Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: UJ5q2x5DVcFWcToS1QoX7BZj/IQJ9dq2M+PEUeemJH8=
Subject key identifier: D7:6D:67:9A:8A:4B:0D:FA:64:14:07:EF:4F:E4:D2:54:EF:8B:64:BB
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 01935809255430B693FF29542A9497B6C10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 01CB
Signing time: Sat 23 Nov 2024 08:00:14 +0000
Manifest this update: Sat 23 Nov 2024 08:00:14 +0000
Manifest next update: Sun 24 Nov 2024 08:00:14 +0000
Files and hashes: 1: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: tu1tosj/+B0OIzroFexw3JIzTunlS+FM7FeLHRRXWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:25:54:30:b6:93:ff:29:54:2a:94:97:b6:c1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Nov 23 08:00:14 2024 GMT
Not After : Nov 24 08:00:14 2024 GMT
Subject: CN=d76d679a8a4b0dfa641407ef4fe4d254ef8b64bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:1b:80:8d:e9:bd:dd:ab:ca:bc:a4:02:4f:
22:84:ad:4e:f1:08:71:a2:a8:ca:85:e2:96:4d:46:
6a:0f:af:e8:29:48:2e:7f:7d:00:b8:87:de:58:6a:
63:f2:79:29:78:06:d3:79:4a:4d:4b:84:be:e7:3c:
a6:1c:98:9c:8f:90:6c:71:46:76:cb:d0:c1:17:ae:
e7:cb:d3:f4:f5:e7:79:3b:37:5b:33:c1:12:d4:d7:
c2:6a:07:04:07:b9:59:2e:7e:65:a1:cf:eb:55:eb:
0e:97:5f:92:71:a2:c5:b9:2a:5c:7f:89:8e:3a:ce:
e6:01:7c:ff:b4:df:2c:6b:d6:e5:67:33:9c:61:d5:
56:15:55:19:88:86:05:e7:c3:18:6b:1d:be:c4:63:
d1:aa:12:85:3b:40:2a:75:bd:95:7f:4d:b0:31:8b:
f8:9f:da:9a:fe:ba:01:29:f2:05:0d:3c:27:71:16:
68:af:c9:2b:b6:5c:29:e6:33:33:70:1b:98:d9:85:
8b:bd:c5:1f:85:53:e9:4b:32:71:b7:c9:86:a0:d4:
de:2d:25:47:60:44:e6:51:a5:c9:e8:49:6e:60:db:
7e:2d:57:55:3e:1a:3d:16:b5:97:55:3a:9c:99:f6:
e0:9c:6f:d3:ec:99:91:4e:b4:5b:57:90:6e:9f:ac:
81:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6D:67:9A:8A:4B:0D:FA:64:14:07:EF:4F:E4:D2:54:EF:8B:64:BB
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:13:96:28:43:bb:3d:11:71:35:b4:94:9c:40:9e:af:15:3b:
ad:54:0e:3d:e9:b5:81:c6:12:3d:a7:36:b9:a0:5c:e2:eb:cb:
60:ad:32:b2:3e:77:71:68:17:cd:2e:f0:2d:0a:65:61:2d:6c:
aa:ca:e9:d4:85:c3:ee:f5:2f:9d:64:f6:f4:f7:62:1a:be:f0:
6a:70:d2:a4:9d:70:2f:69:ed:a4:24:34:d1:19:37:da:c5:e6:
ba:a8:96:c1:ff:e6:89:1a:b7:03:53:17:50:3b:97:be:d5:5e:
07:ba:21:94:5c:7d:ca:e5:ee:b7:a3:2b:c7:b7:56:38:32:59:
f0:bb:90:4d:1e:9d:26:da:6a:c8:9a:ff:6f:9f:b8:cc:35:57:
05:56:74:fe:e0:d6:90:45:9e:53:06:0a:d2:c3:84:1c:80:df:
13:84:d9:89:a4:69:93:a5:a8:ae:c2:5b:77:d9:66:0f:14:f7:
97:e5:68:bd:d9:c2:12:f4:b6:03:0d:b1:d8:38:d9:77:dd:76:
38:c7:a9:df:2a:1d:6c:14:d7:9d:ed:3f:62:36:1d:67:d9:96:
cf:6a:ce:ae:56:31:da:b8:a3:54:30:a2:06:c7:bb:63:b0:0d:
d4:80:f2:92:e9:ef:e6:2b:d7:c9:1b:3e:8b:46:b9:55:83:a3:
9d:9c:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:42 2024 by rpki-client on console-fra.rpki-client.org