Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
File: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft (raw, json)
Hash identifier: 7t2I8PbV2rCtL6D8sQsA5yBJVnUJ8CNBCE4/S0unPzA=
Subject key identifier: BA:7A:59:DC:0D:D5:48:D5:0B:F4:3F:8F:F5:55:99:90:D3:D0:B7:50
Authority key identifier: A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
Certificate issuer: /CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Certificate serial: 0194C3F62E86A95A29FA6866453644A7B684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
Manifest number: 0932
Signing time: Sun 02 Feb 2025 00:01:18 +0000
Manifest this update: Sun 02 Feb 2025 00:01:18 +0000
Manifest next update: Mon 03 Feb 2025 00:01:18 +0000
Files and hashes: 1: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl (hash: D1rsdepilxpf6iVufhnVa0Y29V8yqWSGjAxeNafEmXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:2e:86:a9:5a:29:fa:68:66:45:36:44:a7:b6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Validity
Not Before: Feb 2 00:01:18 2025 GMT
Not After : Feb 3 00:01:18 2025 GMT
Subject: CN=ba7a59dc0dd548d50bf43f8ff5559990d3d0b750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:bb:70:97:6a:06:7b:5b:99:e2:c2:64:4d:
63:27:11:b8:ea:5b:b6:33:57:91:b2:bc:0a:ca:53:
44:7e:73:66:51:24:a7:ca:84:ad:3b:80:eb:c5:a6:
d2:16:38:96:7b:87:fe:35:17:fa:7d:25:4c:c2:6d:
7e:9d:35:ad:29:3c:9a:86:57:39:36:6b:43:17:c5:
07:fe:7d:43:dd:3c:93:a8:fd:d9:13:a5:41:f4:b5:
f4:21:87:e2:a9:14:e3:76:6b:a0:91:10:9d:d8:43:
1d:8f:17:36:e9:6e:68:76:1c:93:12:3e:42:5c:59:
6e:bd:d3:10:6d:db:2e:14:3a:25:0f:0a:81:c6:38:
0b:00:25:87:a5:05:03:0f:bd:d3:a3:a4:a7:1d:93:
2d:fe:31:b1:98:36:bf:e0:06:99:11:19:47:e4:e0:
12:ca:30:2a:c3:3a:e6:7f:0a:af:8d:69:cd:48:86:
c6:8f:1b:73:6d:32:14:6e:cd:0f:59:30:3f:77:f3:
0c:a5:94:f3:fb:88:e9:00:b3:06:aa:4a:a5:a6:cf:
db:76:b4:54:71:06:96:ac:da:3f:d9:91:f5:28:5d:
d9:d4:10:7b:bd:f5:f1:c8:2e:cf:ba:b0:d4:dc:ff:
db:76:0f:c9:65:d9:23:89:d7:44:eb:66:18:cd:23:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7A:59:DC:0D:D5:48:D5:0B:F4:3F:8F:F5:55:99:90:D3:D0:B7:50
X509v3 Authority Key Identifier:
keyid:A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c6:2c:72:1c:73:57:08:e4:91:ad:36:30:15:d1:ec:bc:3f:
d1:7b:3b:0d:26:25:44:bf:a9:09:e1:fb:3b:da:14:7c:0c:6a:
10:8d:5d:04:b4:81:c3:e1:20:dd:0d:44:90:71:1a:2b:de:99:
4a:65:fb:6e:14:94:8f:50:ea:67:f8:19:a2:03:03:2c:1c:a6:
70:b1:70:4b:8d:42:09:f7:c5:42:f6:0e:d5:0b:79:e8:4d:9e:
30:a2:f3:82:e3:8b:c9:5b:80:22:ae:46:0a:16:bd:b6:1f:35:
87:e9:ea:81:92:40:b1:73:27:9d:4d:f0:bf:10:a3:40:9d:a7:
12:bc:51:1f:35:6d:af:16:2d:b7:fb:b5:c9:f6:b7:20:fd:c8:
47:3d:18:4c:97:38:10:61:79:5e:d9:02:6b:30:a3:05:8b:1c:
62:a7:9f:aa:56:31:3a:0a:27:b0:2e:90:dd:38:d0:68:e3:d8:
68:12:0d:1e:e0:28:62:a9:9c:43:86:de:0f:25:39:b7:5c:12:
ee:74:4e:91:7a:6a:48:81:5b:04:af:3a:fe:2b:f1:40:2b:2b:
67:36:0b:c7:00:f3:8b:c9:f9:25:5e:05:23:b8:be:d5:9b:aa:
27:07:c9:c0:dd:ec:00:c1:b9:56:53:4b:66:43:a1:be:1f:83:
fa:55:c0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:52 2025 by rpki-client