Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
File: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft (raw, json)
Hash identifier: e96BZMge1090K0rKw9AnXwXbEe1M5+HXd+1pbP2S9t0=
Subject key identifier: 8D:5A:0C:50:A0:22:F0:A4:2A:11:2E:7D:69:BA:18:6B:A8:33:79:99
Authority key identifier: B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
Certificate issuer: /CN=b50edfc96d2b61788689533142969e65566512aa
Certificate serial: 01968DDDD41AC26643042BCE9806385881F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
Manifest number: 1499
Signing time: Thu 01 May 2025 22:00:47 +0000
Manifest this update: Thu 01 May 2025 22:00:47 +0000
Manifest next update: Fri 02 May 2025 22:00:47 +0000
Files and hashes: 1: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl (hash: 9c8l8+TUlF5TNN0ZUDfuUjonk40xPPYH/O0uC5VidTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:dd:d4:1a:c2:66:43:04:2b:ce:98:06:38:58:81:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50edfc96d2b61788689533142969e65566512aa
Validity
Not Before: May 1 22:00:47 2025 GMT
Not After : May 2 22:00:47 2025 GMT
Subject: CN=8d5a0c50a022f0a42a112e7d69ba186ba8337999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:16:c0:63:c0:e7:d9:68:91:13:91:fd:5f:
4e:0b:94:70:4c:25:fa:cd:8b:81:9f:8a:78:96:1b:
26:9a:10:68:9a:d9:19:f1:b3:49:75:16:4c:99:59:
2e:e3:19:a8:17:af:de:92:16:57:92:49:92:92:65:
22:fd:a0:e2:e1:35:15:ad:32:88:81:82:bd:66:d1:
48:c9:6c:55:08:79:45:37:2d:39:b8:0a:ae:03:d7:
5b:e9:76:de:aa:47:fd:50:2c:03:94:ce:25:db:5e:
d0:61:71:58:d7:3c:dc:56:f1:a5:30:44:0b:d6:b7:
ab:2a:ef:79:ea:78:87:d3:61:75:21:15:27:a9:dd:
a2:f8:dd:79:4c:5e:c3:31:e6:86:68:f4:2d:0f:a5:
3d:ab:c7:41:a9:cc:ae:09:7f:25:47:c2:c1:4c:f8:
cd:07:c9:e6:88:0a:4a:c9:50:36:83:05:f6:f6:78:
e3:fd:9d:0d:49:23:41:0f:e8:de:75:37:a8:2a:3c:
81:e0:ff:70:9e:1e:60:81:d7:e5:97:da:c5:fb:d6:
a6:21:5b:4a:7f:fc:60:fe:43:75:d2:e7:ff:07:d0:
13:31:df:ae:43:4b:cc:7e:f6:c3:ca:9a:62:14:00:
19:31:c6:36:59:4a:d4:25:f6:25:06:0e:7b:53:77:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5A:0C:50:A0:22:F0:A4:2A:11:2E:7D:69:BA:18:6B:A8:33:79:99
X509v3 Authority Key Identifier:
keyid:B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:40:fc:78:f9:9c:db:fb:de:1d:c6:59:a6:2a:eb:42:d2:b1:
da:39:4f:51:15:c1:ab:e3:29:e8:cd:de:6b:f5:02:c2:87:33:
ec:4b:7e:6b:71:6a:ba:4c:a8:b6:7f:a9:07:91:06:48:74:81:
88:c2:53:8d:e1:2d:b3:31:67:ad:8b:3b:01:8f:7f:e5:95:39:
f7:aa:ba:9f:c4:7b:31:19:30:52:78:c8:3d:07:b6:ab:74:2d:
97:17:d0:eb:c3:a8:a2:95:3f:3c:e6:47:59:0a:34:99:c2:f1:
83:a5:b9:ee:08:89:c7:a3:a9:bc:44:70:9b:d7:44:e9:20:4f:
ec:25:28:35:0f:c1:b0:86:91:7b:22:13:20:41:81:85:f5:ec:
64:82:47:1f:8b:99:af:55:6d:9c:d4:b0:13:f6:9b:10:a9:99:
d4:88:0c:5c:f1:bd:fe:e8:cf:a1:d0:d2:7d:d8:7e:ea:e3:d1:
38:e0:eb:d0:e5:e4:69:64:ab:05:98:6f:f9:89:88:b3:7c:d6:
82:de:4e:3b:c9:f9:75:21:79:fb:89:23:cd:5f:00:2c:36:89:
20:b1:76:1e:46:fa:9d:05:b1:cf:09:28:8a:4f:ce:18:4a:ab:
80:5d:39:c9:b5:82:b9:08:1d:45:57:a8:67:31:f5:00:df:78:
44:4f:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:45:18 2025 by rpki-client