Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
File: qQ_wEQVOz-aKitx94mit5sCCdxE.mft (raw, json)
Hash identifier: LLSMSVM+AlCxCtTTPS9mwzn5vdFzxIESsNLpX8/V52c=
Subject key identifier: 4B:C8:36:99:F7:47:7F:6E:58:DA:52:71:07:B6:D0:9F:7E:15:73:7A
Authority key identifier: A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11
Certificate issuer: /CN=a90ff011054ecfe68a8adc7de268ade6c0827711
Certificate serial: 0196760C1CC8443233507F80D7818F48CA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 07:00:27 +0000
Manifest this update: Sun 27 Apr 2025 07:00:27 +0000
Manifest next update: Mon 28 Apr 2025 07:00:27 +0000
Files and hashes: 1: qQ_wEQVOz-aKitx94mit5sCCdxE.crl (hash: 75m5I6zALZ6vkvZyW2uvVhcnWH1cnmbSWc/QnG3H/xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:1c:c8:44:32:33:50:7f:80:d7:81:8f:48:ca:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90ff011054ecfe68a8adc7de268ade6c0827711
Validity
Not Before: Apr 27 07:00:27 2025 GMT
Not After : Apr 28 07:00:27 2025 GMT
Subject: CN=4bc83699f7477f6e58da527107b6d09f7e15737a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:07:f0:c5:a5:e4:17:9a:a0:56:ba:a1:0c:
0a:10:a5:5d:91:28:98:5a:df:ea:b1:3b:0e:b0:ee:
dc:b7:5c:c0:75:f2:68:3f:09:93:d1:52:d3:dd:b1:
52:38:90:ed:71:e9:e1:b1:77:0f:fd:fb:84:e0:19:
1a:b1:44:7d:2f:66:b8:91:a9:ab:1e:96:54:cb:21:
92:2c:9e:75:20:84:4b:7a:33:1a:12:36:c0:66:d5:
97:a3:bf:fc:d4:13:87:fd:74:86:72:b5:71:c4:c1:
90:51:2b:a0:c3:90:42:2d:01:71:58:31:e1:b2:52:
50:e8:d1:3b:e5:d0:a6:e1:c4:91:96:d2:d1:8f:b4:
74:3b:38:33:71:82:42:46:bf:bd:65:b6:40:26:82:
4f:e9:b8:79:64:da:1c:78:95:18:b3:2b:e4:02:d0:
b3:d9:97:c5:de:84:4c:e8:bc:4b:ce:f6:5a:f2:6b:
f8:a9:1c:e9:0b:ae:65:19:5d:d4:63:2c:3f:61:42:
c5:74:90:3a:19:e3:f2:f9:0f:74:24:50:9d:f9:ab:
d7:52:fa:02:e4:39:d1:a3:a8:6c:8b:67:cb:8c:cc:
70:d9:ca:a3:b8:29:26:4a:25:c6:8b:f2:8d:6b:7f:
63:ec:ab:1a:a3:af:13:26:b9:37:c1:d2:d6:ee:b3:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:36:99:F7:47:7F:6E:58:DA:52:71:07:B6:D0:9F:7E:15:73:7A
X509v3 Authority Key Identifier:
keyid:A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8c:95:ad:f3:27:a5:6c:4b:12:35:9a:d0:70:52:96:15:99:
67:88:73:31:16:90:c7:a4:20:9c:4f:62:1a:fa:98:bf:09:42:
ca:2e:76:3f:b3:5f:36:24:da:df:0e:93:d6:59:8d:96:c1:3e:
71:1e:5d:db:4b:5b:a3:37:ff:c0:08:aa:02:21:99:63:96:c3:
34:e5:00:6d:d8:4c:35:94:e7:c1:1c:8a:5a:1a:1a:28:01:ac:
48:52:3c:f2:18:b7:d4:ae:25:f6:fc:e7:9c:31:c2:84:b8:5e:
38:bb:cd:ec:d4:ad:83:5b:71:60:ad:99:7a:2f:a3:26:38:5d:
1a:a8:65:05:4d:b8:99:f0:43:3e:53:b7:81:d0:4a:dd:40:e7:
d3:ef:99:5f:4c:39:31:49:09:1e:83:0e:a4:99:61:e6:26:4f:
fe:31:76:9b:19:4e:b0:85:c8:72:b2:2f:d7:56:49:d6:2c:0d:
4d:25:14:04:38:58:1f:7e:90:8c:61:3d:c7:e6:5f:5b:6a:e9:
10:20:34:99:1b:e2:2d:3e:76:b3:12:88:4f:78:42:fa:5e:3b:
34:b0:a9:93:be:1c:79:e6:92:9c:0f:ef:3e:6d:d2:f4:8b:e0:
e4:cf:04:de:98:cd:3a:c0:91:15:e6:aa:27:e6:08:3a:6e:dd:
c2:00:8b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:56 2025 by rpki-client