Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
File: r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json)
Hash identifier: G25bjG0aNAXDJSqqZW+eN++yJg9JStLPz5Lcs6Q6mVo=
Subject key identifier: 4E:1F:2D:3F:C7:38:F7:4B:BF:AA:B4:FB:9E:A2:3B:2C:6D:63:1A:0E
Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
Certificate issuer: /CN=af542dad0baede4a8b1150f459a03f011cdba654
Certificate serial: 01967F0F90E6292F124A3602514095AC6038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
Manifest number: 01B9
Signing time: Tue 29 Apr 2025 01:00:48 +0000
Manifest this update: Tue 29 Apr 2025 01:00:48 +0000
Manifest next update: Wed 30 Apr 2025 01:00:48 +0000
Files and hashes: 1: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: JJqU1fXj+ppO0fUb12yIXMY+dClLO7aW+JxyTWqKrFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:90:e6:29:2f:12:4a:36:02:51:40:95:ac:60:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654
Validity
Not Before: Apr 29 01:00:48 2025 GMT
Not After : Apr 30 01:00:48 2025 GMT
Subject: CN=4e1f2d3fc738f74bbfaab4fb9ea23b2c6d631a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:04:40:eb:96:32:3d:c1:2e:e4:36:cc:b6:
cc:89:a4:b6:5d:5b:2c:f8:f9:e0:98:7b:5f:3b:d0:
14:18:cc:94:b5:b8:e5:4e:4c:de:8e:0e:6d:1f:e1:
7b:d6:ce:d0:e6:38:01:3d:b2:70:2c:93:f8:b2:f1:
df:64:20:2f:65:47:0c:8a:1b:e6:a2:26:e9:05:c4:
4c:42:32:fd:82:43:8a:b2:33:9d:0f:67:0b:61:f0:
82:a7:f3:74:f5:0c:ca:6e:89:e3:8a:f2:b2:f9:df:
dd:ff:a8:0c:b4:f5:b4:af:5f:9f:fc:de:80:c4:fe:
7e:dc:ee:5c:e8:4f:64:66:22:91:16:df:22:95:b4:
d1:3a:5d:3a:6c:73:cb:cd:c0:c7:98:57:b5:53:27:
d6:63:0d:d7:b4:bd:9e:63:4f:c7:ff:41:e3:6f:92:
e5:1c:74:9e:28:5e:b4:8e:97:12:fe:d6:21:73:8a:
d9:f5:9f:7f:d0:41:5f:da:d2:ff:fa:df:94:cf:bd:
1d:ae:f6:c6:aa:c1:19:46:45:c9:ed:6f:47:98:e6:
00:a9:a2:8a:4d:d7:76:37:e9:ed:59:49:51:14:f1:
25:bb:7b:10:ef:4b:e1:3d:71:95:d3:ed:5a:63:ff:
b9:ac:7d:29:68:76:13:6e:24:a8:18:3b:f7:b7:dd:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:2D:3F:C7:38:F7:4B:BF:AA:B4:FB:9E:A2:3B:2C:6D:63:1A:0E
X509v3 Authority Key Identifier:
keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cc:d1:c3:b6:9f:53:a2:e7:e8:c7:b5:ff:2d:ce:aa:00:ee:
d8:cf:8b:12:df:5d:62:14:9e:45:94:64:24:bb:0f:30:11:ae:
8b:92:fd:7f:c6:8a:59:1d:8a:6f:5d:4d:26:97:52:0c:07:17:
b3:4c:18:be:ce:89:9c:d2:a3:88:6b:5d:05:2b:d6:a4:b0:c4:
bc:59:5b:fa:2a:44:62:b7:05:78:64:8b:bd:72:d1:ba:d1:22:
01:9c:a0:6b:c5:c5:7c:27:24:bf:a8:fc:e9:4d:0d:c2:38:ff:
51:ba:f2:14:c5:5d:b1:8d:5d:9a:3f:60:52:9b:68:2f:af:cf:
00:7f:48:06:12:f5:0f:48:23:5a:fd:be:b7:5f:f7:94:14:0e:
25:8e:41:2a:38:c2:c6:c0:7c:3b:d3:47:45:c5:fa:a0:ab:1c:
fe:fb:a8:9e:26:02:2c:c1:a0:fc:8c:97:a5:ae:d4:13:f1:2e:
18:6a:10:8c:90:8a:dd:f7:43:23:04:a2:a4:3b:4d:77:66:d3:
23:16:4a:42:95:c5:40:87:b9:e8:c0:db:94:fe:19:34:6f:d9:
a6:82:83:b2:86:48:55:b1:6d:dc:77:2a:9e:c9:01:8c:4f:46:
78:4c:0a:f8:97:88:7b:12:a2:58:41:79:dc:09:d1:b3:cb:49:
3d:99:73:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:32 2025 by rpki-client