Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
File: qK9MCjctAUVV99TXyJz5lvBRQvU.mft (raw, json)
Hash identifier: 0Gk/4v/ETAw9w/Vw++0wmq6eL5ilNY1IpmnVQi4OKe4=
Subject key identifier: 48:5A:30:24:39:CF:C8:23:37:36:D8:8F:46:B4:81:BA:C0:E7:2C:6B
Authority key identifier: A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
Certificate issuer: /CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Certificate serial: 01968B4A8599FB56F700EA8EA49D7D02BC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
Manifest number: 02AD
Signing time: Thu 01 May 2025 10:00:38 +0000
Manifest this update: Thu 01 May 2025 10:00:38 +0000
Manifest next update: Fri 02 May 2025 10:00:38 +0000
Files and hashes: 1: qK9MCjctAUVV99TXyJz5lvBRQvU.crl (hash: IjNrzQUXe0ZoviWRLAqDVW72MPcTzTRbkxcSk0Jeo1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:85:99:fb:56:f7:00:ea:8e:a4:9d:7d:02:bc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Validity
Not Before: May 1 10:00:38 2025 GMT
Not After : May 2 10:00:38 2025 GMT
Subject: CN=485a302439cfc8233736d88f46b481bac0e72c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:84:01:df:4f:0f:2e:32:fa:08:2e:f0:35:
bf:f3:db:2a:54:34:f7:85:41:20:52:1d:c1:1d:f4:
30:2d:0a:c9:55:00:89:6a:b9:af:64:df:84:e1:8c:
f1:93:0a:0e:b2:ec:de:4b:55:e3:f2:6b:ee:ca:8b:
e3:86:43:3f:b3:b6:3e:92:ff:f2:c6:a0:29:f6:37:
8b:5b:cc:d5:5c:63:83:0a:3e:8b:27:4d:f3:6e:2b:
46:9a:6a:27:51:a4:d5:c4:22:f2:66:57:0c:e4:30:
fe:ad:f7:4c:82:8d:d6:c9:bb:42:56:ae:26:37:cd:
81:d6:3f:7c:16:30:78:e4:5b:a0:5d:07:f0:5a:a1:
69:bf:60:42:10:9b:e8:0c:d9:09:50:5a:77:1f:8b:
5d:a0:4c:e3:dc:60:b6:18:05:26:2d:63:49:0d:3b:
ac:c3:e3:c3:1f:7b:b7:90:c5:5d:54:a0:b1:49:00:
2c:a7:67:e6:d8:30:01:90:18:6b:14:ac:c2:f5:6d:
0c:e3:4e:75:44:54:49:56:4d:18:dc:a2:cd:48:01:
40:c3:4f:10:e4:c4:e1:e3:01:c4:b3:9b:da:9b:d3:
55:a9:56:02:f3:46:e7:17:20:7d:29:99:31:e8:2b:
7f:85:66:83:b4:85:0e:87:2a:83:28:6c:dc:7c:89:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5A:30:24:39:CF:C8:23:37:36:D8:8F:46:B4:81:BA:C0:E7:2C:6B
X509v3 Authority Key Identifier:
keyid:A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f3:e4:65:f7:90:e6:a0:2f:38:9a:0a:b8:e2:86:a1:c7:2f:
f8:2b:fe:70:67:e1:e6:44:7c:7c:81:ed:7d:37:f8:9b:6f:dc:
cd:8d:9e:93:d8:9b:40:fb:be:5c:5c:31:57:f5:c8:08:18:99:
31:ce:c5:82:b6:0c:26:11:51:12:19:05:97:84:d6:c5:70:05:
90:f4:12:84:0c:eb:b0:3b:4c:a2:0f:f3:d5:68:c4:4e:df:dd:
15:5d:5c:af:64:75:95:4b:d1:9d:30:08:e0:84:c9:dd:91:82:
2f:cd:24:1a:cf:64:48:d3:65:8d:56:b5:fa:fb:44:e4:f4:35:
fb:8e:da:87:b1:ab:28:74:b3:5f:1c:3c:23:a6:80:25:c5:d4:
57:ad:56:18:cd:34:09:34:2a:c9:fc:68:82:f5:6a:87:09:47:
f7:07:92:cd:49:88:2a:d0:7b:9b:2d:38:c4:14:9d:31:8a:dc:
2a:4d:d4:b9:7d:b3:1e:01:89:c4:66:14:71:6c:80:cd:3e:2c:
a4:00:26:29:05:49:22:23:9f:2d:57:8d:e2:0a:2a:0e:c3:e3:
0f:04:d1:99:21:59:06:bc:3e:64:a6:ed:11:e2:c5:da:96:04:
f4:c8:79:e1:eb:69:a2:10:18:fb:39:31:38:d7:86:0f:6e:b5:
1f:bd:b0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:13:02 2025 by rpki-client