Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: SRZpOMB62I9WPYqLimD4gu92txqR2bVb2iGVhMrYviY=
Subject key identifier: DD:88:FF:15:43:F5:8D:F2:D7:62:BB:E7:A6:35:D1:97:36:1C:D7:61
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 01936A46E349767ABBFDB7642010C5E6559D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 0414
Signing time: Tue 26 Nov 2024 21:00:50 +0000
Manifest this update: Tue 26 Nov 2024 21:00:50 +0000
Manifest next update: Wed 27 Nov 2024 21:00:50 +0000
Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: SA8MHHbz7OIkVMahI23smWeJnfj0LretH+q6UjuO6+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:e3:49:76:7a:bb:fd:b7:64:20:10:c5:e6:55:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Nov 26 21:00:50 2024 GMT
Not After : Nov 27 21:00:50 2024 GMT
Subject: CN=dd88ff1543f58df2d762bbe7a635d197361cd761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:ea:c9:f7:6c:ed:81:e5:cd:2a:d1:2c:ff:
9e:1b:9e:00:10:b6:18:46:cc:a1:54:f5:35:1d:8c:
c8:e5:74:83:68:43:5a:c1:30:71:83:a7:2b:8c:30:
7c:82:4a:c7:f0:9d:4f:25:46:48:80:8f:f4:f6:28:
8d:f2:e2:ae:d4:6c:e0:62:10:3c:2f:6c:5c:7f:39:
40:ee:7e:4c:97:fa:89:cf:90:2a:8b:10:86:53:27:
82:9c:e0:c9:db:f6:64:9f:7b:1c:ba:63:a5:8e:f0:
5c:4a:57:b6:b7:b9:90:b7:25:18:52:98:b2:d8:ae:
7f:3e:29:37:6a:fa:08:e7:1d:3c:f6:01:c6:fe:74:
8c:7b:ff:12:90:f7:49:7e:03:70:f1:0d:ff:de:ad:
d7:c4:6c:ee:62:ad:a3:95:60:48:67:7f:97:ee:28:
8e:33:0e:01:34:c9:52:cc:6d:45:02:ef:9f:a4:cd:
5b:75:e7:ff:d3:1b:dd:97:d4:f4:b3:e8:90:61:01:
3f:7c:ad:8d:e3:98:07:36:58:66:fe:2c:d9:bf:7a:
7a:50:6d:cc:5f:c3:ef:86:58:30:7a:cc:9a:cf:54:
95:ab:43:77:78:ab:48:0f:25:c6:e4:b4:93:77:2b:
47:24:cf:71:0a:80:5f:d3:e6:8c:68:9a:4a:bd:25:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:88:FF:15:43:F5:8D:F2:D7:62:BB:E7:A6:35:D1:97:36:1C:D7:61
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ff:37:41:66:02:5c:61:5d:26:15:88:77:80:8d:a3:dd:01:
5c:b6:ac:66:ad:f9:e2:7d:27:e9:c3:89:49:f0:a9:3f:cf:52:
cd:7a:43:8e:6c:aa:f7:d1:cd:22:c8:0e:ea:7e:9c:b7:d8:9c:
42:df:df:8a:c1:eb:40:b8:24:aa:fb:39:c8:80:d0:c8:30:50:
c1:85:90:cc:d2:da:bf:de:fb:f8:82:95:25:11:e4:74:26:f8:
1f:cb:25:d1:54:0e:a4:5b:0d:a4:94:77:4d:cf:2f:cc:7a:58:
6d:df:a8:22:8a:53:12:93:36:30:55:d9:e4:4a:21:4b:de:25:
36:31:b1:51:6c:d1:59:6d:3b:47:2d:61:f3:4d:ce:bf:45:a4:
83:3e:73:16:0c:25:5a:23:4b:d2:ef:5c:03:62:21:e3:c6:8e:
82:b0:86:85:0f:a6:7d:e9:5c:cc:a0:a7:17:fa:67:35:05:41:
b3:7d:f5:fd:a2:91:56:f2:95:41:c6:69:0e:07:96:c4:3b:24:
cc:5c:f3:7c:8f:05:1a:ad:fb:75:1a:b8:a9:b0:62:f4:e3:9c:
c5:70:28:38:2e:ba:08:36:4a:5c:2e:70:c2:fa:9d:9a:b8:e8:
52:53:87:e2:26:92:44:c7:98:2f:8c:ba:bc:27:bb:25:fe:6c:
c2:e1:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:47 2024 by rpki-client on console-fra.rpki-client.org