Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: mV1nDlzMGg/ifI/F5+J3Iumpsrk0cUR9qxArA8tk/Pk=
Subject key identifier: 7F:5D:12:5A:A2:DC:11:57:5F:BB:58:6E:4A:0E:7A:C5:FE:7E:E9:E7
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 0194C46381B2CADAB6947443E45DB1C6D945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 0EC5
Signing time: Sun 02 Feb 2025 02:00:42 +0000
Manifest this update: Sun 02 Feb 2025 02:00:42 +0000
Manifest next update: Mon 03 Feb 2025 02:00:42 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: rAKxQKNKaS9neuXdrrKtqgZW2E475B4XEs7tA2iVvb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:81:b2:ca:da:b6:94:74:43:e4:5d:b1:c6:d9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: Feb 2 02:00:42 2025 GMT
Not After : Feb 3 02:00:42 2025 GMT
Subject: CN=7f5d125aa2dc11575fbb586e4a0e7ac5fe7ee9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:7a:9e:45:8d:86:11:c9:5d:20:34:21:e1:
40:37:d0:dd:95:03:86:dd:d9:d6:0a:58:6a:71:17:
2b:f2:2a:97:2d:13:d5:db:bf:c2:f9:bd:fe:67:88:
fc:14:0f:f1:d8:30:ee:b6:d9:76:d8:00:12:3b:83:
3e:6c:22:a3:25:24:ea:2c:2b:da:77:3e:b1:c0:8b:
f9:88:f7:44:9c:ee:e4:b0:22:0d:de:74:1b:bf:9d:
4b:c2:ea:c4:e7:bb:17:f7:24:19:6b:ef:45:3b:57:
57:cd:4c:97:63:2f:6b:3e:4d:46:31:b9:b9:bd:05:
27:4f:68:bd:e0:4a:31:33:75:5f:fe:9b:25:e5:3e:
50:70:45:8d:58:d5:78:b5:ae:08:73:91:30:8b:ec:
96:bd:01:1c:c7:78:c3:86:53:b0:72:64:dc:c3:63:
bd:ae:c5:56:5d:d5:0d:a6:12:ea:e8:0a:53:f1:5a:
78:6f:80:14:a6:cd:dd:55:18:e0:f7:43:15:d2:ce:
07:8f:fa:0f:1f:65:a1:e3:d2:23:38:98:d6:99:9b:
1f:e6:c6:df:8a:b3:dd:45:c8:0d:47:1d:9c:d1:8a:
a9:e6:7f:b4:43:13:bb:06:8f:3e:79:b5:f3:55:dc:
dd:5f:16:c0:59:10:ad:52:50:cb:74:cd:89:5e:ee:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5D:12:5A:A2:DC:11:57:5F:BB:58:6E:4A:0E:7A:C5:FE:7E:E9:E7
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c0:f7:27:0c:cc:a6:53:cd:65:49:28:33:89:bf:5c:61:c7:
c8:cb:da:a4:d7:40:a6:14:d4:a0:b0:e1:38:fb:a3:3b:33:e3:
98:ee:23:8d:9c:99:cf:8b:41:ce:32:d1:f4:5f:ce:89:b1:76:
ad:5c:44:05:47:59:3f:a9:ba:d4:ed:21:a4:33:69:18:be:0e:
12:cc:45:4f:91:69:fd:3d:20:7f:eb:0b:a6:16:29:c0:66:82:
f8:e9:8f:2d:0f:21:35:09:9d:57:16:8a:31:80:3e:48:7d:5d:
35:b3:2e:85:b6:5f:50:9b:21:b1:22:dd:a3:b2:7b:10:1f:82:
60:45:73:74:c2:0d:80:fc:18:22:a4:bd:94:ee:0d:d3:3a:0e:
4f:94:69:d0:53:1d:7f:80:11:e6:a0:67:d0:42:3e:b1:eb:34:
8b:fb:60:a6:0c:59:f2:4c:90:0d:75:36:b5:7e:cd:30:f7:a2:
4d:30:59:8a:e2:6f:ba:6d:43:49:55:04:d7:fc:9b:0a:65:d6:
4a:56:60:dc:87:ed:32:1e:b6:2c:dc:e1:e4:29:aa:d4:62:e8:
16:1e:fb:d2:b8:b9:5d:1e:30:80:ca:da:2e:48:f9:14:48:01:
6c:6b:72:88:9d:20:26:bb:50:de:c8:3d:f9:4d:9d:56:ee:ff:
f2:f2:ca:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:17 2025 by rpki-client