Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
File: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft (raw, json)
Hash identifier: 9lG91+N9ng5pDX7tUUQc7flHwl+MgW/MG432CnYVY54=
Subject key identifier: D8:BD:DD:16:81:D3:6A:EE:9E:53:C1:B7:17:72:A1:A0:E8:55:A2:41
Authority key identifier: FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
Certificate issuer: /CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Certificate serial: 0196760BDAAAAFE41E1122951DE0642D8400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 07:00:10 +0000
Manifest this update: Sun 27 Apr 2025 07:00:10 +0000
Manifest next update: Mon 28 Apr 2025 07:00:10 +0000
Files and hashes: 1: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl (hash: KmHvBZopxz1HPDe/wg9Fd23nZ7pq09ufi830USobcao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:da:aa:af:e4:1e:11:22:95:1d:e0:64:2d:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Validity
Not Before: Apr 27 07:00:10 2025 GMT
Not After : Apr 28 07:00:10 2025 GMT
Subject: CN=d8bddd1681d36aee9e53c1b71772a1a0e855a241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:96:8f:52:40:79:5e:db:19:3f:dc:4c:7a:
95:b5:b8:f1:73:f9:30:50:e7:66:ef:91:44:1d:b2:
dc:de:81:9b:87:0f:53:54:0d:e9:9d:c8:ee:70:2c:
7c:d5:de:c6:e4:ce:44:9a:af:51:b4:8d:4c:85:65:
dd:a0:53:99:89:53:4f:34:8f:f1:1d:89:06:14:df:
a7:9c:0b:ec:48:8c:31:0c:50:a6:d2:dc:ce:26:13:
61:b0:de:92:6e:fe:94:07:b4:4f:47:d9:59:a8:ec:
60:3f:fa:02:ba:3d:a3:cf:1d:29:db:fb:55:60:94:
97:18:97:0b:2b:a3:42:e9:c2:4c:7b:c2:43:2d:0a:
42:46:85:c1:95:85:6c:b5:99:64:50:e5:18:89:02:
b2:b1:3c:e9:08:e2:35:b6:54:26:2b:3d:56:62:5e:
62:05:81:82:19:a0:9d:db:02:45:84:13:df:f3:55:
73:a3:46:f9:4a:4e:5f:92:20:ba:c1:90:e4:8c:17:
57:99:9a:9b:30:27:66:49:a0:1b:05:97:3d:d2:2a:
9c:96:ed:13:f4:d1:0d:f1:c6:c2:c5:95:6c:50:3f:
f4:f1:fe:ba:d1:50:83:12:27:af:2e:bc:5f:6d:79:
c3:45:fb:0a:87:6f:d3:27:66:9a:03:2b:00:8a:37:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BD:DD:16:81:D3:6A:EE:9E:53:C1:B7:17:72:A1:A0:E8:55:A2:41
X509v3 Authority Key Identifier:
keyid:FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ae:c5:10:0b:63:26:17:75:8a:cb:8f:26:b0:bd:43:d5:09:
a3:90:9c:a2:96:2f:4f:f4:1a:8a:b4:52:4c:18:e3:a4:32:9b:
3c:20:63:2c:6a:8f:dd:0c:49:42:61:0d:28:d4:ea:ba:a8:ea:
08:92:49:e9:c8:76:23:8d:da:de:b0:85:ab:86:b2:0b:c0:e0:
e8:8c:cc:5a:ab:b5:7d:85:01:8e:e7:24:39:19:25:43:06:d8:
d3:05:54:15:af:5a:72:b4:6d:1f:4d:9b:08:eb:d6:02:b2:67:
6b:ea:b0:9c:dd:39:90:93:fe:f1:8c:e0:18:17:e2:8c:c2:4f:
f2:cd:22:a0:3c:7b:e9:b6:ed:23:4e:97:92:c5:3a:db:bb:a4:
3b:a5:f6:d6:24:92:89:49:9c:54:89:11:5b:36:56:53:b5:7e:
53:6d:8c:89:44:88:8a:58:22:ee:a6:8d:61:e8:05:05:dc:c9:
a7:c9:ac:68:ae:60:79:fd:61:dd:a0:88:78:e9:81:00:f0:73:
94:ea:e3:2f:68:fb:64:a0:66:9e:e3:71:1c:4e:8a:ab:f0:9b:
ea:ae:e0:af:7e:a6:df:db:36:d4:6c:66:52:0b:6d:ad:c8:aa:
c4:d7:0a:63:d0:b0:11:5c:12:8b:de:a7:cd:fc:e7:ee:39:14:
f5:d2:00:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:12 2025 by rpki-client