Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
File: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft (raw, json)
Hash identifier: QcCP4bLenB87lW06140IUjJBlRqD3iWjJ9Ab0N4npVs=
Subject key identifier: 2B:BE:35:06:33:B5:8D:AE:14:00:6D:CB:C4:FA:57:F3:5A:99:85:C1
Authority key identifier: A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
Certificate issuer: /CN=a86ee450deb3a708aee85b78238fa370f90457f9
Certificate serial: 01968F2739092678D327E0DDA806204DA267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
Manifest number: 1518
Signing time: Fri 02 May 2025 04:00:34 +0000
Manifest this update: Fri 02 May 2025 04:00:34 +0000
Manifest next update: Sat 03 May 2025 04:00:34 +0000
Files and hashes: 1: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl (hash: ujBVtD3BFFLPdvzOXu/1tLPRGUI0uXND+esoqGPfXds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:27:39:09:26:78:d3:27:e0:dd:a8:06:20:4d:a2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86ee450deb3a708aee85b78238fa370f90457f9
Validity
Not Before: May 2 04:00:34 2025 GMT
Not After : May 3 04:00:34 2025 GMT
Subject: CN=2bbe350633b58dae14006dcbc4fa57f35a9985c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:28:fa:11:1c:4d:f6:60:e7:12:87:f8:b0:
04:6f:92:35:ae:44:bc:95:ca:78:ad:87:cf:b2:99:
23:af:8b:a8:aa:23:b2:00:68:bd:c3:4a:03:55:52:
94:16:95:06:68:7a:39:4b:2f:78:2e:92:e6:4c:c7:
6e:c1:17:0c:93:3e:1d:51:f7:81:bd:e4:f1:9f:53:
bc:dd:b8:eb:78:b0:83:94:e1:02:7e:03:66:2c:eb:
4d:e1:8e:4b:9f:38:49:62:1f:c7:00:b1:e4:61:96:
01:0f:d8:59:73:6a:a4:17:8c:d8:e3:62:01:18:ab:
41:9d:d1:e6:be:ae:e3:df:b4:02:15:ea:e1:7d:c3:
38:f3:90:41:fd:cd:b2:08:e4:f5:b7:3e:12:5f:ef:
d2:bf:1e:d1:4f:a2:4b:08:b4:bf:97:a3:e7:98:89:
e8:98:99:64:a8:b9:ee:e0:37:57:32:bc:7b:34:f9:
46:27:8c:0e:e9:1d:36:86:e0:be:b8:de:83:29:1c:
f8:70:12:21:94:7c:b0:57:8f:0c:2b:03:f7:6a:22:
09:a2:92:77:8c:e2:f4:8f:a0:d5:28:e1:53:ff:dd:
83:94:7c:31:18:31:58:03:39:07:ef:5a:c5:1b:67:
3b:1a:31:ed:0f:64:62:94:75:54:ba:ab:8c:5a:69:
7a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BE:35:06:33:B5:8D:AE:14:00:6D:CB:C4:FA:57:F3:5A:99:85:C1
X509v3 Authority Key Identifier:
keyid:A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c2:a7:93:77:4a:b3:74:77:f2:3a:bc:39:47:33:ed:cf:08:
72:b7:b5:97:e9:28:cf:59:8f:4b:a3:13:e3:9e:e8:19:02:e3:
7a:29:cc:c2:1d:77:1c:5c:07:02:4b:1f:f1:f7:0b:71:75:c0:
80:78:15:c9:97:a6:48:b1:31:46:86:55:f8:82:d1:7d:1e:57:
f5:98:b6:20:4c:fe:15:fd:c8:62:ec:fc:d2:0d:61:38:93:42:
d2:9a:e6:1b:e9:11:36:b3:2e:a9:9a:21:77:3b:3b:b7:85:08:
3a:d8:15:0e:42:09:c3:2d:b4:82:14:3f:8b:0b:9e:7d:d0:c0:
63:65:ff:b1:b7:87:36:cd:91:e6:71:83:85:ab:fd:d5:f8:b5:
ca:72:d0:73:d2:03:ee:e7:eb:7a:91:94:5b:df:d9:bd:64:c3:
f4:b5:c4:db:63:97:dd:17:3a:da:96:70:bb:f7:c3:37:47:c4:
06:c2:7e:b5:41:80:1f:d6:bd:31:ee:a7:0b:45:7c:c6:bd:48:
b3:ad:1f:5f:d8:88:c4:a0:7d:99:6c:ca:29:c2:9c:d0:1b:37:
69:4a:04:fe:62:2c:82:a7:48:05:72:66:21:ae:ee:ef:d2:aa:
9e:4b:c7:9b:76:0f:ea:39:0f:f2:1c:ff:dc:6d:13:eb:f8:39:
8b:b6:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:01:47 2025 by rpki-client