Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
File: qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json)
Hash identifier: Ua+M/dmLScX3B50ibSBrwVVQ3AUwJsPrgsFB4FJZEQo=
Subject key identifier: 67:B4:36:BF:0A:D5:8A:82:6F:DC:0A:96:B0:D2:49:41:15:3B:23:20
Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Certificate issuer: /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Certificate serial: 0194BABB66040E591D294DC7E1AC247306EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
Manifest number: 113F
Signing time: Fri 31 Jan 2025 05:00:31 +0000
Manifest this update: Fri 31 Jan 2025 05:00:31 +0000
Manifest next update: Sat 01 Feb 2025 05:00:31 +0000
Files and hashes: 1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: k+SlbF0E3Cmlq6PGOesDD9K92OWWfyNCFng+5AWKQhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:66:04:0e:59:1d:29:4d:c7:e1:ac:24:73:06:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Validity
Not Before: Jan 31 05:00:31 2025 GMT
Not After : Feb 1 05:00:31 2025 GMT
Subject: CN=67b436bf0ad58a826fdc0a96b0d24941153b2320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:ec:80:29:bc:34:0e:e9:81:59:00:73:f5:
bc:9b:3a:3a:a5:4c:6c:75:ce:e7:af:66:e0:07:3e:
f9:b6:c8:33:d1:09:17:e4:7f:43:95:b4:b2:f2:06:
2d:cd:89:46:18:13:6c:fa:1e:8c:44:23:12:b0:f5:
a8:9c:d0:a9:0a:8b:fc:61:d6:3c:1d:03:ed:ce:cd:
4c:3e:c3:7f:85:ff:27:f6:3f:59:43:85:3d:8e:74:
91:0f:f9:c7:45:5d:11:9c:61:2e:40:a6:06:1a:20:
89:2a:57:30:2e:2b:5f:b0:6b:a5:1f:f8:d8:bb:9a:
ec:d1:21:f8:7c:ae:5f:06:cd:5c:b8:6d:40:c7:eb:
5d:3d:fb:a2:77:a1:de:fd:38:f1:68:bb:31:a9:41:
91:fd:8f:1f:4a:86:04:76:fe:37:21:dc:c0:10:cd:
a1:8d:1c:a3:d8:84:0c:72:92:fb:d0:e4:9c:b6:10:
70:f2:c8:f9:37:38:d8:2c:74:d5:7e:26:98:35:09:
54:0f:57:53:6b:50:f6:e8:51:31:07:52:18:b7:50:
b8:b2:b3:72:ad:10:f7:ee:4a:0c:da:64:28:3d:7a:
6e:89:78:7a:cf:23:1d:18:69:d9:45:44:e9:3c:2d:
44:94:a3:fb:43:90:7e:f1:49:c5:5e:2b:91:2f:66:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B4:36:BF:0A:D5:8A:82:6F:DC:0A:96:B0:D2:49:41:15:3B:23:20
X509v3 Authority Key Identifier:
keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ba:f6:3d:f8:cb:b2:2f:2a:42:e4:5b:63:ea:46:d8:53:a4:
7b:1f:b9:ff:45:6d:dd:ab:91:62:42:2e:b9:e5:6c:21:de:3d:
94:7b:29:90:3b:6c:6e:10:70:88:a9:0e:3d:32:d7:f2:f6:61:
8f:14:96:52:f3:0a:81:10:f5:73:91:4f:e9:38:14:2e:47:6d:
83:06:f5:6d:06:b1:71:7b:b0:e9:59:aa:5d:ec:fe:e1:4a:4d:
f6:5e:59:b9:07:1c:56:61:07:13:7a:d8:20:05:67:05:e1:96:
bc:9e:81:32:84:5f:61:39:8b:92:99:02:36:a8:3d:28:73:48:
cb:a7:75:2c:57:b7:7a:2c:72:35:a0:ee:75:96:7a:3b:43:77:
f8:8f:c3:1a:93:0c:0a:b9:82:86:46:b7:ae:68:37:56:c2:d9:
3e:ea:d0:4d:fa:80:4c:c9:0a:f6:57:d6:9b:8d:15:35:7b:ed:
c9:0a:41:fa:97:78:2c:62:da:fd:19:e6:00:f1:9f:ab:78:7e:
b4:46:6c:ef:80:75:36:0a:b0:d2:98:81:7b:10:b3:88:b7:0e:
b9:2d:c4:5f:f9:c9:e4:bd:01:61:4a:86:51:03:bd:50:d8:5c:
4c:a0:bb:08:92:97:b0:0b:89:50:8e:2f:69:9c:e0:f3:41:94:
6c:3d:84:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:53 2025 by rpki-client on console-fra.rpki-client.org