Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
File: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft (raw, json)
Hash identifier: Y6Euq5YLk9AIY+HCn08RxFNSI6doXZ/B1/JQeJY2UPA=
Subject key identifier: 18:56:97:A5:E1:11:30:97:A3:45:EC:6C:42:E1:C1:13:F3:AC:41:1B
Authority key identifier: 43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
Certificate issuer: /CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Certificate serial: 0195116BC7934262AFA034D5852946F7C757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
Manifest number: 1452
Signing time: Mon 17 Feb 2025 01:00:30 +0000
Manifest this update: Mon 17 Feb 2025 01:00:30 +0000
Manifest next update: Tue 18 Feb 2025 01:00:30 +0000
Files and hashes: 1: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl (hash: fsQ6GQ6ezEdikEMwCeLOzASICH3bKs3qghP/R63lZk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c7:93:42:62:af:a0:34:d5:85:29:46:f7:c7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Validity
Not Before: Feb 17 01:00:30 2025 GMT
Not After : Feb 18 01:00:30 2025 GMT
Subject: CN=185697a5e1113097a345ec6c42e1c113f3ac411b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:a9:d4:89:4e:0c:6a:61:59:77:d5:c2:f2:
b3:2f:86:6e:be:0e:b8:56:2c:3a:fb:e2:5d:40:15:
53:db:1e:8f:cf:3a:4e:c4:cf:93:2e:be:e4:92:3d:
1a:2d:17:4f:d2:df:b5:42:9e:9f:58:3d:28:0f:33:
7c:18:c1:0f:34:c6:e8:09:08:18:3c:b3:79:2d:77:
87:90:42:57:c1:c8:d3:c2:3e:e3:b0:0f:61:6f:28:
a8:8d:a8:23:12:f0:07:3c:ad:c3:bf:24:6e:a2:f3:
03:de:4c:20:31:83:44:05:b3:95:4e:5f:f2:6b:17:
b6:74:ed:a7:c2:07:49:3e:fb:a6:e5:be:25:30:ab:
18:cd:fc:ee:9e:3e:9f:f8:cd:b1:8a:b6:25:ab:fa:
3e:1b:b9:03:d1:2d:bf:8a:ed:38:f8:ad:d4:16:1c:
95:c0:8a:af:9c:14:61:e9:27:14:94:6d:5d:08:16:
3b:96:a9:23:0d:8d:88:ed:04:d7:d1:21:62:4e:bc:
09:2d:6f:d3:58:1b:63:2f:0f:a3:f9:b1:e8:73:38:
f9:ea:88:61:2d:dc:d5:9a:1b:32:f5:97:06:6e:03:
f1:31:94:b1:94:d3:55:5a:38:e6:9a:49:85:40:29:
85:d4:19:a7:68:e3:24:f0:ac:4e:70:e9:ce:f7:22:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:56:97:A5:E1:11:30:97:A3:45:EC:6C:42:E1:C1:13:F3:AC:41:1B
X509v3 Authority Key Identifier:
keyid:43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8f:8a:30:ff:6a:82:88:33:61:7c:13:08:1d:e2:d0:3d:b1:
ce:8f:cb:83:b5:4f:dd:fa:1d:2b:bd:a2:7a:c7:76:57:49:d5:
3d:46:c1:03:f5:7e:bf:8f:45:41:77:4c:21:93:3a:7e:2d:f1:
b1:2f:80:eb:26:1e:fa:c2:29:b4:85:ae:65:6c:19:ed:fb:86:
e3:83:01:d9:ea:ce:58:65:45:b2:b3:f1:19:8c:c3:79:3f:22:
db:5d:13:a8:dc:5c:6f:5b:7c:da:7f:f6:db:2a:c6:29:30:f5:
50:a0:f1:41:45:cc:52:c3:fc:f7:42:84:18:a4:7d:35:0b:53:
f1:74:32:52:f2:a0:c1:2a:a0:77:9c:85:71:75:c4:8c:60:b5:
a8:74:c1:3e:59:af:24:1e:77:ab:33:cc:9a:7a:60:98:8f:d9:
2b:b4:40:d0:a1:2d:a3:ad:10:8d:40:02:1c:0a:91:b1:d5:04:
db:e6:68:0f:c5:b2:1c:f7:f9:71:29:e2:9e:10:22:4e:ea:ad:
f7:3c:cf:30:68:8f:08:a4:a4:0d:db:ca:11:33:db:d4:ce:eb:
61:89:a5:e4:46:95:b9:54:2b:7b:ee:c3:67:ea:af:99:aa:a3:
ac:66:a9:84:d4:47:e7:fe:ad:27:cd:89:95:6e:0d:be:e7:17:
40:65:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:55 2025 by rpki-client