Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
File: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json)
Hash identifier: +wzsbvzlZ9qZlE3+00aNQJUN9PSoKbxtaW/Sy5MSa2w=
Subject key identifier: 3C:CE:36:85:91:E1:68:54:30:A8:69:10:2F:1C:D5:63:18:50:3D:FF
Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
Certificate issuer: /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Certificate serial: 019512104969DB3AAE40BCF9C05841BF320E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
Manifest number: 116D
Signing time: Mon 17 Feb 2025 04:00:12 +0000
Manifest this update: Mon 17 Feb 2025 04:00:12 +0000
Manifest next update: Tue 18 Feb 2025 04:00:12 +0000
Files and hashes: 1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: L0nAPAGjBxLw4srrwiTOogJRCBDVmtEelhjlpRQaP1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:49:69:db:3a:ae:40:bc:f9:c0:58:41:bf:32:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Validity
Not Before: Feb 17 04:00:12 2025 GMT
Not After : Feb 18 04:00:12 2025 GMT
Subject: CN=3cce368591e1685430a869102f1cd56318503dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:e1:5e:bd:4a:bd:16:80:9d:7f:b5:bc:58:
1c:a7:95:9d:9f:21:ad:fc:a0:43:ac:97:1e:a4:d9:
90:76:5a:2f:00:0e:09:f8:8a:28:87:80:02:89:97:
2a:46:95:ac:3c:74:ce:1b:5e:da:62:8e:63:b3:d0:
7c:c7:f6:4a:dd:9b:05:7c:e4:1f:f8:02:d0:c3:4c:
45:48:93:a9:7b:c1:51:fe:df:c1:85:35:39:d2:d4:
e4:02:0d:0a:ed:6b:aa:5d:93:ec:cf:8a:9a:79:37:
b9:57:3c:85:38:a8:24:f9:aa:c5:70:07:b9:0e:fa:
8f:39:c4:df:77:b4:4f:b0:d5:14:5c:c0:f1:0e:4b:
27:35:64:97:7d:d7:8b:da:3f:0c:eb:28:07:ec:86:
4b:47:6e:63:e5:be:40:c8:87:4e:f9:7e:19:5c:a6:
42:80:4b:a3:c1:57:24:d8:3f:f1:c2:a9:bf:89:d1:
82:c7:ff:89:27:2b:6e:d5:5c:0c:f2:6d:83:e4:c9:
aa:3d:32:33:f2:50:ae:0f:e2:cf:bb:3a:47:df:fb:
6d:31:d5:04:46:d7:68:dd:1f:00:38:2d:62:b8:be:
8c:4e:73:8e:01:72:b8:35:f7:87:ea:c2:40:a8:f6:
bf:78:d9:5e:3b:bf:dd:df:8e:11:da:75:f4:8d:07:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CE:36:85:91:E1:68:54:30:A8:69:10:2F:1C:D5:63:18:50:3D:FF
X509v3 Authority Key Identifier:
keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:81:13:ea:dd:62:d6:e2:e7:2e:c8:8d:12:2d:85:b6:b5:ea:
58:d5:ed:f4:4c:cc:00:7b:39:85:dc:62:58:69:77:31:98:df:
90:ab:18:e1:b4:f0:af:85:47:70:1d:04:2e:a8:b6:a5:c0:3f:
79:b8:4d:d4:1f:f8:0a:59:23:4b:e8:3f:f7:af:92:05:e7:7c:
9e:13:c8:4f:fd:cd:2e:ce:2b:95:92:3a:f6:a2:5d:33:24:00:
7d:4c:7d:14:5c:48:9f:80:e9:66:3b:14:ca:a6:9a:84:df:60:
da:4f:b6:0e:b2:9f:9d:fb:b7:ac:0b:52:8b:bc:5c:9e:0e:3f:
91:9d:7d:c1:49:25:03:0c:25:fd:5d:7a:08:69:e7:32:ea:a4:
75:70:1c:9a:f6:d0:af:7d:5e:b6:a5:c6:a7:df:6d:4b:af:0a:
1e:9a:47:cc:d7:11:e2:4f:06:53:17:21:e0:62:fe:df:6b:3f:
f9:02:2b:5e:61:f1:97:dc:a5:f4:ce:37:af:8d:13:02:cf:d1:
3c:54:e7:a0:87:3f:a6:fa:16:f7:54:51:95:77:e0:e5:72:8e:
64:ed:d1:fe:ed:b3:9c:79:7a:d6:61:4a:8d:ee:53:69:e6:5b:
73:e6:ce:d0:5b:ea:4b:fe:83:c8:8d:db:0d:34:33:69:23:5a:
7e:09:0e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:00 2025 by rpki-client