49:a3:6e:c3:f7:28:93:12:38:59:49:83:db:ee:99:
df:f4:42:0d:58:66:5e:3c:83:d8:91:55:78:ef:84:8b:12:86:
a3:6c:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:36 2025 by rpki-client