Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
File: QucVYSpqaXFPXj8uTLxI_OhKb1I.mft (raw, json)
Hash identifier: ohqXOQCyfHH6+B3QHRshn7DOiyXBlRGNBGzq2t35CSU=
Subject key identifier: F8:62:9B:53:89:83:10:18:14:6E:62:9B:56:76:60:C0:ED:E3:7F:9B
Authority key identifier: 42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
Certificate issuer: /CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Certificate serial: 0194C3F5F7B32B058913EC022226D690C21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
Manifest number: 142B
Signing time: Sun 02 Feb 2025 00:01:04 +0000
Manifest this update: Sun 02 Feb 2025 00:01:04 +0000
Manifest next update: Mon 03 Feb 2025 00:01:04 +0000
Files and hashes: 1: QucVYSpqaXFPXj8uTLxI_OhKb1I.crl (hash: BZCefE/Pm99zUSb5wd5cKjr91vJA976sVVb43qS6bcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:f7:b3:2b:05:89:13:ec:02:22:26:d6:90:c2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Validity
Not Before: Feb 2 00:01:04 2025 GMT
Not After : Feb 3 00:01:04 2025 GMT
Subject: CN=f8629b5389831018146e629b567660c0ede37f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:69:03:7c:ac:49:90:c0:c2:79:d6:12:8b:
8a:7c:0d:0e:ba:8f:24:0c:f3:be:fd:19:7f:80:6c:
a3:85:5e:fd:77:f4:b6:e0:c6:0c:f5:cd:cf:33:47:
60:de:51:60:cb:28:4d:4e:4f:82:6b:fb:7f:43:e8:
0a:d2:20:9e:2a:62:d8:9c:94:4c:bc:8c:b9:04:3c:
64:16:89:cb:fe:1d:b9:06:4e:5f:70:33:03:00:cc:
59:8e:54:32:ec:44:59:56:a3:2b:80:c6:11:dc:56:
f8:f2:de:ad:c4:95:eb:f7:3e:45:35:67:35:ef:97:
16:b9:83:d5:4c:76:dc:fd:8e:88:fc:e7:09:13:60:
55:65:2b:8b:28:4f:e2:0a:86:5a:7b:93:5f:61:2a:
b6:2c:15:79:9e:6d:61:7d:41:23:c7:57:95:81:4b:
20:d2:78:78:50:df:0a:42:5c:b7:06:b5:1f:87:24:
21:d7:91:0d:4e:5e:d4:0f:50:a6:64:2d:b4:fa:e8:
24:86:a1:2c:6d:ed:ea:1e:67:58:bb:b9:2d:4c:2f:
92:1e:54:97:74:0f:69:f8:1c:61:1e:f7:14:51:0b:
a0:e0:6f:61:6d:5b:14:cf:5e:3f:9c:80:f6:4d:ac:
34:84:6a:2b:a3:f2:c6:b3:be:51:ec:62:9e:97:02:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:9B:53:89:83:10:18:14:6E:62:9B:56:76:60:C0:ED:E3:7F:9B
X509v3 Authority Key Identifier:
keyid:42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8d:32:0a:e5:d9:66:b6:55:b3:7a:68:d2:b7:98:c7:31:58:
3d:10:e4:10:3e:bc:15:72:b8:d7:e3:00:e0:11:44:8e:ab:0d:
70:ae:98:6c:e2:09:7b:d2:00:51:7b:e2:77:6e:13:fa:89:c8:
2b:8e:ba:ed:80:4d:64:24:4d:cd:8b:30:08:99:d6:81:b2:2f:
b0:53:47:ae:11:f2:02:2a:b0:11:47:b0:ff:5f:a6:6b:df:00:
6a:ea:51:da:06:92:01:bd:e6:f1:e0:8d:d8:9e:a6:c3:51:e8:
8f:7c:92:9d:38:40:05:32:05:d3:75:b0:fe:76:3b:a5:d9:26:
74:bc:d1:ab:0d:12:10:08:9d:c5:b3:38:9d:80:66:4a:4a:93:
a7:2e:52:a1:ea:ff:31:b2:2f:af:e4:46:f0:2c:d5:d0:db:69:
d6:87:5c:c2:91:67:12:df:55:2d:b3:d2:6b:4f:2e:b1:d0:14:
e4:54:95:6e:e4:98:2f:a4:00:35:7f:ab:71:25:6e:b2:15:5a:
fd:f1:8a:a1:94:0e:0f:16:0c:8c:92:7f:79:fa:41:78:a4:6d:
4f:35:3e:04:68:e6:b3:71:64:a0:82:8a:84:11:4a:cb:0a:b3:
33:85:74:76:32:26:0b:e0:de:5b:5e:b5:98:7b:0b:7f:6a:df:
47:39:01:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:01 2025 by rpki-client