Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: zaKCHPTK1wo2Kc9pnAQHm+i6RyqPjorOZ7n1LqWDlsY=
Subject key identifier: DF:9E:20:5B:87:38:81:01:76:50:6B:25:C9:50:BA:06:98:5A:42:4F
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 0196760C2613D36CFB0C3E8F32875DDE4AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 07:00:29 +0000
Manifest this update: Sun 27 Apr 2025 07:00:29 +0000
Manifest next update: Mon 28 Apr 2025 07:00:29 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: SUJ9B0dQzE4vgInZLVNaV6m2z7T11zpLC4rHujlgj5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:26:13:d3:6c:fb:0c:3e:8f:32:87:5d:de:4a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Apr 27 07:00:29 2025 GMT
Not After : Apr 28 07:00:29 2025 GMT
Subject: CN=df9e205b8738810176506b25c950ba06985a424f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:9c:d8:e1:6b:66:20:9e:71:bd:74:25:c5:
87:ef:36:f3:a3:17:15:34:89:69:f5:94:1e:b1:37:
64:3b:bb:99:f6:c7:84:d0:90:6d:1c:a0:bd:90:67:
09:48:77:e9:cb:2a:5c:34:dc:39:f4:ae:2c:91:7e:
8f:22:72:c5:e8:32:27:ba:4d:36:79:41:70:dd:96:
ee:07:8a:6e:df:2a:b5:0b:e8:a9:ff:9a:16:91:aa:
e0:55:53:00:cc:39:0f:ed:5d:4e:3a:e6:38:a3:90:
e0:64:31:15:68:56:fd:85:04:e1:7f:ca:22:f6:43:
b7:6b:7f:08:5d:11:dd:4d:a8:d9:86:a0:f2:99:e5:
26:fd:a1:8b:93:c5:88:94:c4:4d:88:bf:93:c9:2f:
da:cd:a2:5e:c9:f6:cb:4e:a1:ee:56:56:84:db:35:
a5:59:f4:08:b6:64:e6:ee:9f:f8:02:c6:b4:74:56:
88:2a:dd:a6:4b:da:57:25:6c:ed:31:8e:71:77:b6:
e1:f0:bc:34:fa:2e:ce:ca:9b:d8:0c:7c:51:9a:6d:
ba:52:cf:54:3c:6f:37:32:36:8a:1a:ed:4f:28:e7:
41:9a:d6:3d:e3:a4:8c:8a:da:9f:77:59:b6:b9:6b:
6a:72:73:1c:cb:d9:a2:cf:94:1b:2c:76:5f:bd:e7:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9E:20:5B:87:38:81:01:76:50:6B:25:C9:50:BA:06:98:5A:42:4F
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b0:d3:22:60:a3:44:a9:a8:2b:27:01:05:99:65:94:2e:c5:
35:db:20:11:f6:ed:82:35:e8:b7:70:77:b3:d6:5b:74:33:c4:
a2:3a:ca:30:36:0b:51:07:43:49:c5:ac:42:38:20:d5:f7:fa:
b6:19:22:85:24:03:e3:d3:85:ce:6a:cd:4b:03:7f:e8:9b:d3:
a1:a4:7d:44:e5:24:fa:84:a2:e9:69:01:ff:18:39:54:fd:96:
c7:18:6a:2a:8f:c7:f1:dc:60:cd:fe:96:69:dd:83:d8:cc:4e:
b6:59:55:a1:19:0c:89:35:bd:04:53:62:d0:07:ef:af:05:1a:
8a:31:9f:50:f0:1d:cc:1f:e9:dc:8b:1c:b8:93:13:ca:8f:0c:
ad:e4:1b:ca:df:f0:69:6e:83:d9:7e:a2:46:24:0d:98:19:89:
4c:df:5a:9f:88:82:69:a7:f3:e6:41:03:bc:42:9b:ab:8b:11:
ab:63:2d:3e:5c:51:a4:6e:0a:21:c7:f6:6a:f8:ac:1f:98:7c:
96:95:52:ca:58:1f:37:36:2c:5b:f3:c8:05:5c:bb:bd:58:7b:
bd:5c:3d:76:ad:03:87:26:c6:9e:80:f7:50:e6:b9:e2:ec:13:
d0:e1:2f:35:f0:98:43:16:e6:3a:b4:bc:a0:15:08:31:34:47:
98:26:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:45 2025 by rpki-client