Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: Ogh8bGNUk5lduZqVfClqMkezmekKZF0IUMQVucLeKvk=
Subject key identifier: 81:C7:AE:48:C6:D7:74:D3:1D:AD:6B:A2:E6:F7:23:70:4D:CB:62:3A
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 0194C42C116F16B2A4038FA331559E38BD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 0911
Signing time: Sun 02 Feb 2025 01:00:09 +0000
Manifest this update: Sun 02 Feb 2025 01:00:09 +0000
Manifest next update: Mon 03 Feb 2025 01:00:09 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: lgACD8ibWc02Q180Xvbpx/5WAe2+BbeANczABK/Wv4A=)
2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:11:6f:16:b2:a4:03:8f:a3:31:55:9e:38:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Feb 2 01:00:09 2025 GMT
Not After : Feb 3 01:00:09 2025 GMT
Subject: CN=81c7ae48c6d774d31dad6ba2e6f723704dcb623a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:28:45:45:0a:38:d0:70:7a:4f:96:51:ab:
bf:30:0f:6c:41:71:58:fc:a8:ac:6d:05:dc:56:87:
6e:e7:62:05:d0:56:7a:11:99:68:23:59:fc:eb:a5:
f6:27:ba:26:90:43:9e:45:41:a6:ea:fb:34:fb:f2:
31:20:46:5a:bb:67:8c:bb:bd:b9:4e:a0:5a:cc:d9:
e8:c6:4a:57:47:2c:41:2c:48:80:84:59:76:29:d6:
8d:37:ce:86:8b:ab:97:5a:e4:92:a6:44:f8:ad:d8:
22:dd:47:25:21:cc:5e:31:8e:ac:1d:36:a0:dc:27:
e1:bd:73:3a:8e:24:17:51:1c:42:03:7d:c2:7b:05:
73:e6:f8:37:3a:ef:06:58:b6:17:7b:bf:ea:35:9b:
e5:f0:1f:01:81:d0:bf:5e:1e:73:92:06:ab:96:ff:
d2:ae:6b:e3:b1:23:52:79:b7:c0:fd:3c:6e:ea:d9:
b3:82:fc:12:6d:4a:45:41:d7:46:4a:71:9d:38:44:
93:d9:55:0c:79:96:3f:2a:44:9a:75:d4:47:6d:ab:
51:cd:c3:ce:ea:c1:9b:0f:d2:a7:73:ff:8d:b4:d1:
c2:e3:b2:1e:ee:51:a7:b8:c5:b0:28:50:64:31:a6:
97:d2:3c:38:43:7c:a7:e0:aa:98:2a:ef:bc:c2:34:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C7:AE:48:C6:D7:74:D3:1D:AD:6B:A2:E6:F7:23:70:4D:CB:62:3A
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f8:f2:df:fb:be:0f:f1:62:10:28:7b:58:3c:fb:b3:ed:5c:
6f:34:cf:84:2e:f7:e7:26:6c:81:52:93:8a:d3:b3:9b:dd:6d:
a4:ec:33:f3:5f:36:06:94:86:8a:66:7b:5e:26:8b:31:c8:97:
6f:dc:ae:08:c7:20:ad:fd:f1:2c:c3:54:b0:75:c4:42:e7:23:
08:00:c3:6c:89:d7:69:1f:30:be:47:42:ab:0c:02:d4:72:7b:
b7:9e:87:67:04:9f:12:44:33:a1:a2:2e:fb:49:6e:10:36:02:
7d:e1:4c:ce:57:6f:b8:29:30:c1:a1:78:6f:a5:fb:46:69:c0:
d0:2e:6e:da:9f:74:5c:0c:32:27:61:8f:fd:83:7b:62:fc:9c:
0b:f3:33:ac:6d:d2:8a:ba:5e:1e:d2:f6:00:cf:f9:41:d9:31:
6b:0a:c8:f0:fd:25:db:f7:f4:66:c7:7f:06:33:23:a5:55:48:
af:1d:a4:32:3e:92:fa:76:1b:07:bc:44:07:da:0f:b7:d4:bf:
a6:9c:c8:ae:45:75:50:f0:88:05:ca:06:25:d6:d2:f2:fc:19:
cf:0e:d9:55:aa:14:92:a3:7c:11:40:6a:0e:b2:fc:76:ab:a9:
c0:e0:a1:2f:3f:f0:62:31:55:09:02:fb:55:17:5c:20:53:d1:
21:86:69:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:48 2025 by rpki-client