Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier: HNdnvhkVBa/TkjHXAtkK8yiEAjGZGGNkHPUkepEyfzU=
Subject key identifier: C2:A1:10:DE:C2:FD:45:03:A0:D8:88:CE:6C:73:A2:38:17:8B:AE:E3
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer: /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial: 0194C387E4D6A1A40BCCD67EADCF1B329E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number: 0B11
Signing time: Sat 01 Feb 2025 22:00:50 +0000
Manifest this update: Sat 01 Feb 2025 22:00:50 +0000
Manifest next update: Sun 02 Feb 2025 22:00:50 +0000
Files and hashes: 1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: ffjJXkv6gOk1NZbrKcjBQICReqNlzlB1csr7r5gpAnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:e4:d6:a1:a4:0b:cc:d6:7e:ad:cf:1b:32:9e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
Validity
Not Before: Feb 1 22:00:50 2025 GMT
Not After : Feb 2 22:00:50 2025 GMT
Subject: CN=c2a110dec2fd4503a0d888ce6c73a238178baee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:62:8c:91:f4:cf:4d:80:b7:2d:bf:19:a1:
fc:15:cc:5e:f2:d3:37:09:2e:e9:a9:51:f1:ca:56:
7a:15:0e:da:fa:e2:a9:93:73:c7:c1:6e:da:e0:db:
87:7a:e7:a1:85:07:00:f5:22:55:63:2c:d9:fc:c1:
2a:1c:4c:38:52:83:0b:6c:fa:9e:23:6f:9f:13:ac:
e9:47:ad:16:76:e5:6a:18:0b:be:be:47:58:42:91:
4f:2f:07:6e:21:4a:a5:63:e8:af:8d:5f:e9:57:a1:
4f:1a:ed:c9:04:5c:e5:1a:22:06:fc:9c:91:64:80:
ec:b9:bd:af:8e:10:47:84:71:71:49:e7:65:30:e2:
b5:b7:b2:d9:29:d2:b2:62:c6:e6:16:64:83:ff:a2:
ce:9a:4c:e7:8b:31:ba:d5:79:80:8a:51:a0:31:19:
91:67:14:00:a2:c6:7c:3a:2e:0f:37:8d:fb:84:75:
5b:c9:98:e6:3c:3a:0a:74:5a:e7:78:3e:1b:d5:12:
b3:39:37:48:bd:5d:8a:10:16:22:a1:05:ef:d9:0f:
42:a5:d8:19:be:42:8c:a3:53:9a:34:ce:9e:6e:ce:
b0:30:14:50:a1:27:f1:c2:c7:47:90:22:0e:74:f2:
ab:a2:26:f8:a8:33:57:d7:0e:ca:b5:ef:07:1d:35:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A1:10:DE:C2:FD:45:03:A0:D8:88:CE:6C:73:A2:38:17:8B:AE:E3
X509v3 Authority Key Identifier:
keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e1:85:68:c4:06:57:c3:8b:a0:b5:80:70:e3:0b:d6:f3:26:
6d:64:fc:74:6f:a6:00:08:be:26:15:3c:c2:39:bf:12:d2:1e:
38:7a:1e:90:38:ac:a8:fa:6e:98:45:2c:70:90:fb:18:59:0d:
90:51:c0:b2:13:3d:7a:bb:a0:2a:4a:00:2a:49:f5:9f:8d:f5:
51:65:6e:9b:fa:46:04:8e:6e:6b:bb:b6:a2:b2:ff:21:b5:69:
24:3e:b6:07:dc:a0:4a:0a:78:82:0a:55:6a:08:27:3c:80:e9:
cd:23:51:28:11:01:e4:f1:f8:91:be:20:fe:7e:b7:46:91:c7:
cf:80:78:ad:36:d5:96:e6:62:98:5f:26:d1:39:ad:af:94:55:
cc:c2:39:02:19:d1:a2:4a:88:53:f3:9b:a0:88:7c:be:77:15:
1f:a3:5f:eb:89:bb:10:b6:93:31:5a:b8:b7:7c:dd:39:7b:d7:
db:07:56:d5:57:5b:83:cb:5e:6f:98:5b:de:5d:34:67:33:02:
29:83:77:5a:e3:66:cc:f6:38:37:f3:2e:c4:9e:51:8a:98:a7:
a2:75:95:37:7e:dd:4b:3c:71:43:5c:b6:45:b4:fa:17:11:02:
8a:3b:46:30:00:b7:ce:48:4d:d7:62:c1:6a:02:ec:17:92:a1:
f7:80:60:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:47 2025 by rpki-client