Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
File: qXJG_EMZM_Cyggztllx4URgLFe4.mft (raw, json)
Hash identifier: pX1Z+q+TcGl10gtKQV5rulRuTd+OzOyRFTD32teDhgI=
Subject key identifier: F2:A2:07:58:2C:FB:6F:D5:5D:8C:BC:47:58:05:42:FC:28:00:55:6A
Authority key identifier: A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE
Certificate issuer: /CN=a97246fc431933f0b2820ced965c7851180b15ee
Certificate serial: 01951210547A8E3868E37244ED317E4E97F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
Manifest number: 07FF
Signing time: Mon 17 Feb 2025 04:00:14 +0000
Manifest this update: Mon 17 Feb 2025 04:00:14 +0000
Manifest next update: Tue 18 Feb 2025 04:00:14 +0000
Files and hashes: 1: qXJG_EMZM_Cyggztllx4URgLFe4.crl (hash: IhQaT9HGWzKND/oXi6481b4yeiUdf13EPt0zT2Ij+Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:54:7a:8e:38:68:e3:72:44:ed:31:7e:4e:97:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97246fc431933f0b2820ced965c7851180b15ee
Validity
Not Before: Feb 17 04:00:14 2025 GMT
Not After : Feb 18 04:00:14 2025 GMT
Subject: CN=f2a207582cfb6fd55d8cbc47580542fc2800556a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:e0:d4:bf:e3:b7:cc:c8:1d:b9:a1:35:9d:
d8:6a:bf:6c:72:32:18:1b:d7:9d:0c:ef:09:e2:e8:
b2:40:c5:1a:0f:f2:f1:81:2a:be:29:2b:45:aa:33:
93:33:91:bb:7b:8a:09:b4:52:08:b5:ef:bb:7f:e2:
4c:d0:1a:59:58:76:95:9f:fd:41:2a:11:52:6d:1c:
a5:d3:9f:43:19:8f:ec:03:17:9d:2c:12:53:6a:f5:
c6:d0:df:e6:55:26:74:3e:ec:f3:90:8b:53:77:c5:
a4:13:b0:30:82:db:aa:ad:49:54:4e:58:6f:70:21:
45:ee:74:da:6a:90:5a:24:03:af:6f:8c:50:ad:8e:
9e:d6:46:cb:ef:4a:39:88:a2:30:ad:56:67:d3:58:
11:23:f7:d0:e8:bc:db:f1:41:a7:ef:1c:49:31:44:
bd:0b:5f:d7:0b:c7:cc:54:ac:04:24:9a:fc:20:27:
a9:1b:f2:56:ca:54:39:02:0e:3b:cb:0e:27:a2:37:
f5:9b:13:06:83:6d:d7:4a:73:7a:88:a0:ce:06:f4:
34:4a:25:3e:23:6b:8a:7c:04:68:82:03:6d:98:e8:
c2:8f:eb:26:5d:8f:0b:99:6b:2f:a9:bf:52:2c:60:
25:50:03:99:4d:c7:ce:6d:0a:67:ec:d9:8f:45:9d:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A2:07:58:2C:FB:6F:D5:5D:8C:BC:47:58:05:42:FC:28:00:55:6A
X509v3 Authority Key Identifier:
keyid:A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:82:7d:5d:b8:76:bd:bd:4e:c3:d5:ab:18:4a:7d:0e:bd:55:
fa:4b:10:9b:90:2b:7c:bb:57:70:54:f9:f1:17:7e:e0:cf:d0:
bf:24:ed:0b:8f:19:1f:f6:f1:b4:8f:76:f5:4c:31:91:70:ac:
38:7a:52:ba:61:c1:97:3f:3d:77:46:ba:5e:70:b7:c6:db:c8:
91:e5:f9:d2:3a:6b:3a:c1:8d:f1:9b:f0:a6:d3:5f:46:9f:08:
1f:2f:19:4a:0e:40:b8:ad:58:29:b9:ba:d7:88:82:54:bb:ef:
70:0d:6b:1e:69:5a:77:97:3e:9c:35:a7:0b:82:6c:a9:ce:ab:
10:00:22:a8:77:d5:1d:6c:45:cd:9e:60:28:cb:5c:9b:c6:09:
14:87:04:17:17:f6:29:1e:aa:f2:9b:78:2e:18:b3:97:c3:e3:
98:77:8c:52:9d:41:a2:4e:a8:dd:35:a6:27:ed:6d:0a:39:df:
1c:c6:e3:9f:74:7e:b4:81:d3:a7:ea:1e:80:0f:02:73:58:b7:
2c:d4:e4:d4:9c:e6:79:31:f7:28:16:71:9d:b2:33:dc:a6:fe:
87:0f:7c:a0:af:dc:2a:85:02:56:8f:b5:f6:6d:df:3d:8c:e0:
e8:19:4d:dc:b5:29:2e:5a:31:4d:71:15:52:11:68:d5:08:bf:
e6:82:3a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:48 2025 by rpki-client