Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: gM2+qcvlQUOpgBFupfzjb2tfJ9KMuZG2SvtWcctlmKw=
Subject key identifier: 24:65:5D:A4:36:AD:5C:A5:0E:EB:E3:04:C6:BE:E2:41:18:02:48:4A
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 0194C3BE2D3816F9476CD174B6009E4E7846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 3A
Signing time: Sat 01 Feb 2025 23:00:07 +0000
Manifest this update: Sat 01 Feb 2025 23:00:07 +0000
Manifest next update: Sun 02 Feb 2025 23:00:07 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: TG1wCN91VlMOH+1Ty5DYNN1pEb34qxymAhDPiRCR7QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:2d:38:16:f9:47:6c:d1:74:b6:00:9e:4e:78:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Feb 1 23:00:07 2025 GMT
Not After : Feb 2 23:00:07 2025 GMT
Subject: CN=24655da436ad5ca50eebe304c6bee2411802484a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:65:c1:3b:6b:ba:bf:f4:0f:6a:a1:e8:da:54:
c0:33:5c:d9:e3:7b:20:5f:96:e4:23:f9:2b:06:df:
16:45:eb:c6:97:b2:e4:b3:1b:96:c5:79:aa:c1:7c:
8d:93:5b:50:03:ca:31:e0:ac:88:15:01:cb:dc:89:
b3:9f:16:50:f3:ab:22:ec:fb:53:70:71:21:d2:ae:
a0:cb:57:45:20:6e:68:8e:e9:2d:09:77:47:b6:04:
3c:85:6c:e0:fd:25:76:3c:5f:c6:4c:d5:bd:41:f2:
0a:ff:35:7a:6c:27:98:23:1d:f7:4d:9b:c3:72:bb:
b8:2d:92:49:a9:af:47:2d:06:7a:a1:0b:d2:8e:5b:
94:1d:f0:23:85:59:78:c3:bb:af:e7:03:60:16:f6:
4a:17:ef:8d:5c:1c:40:af:41:bd:29:10:dd:73:03:
3e:26:d0:73:6c:6e:94:00:ac:e7:6d:71:d5:32:f9:
72:f4:12:3e:6e:1e:e1:a7:5e:a7:67:57:2f:e8:bb:
06:5c:ce:29:f3:cc:d3:8e:8d:a6:46:f4:b8:b9:d5:
cb:f5:6c:33:03:71:54:25:5a:12:cd:be:25:61:2b:
e1:53:64:c9:29:cb:c9:98:1c:0c:eb:7a:7b:66:41:
10:06:4e:c4:7f:40:6e:1b:3e:67:c3:76:09:78:4d:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:65:5D:A4:36:AD:5C:A5:0E:EB:E3:04:C6:BE:E2:41:18:02:48:4A
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e0:67:0a:04:dc:b7:99:6f:16:22:5d:76:74:d4:db:01:51:
72:08:65:02:82:c6:5e:9e:bc:0a:8e:87:a6:da:6b:21:01:bc:
97:49:16:2f:50:46:51:b3:e7:d9:26:30:c1:4b:b7:e7:9b:21:
06:64:25:35:d3:92:d9:2e:5d:ec:16:ff:09:bb:a0:b6:c1:b2:
d0:9f:89:af:19:df:b3:b9:3a:41:8a:0a:de:c3:e0:53:d0:13:
5e:56:e6:34:6c:de:49:1d:9a:7d:35:0d:9e:96:1b:2a:b1:e7:
b1:7c:ef:66:c0:20:4a:59:9e:37:6f:41:59:0e:f8:65:37:8b:
a1:73:a1:ff:10:46:e8:94:09:21:7c:22:72:74:e0:aa:d1:f8:
0b:c7:28:1d:4e:48:45:86:df:5d:28:6c:20:07:72:4b:1b:19:
02:77:b4:f7:89:0c:2a:5a:3d:d6:e2:c4:cb:74:61:d9:52:23:
0b:ee:74:4f:2b:27:6f:f3:ca:9c:ad:f7:d2:90:d8:26:09:cf:
a6:d4:9c:00:90:2d:28:72:5f:7f:5a:f2:12:b3:19:e9:31:cf:
8e:2b:73:e5:12:24:8f:07:64:dc:cb:82:30:93:1c:a2:62:fb:
f0:f4:bc:08:a6:fd:de:af:80:e8:b9:a4:92:c4:5e:78:bb:bd:
d1:95:b3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:48 2025 by rpki-client