Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
File: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft (raw, json)
Hash identifier: eWw9jHbAqPB76l3oSr8L/9f5h1ihOoUCJqHhYBbau7k=
Subject key identifier: 91:67:81:2F:87:87:4F:65:70:83:4C:9F:05:7C:DD:5D:C2:78:DC:40
Authority key identifier: A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
Certificate issuer: /CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Certificate serial: 01968D393BEED16CE43BFF199A55DBDA181D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
Manifest number: 1517
Signing time: Thu 01 May 2025 19:01:00 +0000
Manifest this update: Thu 01 May 2025 19:01:00 +0000
Manifest next update: Fri 02 May 2025 19:01:00 +0000
Files and hashes: 1: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl (hash: ScdA1J1CzV+etMfUUaf8SBemUfFv8OyKBRMlx9HfwSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:3b:ee:d1:6c:e4:3b:ff:19:9a:55:db:da:18:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Validity
Not Before: May 1 19:01:00 2025 GMT
Not After : May 2 19:01:00 2025 GMT
Subject: CN=9167812f87874f6570834c9f057cdd5dc278dc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:f2:cb:2e:2f:dc:3d:f8:9c:dd:8a:c1:64:
3e:1d:da:0c:38:cc:c7:4b:b1:a4:0c:b7:c7:ef:b1:
06:15:99:92:85:b0:32:22:85:8f:3d:ee:08:d2:03:
1d:0a:74:55:7f:85:3d:91:a6:77:3a:b8:35:d6:1b:
91:c7:92:13:43:82:40:c9:83:d1:f6:b9:db:8c:3c:
84:f9:b5:eb:2e:22:d7:2f:62:8e:81:4c:60:9c:61:
67:f5:63:2c:4d:f9:36:11:f1:2d:44:b7:ee:2e:34:
da:ab:fe:2d:51:66:40:8e:4e:04:82:a6:bd:33:ee:
17:8a:69:35:e5:e9:4c:ca:26:db:f0:7a:1d:df:76:
be:ed:c9:44:c2:c1:70:98:34:cf:b7:60:84:9a:fe:
e4:dc:f6:62:3b:89:56:26:57:ba:3e:05:b1:23:83:
49:c7:a6:f2:ee:37:c6:cd:54:94:8b:44:86:9c:24:
eb:05:7c:f1:eb:80:76:0c:b2:bd:d1:f6:6e:5b:a1:
e1:45:73:3f:30:9d:1d:fa:bf:3e:64:9e:24:f8:4b:
67:9b:93:ec:47:c6:ef:0c:ea:b4:82:6e:ad:9b:62:
57:28:f6:15:62:f0:39:c7:97:79:13:1f:93:18:d1:
57:f8:ec:3e:ac:7d:12:9c:2e:eb:41:d4:ec:a5:3b:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:67:81:2F:87:87:4F:65:70:83:4C:9F:05:7C:DD:5D:C2:78:DC:40
X509v3 Authority Key Identifier:
keyid:A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ff:e7:b6:00:2f:6a:fc:8b:75:5d:54:fc:a7:1a:39:2e:a6:
c2:aa:f5:cb:47:20:ca:68:44:fe:19:3e:d1:09:03:46:3d:97:
9e:b6:79:5e:de:63:9d:3f:fb:d7:07:6d:d2:f4:82:fc:02:64:
ec:56:52:5d:84:9d:ff:8c:54:26:06:0d:82:98:23:3f:3e:4c:
2e:a9:95:55:41:49:c8:df:7b:47:76:ba:33:97:a1:b6:f5:b5:
53:8f:8a:21:4b:f4:59:22:9c:f5:2f:d8:31:12:24:a9:68:de:
da:19:56:50:ab:aa:6e:11:16:06:bc:12:22:09:c7:27:a3:71:
4f:5e:dc:58:11:02:3f:d7:3c:93:d8:02:7e:c9:38:80:5d:a9:
5b:08:ef:66:cd:59:5d:41:79:94:1f:59:19:2a:65:ad:45:fd:
e2:ef:06:b5:a5:fe:a6:9f:f1:37:e7:65:b6:32:5d:af:24:18:
a7:ab:38:cc:71:19:78:8a:a1:79:05:46:57:19:ca:2d:1f:33:
d3:7d:36:9c:d8:4b:fd:e1:3e:7d:1d:62:1d:ca:64:aa:6e:d4:
4c:70:da:6b:d5:07:68:d0:5f:33:0a:02:cf:bf:d2:a6:34:be:
09:c1:25:e0:8d:f9:ac:29:34:94:ed:0e:4c:6e:e1:4f:b6:4e:
27:65:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:39:04 2025 by rpki-client