
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
File: qKI6ziwGf44hL_NZ2pbCBYtks-o.mft (raw, json)
Hash identifier: ErPff+dv1zeU+PJGrCe9buHCGFI4YxLBZKnUuveQKNw=
Subject key identifier: 3D:F7:40:0A:5B:73:B0:01:52:88:AD:AD:D6:0A:A9:B0:2B:E1:F3:92
Authority key identifier: A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Certificate issuer: /CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Certificate serial: 019674C24EF661F77B4D530281FE184355B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
Manifest number: 0541
Signing time: Sun 27 Apr 2025 01:00:13 +0000
Manifest this update: Sun 27 Apr 2025 01:00:13 +0000
Manifest next update: Mon 28 Apr 2025 01:00:13 +0000
Files and hashes: 1: qKI6ziwGf44hL_NZ2pbCBYtks-o.crl (hash: jJiQJk2W3S/RolT2uNhF09Ddczy5uiO1Lb1um8D08Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:4e:f6:61:f7:7b:4d:53:02:81:fe:18:43:55:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Validity
Not Before: Apr 27 01:00:13 2025 GMT
Not After : Apr 28 01:00:13 2025 GMT
Subject: CN=3df7400a5b73b0015288adadd60aa9b02be1f392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:c9:b0:4d:fb:8a:ea:86:a7:0f:fa:f3:66:
6f:8f:57:00:7c:62:7f:90:1b:2c:7c:ad:db:01:f3:
f6:e8:05:b5:87:a5:d6:e3:41:95:41:34:ed:fe:21:
fd:91:4d:23:75:ba:5a:fa:53:42:2f:22:46:f7:46:
5a:ab:8f:6e:dd:27:75:f1:55:1a:ec:26:58:d5:fc:
b3:c9:a6:80:d2:e6:76:68:31:ea:8f:c2:30:32:ae:
c9:36:6e:40:90:64:04:ba:97:56:ef:77:50:60:fe:
8c:19:26:2c:2b:a9:82:6c:70:79:3f:95:a4:14:5b:
b5:ef:b9:5c:15:8e:63:be:c7:7c:6b:15:01:ec:b1:
5f:86:f7:29:80:79:e8:07:17:bf:e5:e7:b9:a7:63:
21:8b:88:f7:7b:df:3b:60:a7:f7:31:f6:d6:51:dd:
e8:cb:48:46:8b:01:3c:1d:50:29:d6:5d:5a:52:04:
11:06:9a:14:9e:43:6b:b3:2e:81:6f:12:1a:22:3a:
6d:5f:e7:d6:09:be:89:48:f8:cc:bd:88:5d:dc:47:
56:64:90:3a:7b:72:d0:57:93:70:00:e0:ca:36:9b:
8d:52:45:2d:5e:f5:dd:60:3d:73:b5:1b:11:d6:60:
7f:df:95:c3:3d:0f:8c:9e:43:4b:3d:e5:9e:8d:0d:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F7:40:0A:5B:73:B0:01:52:88:AD:AD:D6:0A:A9:B0:2B:E1:F3:92
X509v3 Authority Key Identifier:
keyid:A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:84:a5:14:9c:60:99:10:8e:c2:17:71:6b:d5:cf:c7:18:05:
5b:e5:a4:76:5f:43:89:d2:8f:b1:02:4e:44:1c:59:7a:01:78:
f5:8c:d6:58:cf:da:e3:9c:ca:59:8c:89:7a:ff:f5:71:08:42:
71:72:86:57:7e:9a:19:c2:d4:84:6b:f1:a3:20:6a:6e:7a:ce:
1e:7a:81:c1:2d:c4:da:b6:3a:ac:ed:58:57:67:50:d4:d4:87:
7f:f0:c8:23:52:ba:5e:6d:3d:31:da:85:32:2a:8c:ac:cd:4d:
20:fb:fe:14:4a:66:56:ee:42:d7:db:30:86:1b:e9:a3:d3:93:
a9:4c:00:75:8d:a0:4f:4b:c7:bd:22:d8:8a:53:9a:00:9c:18:
69:44:ca:1f:81:0a:ef:44:77:3c:21:61:3a:ed:08:0e:30:b9:
d5:4f:6a:2c:57:ba:c5:dc:0c:9a:cb:f3:81:ee:c9:98:e5:69:
5e:dd:04:29:72:18:93:1b:2e:97:a3:1d:5e:f9:16:88:44:f5:
c3:6f:24:9b:68:83:92:d8:2e:96:4f:74:75:f8:fa:ba:65:39:
ff:87:69:af:34:c6:a0:63:28:b3:4b:51:e3:5c:cb:4f:8d:e7:
ca:72:c7:05:79:78:a1:cf:e0:64:83:c6:50:8a:17:03:70:cb:
2b:3e:0f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:35:59 2025 by rpki-client