Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
File: qWpTYQ2O9mShJ1txquq7KFEEwk8.mft (raw, json)
Hash identifier: IVgnik/O/2cRqN/0oX0md7BsZaiyMVtpqbC7viWxA1g=
Subject key identifier: 11:E2:F3:3F:86:DE:40:D5:F6:FB:E2:8A:16:FC:F2:67:A9:90:21:28
Authority key identifier: A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
Certificate issuer: /CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Certificate serial: 01967FB4C176B626E7E1540F181B5A55687E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
Manifest number: 1510
Signing time: Tue 29 Apr 2025 04:01:14 +0000
Manifest this update: Tue 29 Apr 2025 04:01:14 +0000
Manifest next update: Wed 30 Apr 2025 04:01:14 +0000
Files and hashes: 1: qWpTYQ2O9mShJ1txquq7KFEEwk8.crl (hash: 6otA5ZGQrjr+Csg++6w8QWAJn1SmhRXf0Vzirp4qbZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:c1:76:b6:26:e7:e1:54:0f:18:1b:5a:55:68:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Validity
Not Before: Apr 29 04:01:14 2025 GMT
Not After : Apr 30 04:01:14 2025 GMT
Subject: CN=11e2f33f86de40d5f6fbe28a16fcf267a9902128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:04:6a:a0:3a:5f:7e:3a:05:a0:88:7e:6a:
f7:52:04:08:2a:fb:a9:d0:b5:4a:fc:af:4a:7e:bb:
f9:a0:01:db:5c:b2:2c:7b:ac:51:f3:f6:de:69:17:
56:8c:b7:38:c8:50:80:67:7c:a7:59:5a:0c:9e:79:
5d:45:fb:b5:7f:79:23:da:2b:73:80:61:90:12:5e:
b4:44:32:f0:fa:4a:f4:48:28:67:7a:35:59:9d:dc:
57:9d:ee:ac:bc:1c:66:08:26:54:da:1c:0b:0d:0e:
45:04:81:7e:8e:9a:24:97:fd:dd:58:8e:cc:e5:b1:
db:b2:5e:43:a3:06:c4:5c:cf:e6:89:f0:8c:ab:53:
dd:96:61:93:3c:4b:40:fa:21:f5:e2:b2:88:ea:b7:
8f:5c:3e:af:f6:66:31:5b:46:a3:e0:62:07:b9:e6:
69:06:19:9d:ad:1e:a2:d1:9a:95:7b:7e:70:73:61:
52:79:9b:45:7d:e3:26:10:de:65:06:07:6c:da:71:
79:69:1b:fa:1e:c8:b6:c4:8b:94:6f:5a:9e:b6:3d:
d0:98:c9:a5:ca:79:54:99:55:99:a3:c6:f0:f7:17:
08:2c:fa:01:c3:fa:df:d2:49:a0:56:b2:6a:72:36:
d6:b9:18:14:48:04:22:b5:cb:db:30:49:6c:b2:21:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E2:F3:3F:86:DE:40:D5:F6:FB:E2:8A:16:FC:F2:67:A9:90:21:28
X509v3 Authority Key Identifier:
keyid:A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ca:97:94:6a:ac:20:5d:28:72:9c:94:e8:9d:b4:f8:e6:31:
e8:a5:62:4a:42:ca:4e:3a:db:b0:3a:10:1b:ee:1b:1f:19:04:
23:3f:2d:0a:ab:0c:ca:f7:cc:9e:7b:de:5d:ad:c8:7a:68:f0:
47:a7:1d:7d:5e:f7:a8:68:df:ee:b5:b7:84:58:df:86:62:b1:
72:23:bb:44:04:a6:69:e2:f0:7a:7a:74:f6:0d:2f:e8:d7:a7:
47:bd:75:70:3e:8d:da:11:a3:2f:82:d0:f0:ce:bb:4b:89:9c:
49:b6:2d:64:05:86:35:ed:ed:e6:f6:9b:6f:f5:77:87:eb:77:
8f:8a:b5:57:cc:9b:d5:d8:1f:0b:a7:dc:2f:55:e8:b6:a9:da:
3f:f4:11:36:73:14:71:ce:58:fa:c4:ae:2c:ca:64:4f:43:15:
0b:b4:d1:5f:30:7f:7a:fb:59:9d:16:73:1d:1d:e4:f2:4f:f4:
13:37:b1:06:01:84:f5:ed:da:50:7f:a0:90:15:f9:e6:61:5d:
8e:6b:c8:8a:56:73:0f:95:59:5f:7f:3c:99:fe:b2:99:e6:6f:
0e:7a:e8:8f:93:92:29:8c:93:b8:73:7b:fe:92:b8:ad:7d:cf:
15:7c:17:74:37:08:d9:3d:41:90:73:12:59:a5:24:f3:f6:29:
4b:c1:5d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:45 2025 by rpki-client