
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
File: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft (raw, json)
Hash identifier: pd1GkXjLmJP+Lo4urSdcbIl0Y6g6QM2J/61pcvZBXI8=
Subject key identifier: 9F:E9:0F:45:48:4A:7E:FA:9D:29:93:C6:D4:99:2A:35:CB:77:7E:37
Authority key identifier: 7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
Certificate issuer: /CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Certificate serial: 01968AA634CA48F07B97A81C7DA2B2995845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
Manifest number: 070F
Signing time: Thu 01 May 2025 07:01:10 +0000
Manifest this update: Thu 01 May 2025 07:01:10 +0000
Manifest next update: Fri 02 May 2025 07:01:10 +0000
Files and hashes: 1: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl (hash: 0WOLAS/EuyqokGNB5JigC55p/p60o+6/+iOSdUnweqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a6:34:ca:48:f0:7b:97:a8:1c:7d:a2:b2:99:58:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Validity
Not Before: May 1 07:01:10 2025 GMT
Not After : May 2 07:01:10 2025 GMT
Subject: CN=9fe90f45484a7efa9d2993c6d4992a35cb777e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f1:41:1c:49:3d:7e:71:bb:64:9e:8b:e1:cc:
59:cf:85:5b:25:8f:72:8d:5d:d6:19:2d:39:a1:98:
5f:55:78:08:8d:51:33:ea:e9:6e:d6:ff:79:af:fd:
7f:5e:b6:0a:34:3d:23:7a:b7:77:2a:29:f8:33:75:
67:6d:03:00:b7:2c:94:62:f4:41:c9:d5:b7:de:06:
c0:b9:0a:7f:c2:fa:13:bd:a5:6c:f5:0e:bc:e5:b8:
75:ca:53:4e:a5:99:75:ea:29:20:9f:35:b5:2f:d1:
3f:47:aa:12:3a:38:b5:aa:5b:bf:18:b8:1d:c0:27:
cc:9f:ee:c3:ef:e4:6a:a4:95:7a:6b:3e:51:53:5e:
12:b5:75:9f:79:ca:96:05:00:85:bf:a0:26:4f:17:
cb:77:ce:95:70:ca:d5:1e:0d:be:17:61:b2:7a:68:
44:86:81:c1:77:a1:db:6f:17:05:d3:3d:e2:6a:37:
2d:ad:21:4b:e4:a3:d4:6b:b5:e2:ed:1a:ff:d9:4c:
5f:75:a3:04:0e:0b:9a:8b:38:f0:d4:01:3c:b9:3c:
e8:cb:b3:0b:7d:8a:28:1f:0c:85:d8:b2:2d:e2:c6:
86:c2:d5:e9:42:c1:01:98:14:24:d8:a7:55:3a:d1:
0c:2b:7b:58:40:33:c4:1e:9c:88:b4:88:6e:1d:83:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E9:0F:45:48:4A:7E:FA:9D:29:93:C6:D4:99:2A:35:CB:77:7E:37
X509v3 Authority Key Identifier:
keyid:7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:6e:4e:8c:a7:cb:54:bd:99:47:2e:47:38:68:df:05:ee:15:
7e:87:cd:60:23:ec:1f:15:17:93:33:22:49:16:7a:af:e5:98:
90:eb:63:19:c1:85:bd:61:f4:3d:ba:84:69:2f:3b:b5:22:dd:
0a:77:09:75:8a:26:4c:9a:b3:25:b2:1b:e6:48:a3:23:0c:51:
33:a2:bd:a7:18:f1:65:46:bb:2f:94:ca:1e:e8:25:a8:bf:b3:
8b:75:fd:59:6f:5d:61:49:7e:51:96:b4:43:14:a7:36:80:2c:
b1:c8:74:58:76:1a:dd:6f:5a:44:13:65:aa:ad:25:9b:cc:d3:
79:f0:e2:90:ee:aa:e2:16:55:d9:09:5f:f4:c3:45:43:2b:ea:
22:8c:c3:58:37:a4:95:9d:09:1f:fb:78:12:60:50:3e:16:6d:
dd:d6:66:40:92:96:60:26:69:22:6c:9e:2e:1c:bd:5d:28:5f:
43:51:79:37:2a:b6:27:a5:b9:e2:cb:50:e4:82:b8:fa:57:0b:
09:52:75:1c:75:1b:ef:2f:3b:c3:4a:16:47:df:a1:76:1f:31:
f1:c7:a5:4c:c5:6c:a2:90:9e:75:84:72:74:b8:a7:8a:92:fc:
a0:94:dc:0d:cd:5d:8e:51:9c:bf:38:84:52:10:90:70:dd:9a:
ff:05:09:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:03:40 2025 by rpki-client