Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
File: QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json)
Hash identifier: 7Ts8UnvVi1sgQmEs5oJSHgGP0A2c9tpdYD/sm9s8LiI=
Subject key identifier: 0C:30:1D:78:A1:2C:E4:21:06:E1:52:6D:25:F7:6A:04:49:BE:88:19
Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
Certificate issuer: /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Certificate serial: 0194C4D0D9080DF8130D5F58C0302FF5CEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
Manifest number: B7
Signing time: Sun 02 Feb 2025 04:00:08 +0000
Manifest this update: Sun 02 Feb 2025 04:00:08 +0000
Manifest next update: Mon 03 Feb 2025 04:00:08 +0000
Files and hashes: 1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: LFnCDGgp1H9wzw5xgp0VOo2AHnyQKallIJR5raqEFZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:d9:08:0d:f8:13:0d:5f:58:c0:30:2f:f5:ce:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Validity
Not Before: Feb 2 04:00:08 2025 GMT
Not After : Feb 3 04:00:08 2025 GMT
Subject: CN=0c301d78a12ce42106e1526d25f76a0449be8819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:74:96:84:a6:0f:e8:f2:81:79:5e:c0:2f:
07:f4:da:ba:39:27:2b:4b:0e:a7:75:d6:b7:34:e0:
23:d7:c6:d8:d2:bd:31:55:77:79:f0:85:94:91:34:
9c:fb:24:60:62:81:4d:b7:d6:13:e5:d7:08:cd:de:
72:50:e2:98:19:4e:c7:1e:53:40:fc:df:24:2a:c8:
2e:6f:96:1e:74:9e:2b:51:df:a0:84:57:94:81:75:
2e:28:39:53:14:3c:d9:fd:78:de:71:7f:f6:14:86:
da:63:f2:3c:ff:5c:ec:30:f5:13:4c:60:3f:cc:f8:
f3:72:ab:6c:b0:de:21:2b:8a:35:8a:ac:92:b8:88:
c6:39:04:39:16:bf:3f:50:76:b5:71:66:02:83:4e:
7f:8e:b6:06:af:54:67:f0:cb:fa:9d:a4:2d:c3:b5:
6a:f5:4e:58:20:20:0d:4e:df:70:a7:18:72:b9:80:
f6:92:0b:d2:7f:73:56:ce:cc:5e:9c:5b:52:67:7b:
77:9a:dc:6a:5a:e6:8e:64:31:25:57:6c:37:c0:0d:
34:f3:42:53:fc:1b:1d:b5:b7:af:63:1d:e1:cd:7b:
a3:c4:d1:02:50:67:67:bf:37:21:c2:55:83:73:d7:
36:d5:a0:7a:6f:35:ba:d6:d2:d5:43:eb:15:fd:e1:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:30:1D:78:A1:2C:E4:21:06:E1:52:6D:25:F7:6A:04:49:BE:88:19
X509v3 Authority Key Identifier:
keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6d:cf:b9:66:73:1c:f6:ce:01:f9:81:c8:2e:44:5c:b6:73:
61:ca:f7:a0:e8:35:e0:c4:b9:87:d2:3f:97:65:82:5c:32:67:
7d:7d:ed:b2:da:80:d7:ea:ab:92:f4:9e:6f:30:5e:a8:e9:ea:
e8:5f:ed:f8:f4:f1:85:37:00:ed:ea:a4:62:f6:43:c4:94:5e:
50:3b:3a:93:32:db:d8:1d:78:b1:99:c6:29:65:79:91:9c:be:
f4:27:a3:d1:0c:ab:a3:b2:13:37:2f:d9:1d:43:af:63:80:c1:
d9:57:bf:f4:11:40:31:d0:50:1a:38:f2:68:f7:57:0f:7a:12:
96:6e:54:e6:3a:dd:0e:e4:07:ac:c1:09:ff:23:79:53:5a:1d:
4f:76:16:b0:3b:0d:91:e9:e0:98:84:07:4b:35:f3:20:5e:4d:
d3:4d:19:70:d9:e0:6c:54:ab:fe:bb:09:66:75:89:7c:7b:c1:
92:de:7f:ef:61:9b:ab:13:89:0a:78:f1:e8:6d:5a:f6:3a:70:
b5:3b:c7:01:c8:4a:d9:58:66:60:62:bc:53:4a:24:6d:30:fd:
85:ef:1c:d3:d0:7e:d1:d8:9b:34:c4:f3:d5:6e:15:4f:f4:2e:
cd:b0:38:dd:41:c7:b8:c4:6a:25:d0:9b:22:c1:b1:a4:a0:a3:
40:c3:1a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:29 2025 by rpki-client