Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File: blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier: HIqaHD2NcGbsBPbEue8HuKD1dZDpacbAkXNuPis2rmY=
Subject key identifier: 22:3C:C0:4D:E9:C1:DC:52:68:3F:CE:18:9A:FD:6F:5B:F2:F6:13:45
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial: 01967AC46A7151448293589CF47B09018758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number: 14F0
Signing time: Mon 28 Apr 2025 05:00:14 +0000
Manifest this update: Mon 28 Apr 2025 05:00:14 +0000
Manifest next update: Tue 29 Apr 2025 05:00:14 +0000
Files and hashes: 1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: blQuOzjMseaRzZyNbov/b2kLF860F8u8USsAlYVmnqM=)
2: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (hash: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:6a:71:51:44:82:93:58:9c:f4:7b:09:01:87:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Validity
Not Before: Apr 28 05:00:14 2025 GMT
Not After : Apr 29 05:00:14 2025 GMT
Subject: CN=223cc04de9c1dc52683fce189afd6f5bf2f61345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:00:9e:f0:8a:79:97:f2:38:a7:04:46:50:
28:51:42:ef:cd:01:11:9f:49:31:c4:89:dc:51:04:
13:cd:6e:d9:f5:ee:fd:f9:2c:25:9b:c2:69:d7:51:
1d:5f:27:9f:2a:2b:64:8f:58:af:6a:e9:df:9e:b3:
54:ce:20:64:6f:66:16:d1:33:f8:95:59:3d:16:37:
6c:db:ca:87:5b:74:09:93:f5:3a:8a:ed:31:f2:b9:
43:ae:9c:dd:5d:ce:78:78:37:d0:01:ab:b0:0b:43:
f1:4e:b0:be:27:51:e8:ad:3c:3a:a7:c6:90:00:b6:
89:71:0f:cd:fe:26:68:a0:56:12:74:7b:b7:f6:0a:
66:0a:f5:81:08:b6:bd:4f:2e:fd:93:0b:9f:eb:17:
1d:aa:4a:c9:6c:96:5f:e6:d5:d7:6c:8a:16:65:89:
1f:a4:31:87:ed:14:a2:3d:07:07:89:7b:40:43:ec:
86:4a:d8:fe:1b:0d:74:46:82:98:23:f9:7d:d7:56:
6c:ce:d9:4a:92:e9:d5:d7:d8:b2:0d:e5:43:8a:5b:
11:c3:51:00:13:4f:21:7e:a2:2e:98:d6:45:6b:1a:
e5:ad:2d:e7:98:ce:ef:bf:86:18:66:42:79:eb:ea:
2d:bd:9e:9a:08:3b:69:e7:16:d4:b5:08:94:1f:26:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3C:C0:4D:E9:C1:DC:52:68:3F:CE:18:9A:FD:6F:5B:F2:F6:13:45
X509v3 Authority Key Identifier:
keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cf:d0:f6:68:6d:31:f8:a4:72:c3:91:04:b1:11:4e:3a:24:
62:f7:40:84:21:e2:d6:cc:3c:1c:9a:1c:23:94:ed:45:dd:88:
a9:9b:16:ec:60:b3:d2:7b:16:79:66:64:74:a2:bc:1d:d4:3a:
09:86:ba:a8:10:1e:92:87:99:91:1c:f3:2b:88:63:b6:50:ee:
a5:4e:0a:c8:5d:eb:26:0e:25:d2:3b:fc:bb:0d:43:93:b9:9e:
d0:8f:e1:bd:5d:6d:12:ae:b1:de:13:47:7b:68:0c:e4:34:4d:
3a:e7:2d:f3:e2:20:a6:ae:ec:be:5c:14:a0:b8:1b:32:9f:49:
98:16:df:b1:3d:75:76:de:55:1f:f2:5b:9e:b8:77:10:9f:95:
45:2f:74:04:57:8f:a7:3a:36:ee:3a:2c:10:43:82:ae:53:e3:
54:43:17:79:6b:a2:12:9a:03:5e:a7:a9:dc:1b:0a:f3:d9:9a:
4f:6f:52:38:49:d8:0b:29:07:86:1d:76:5f:4d:51:ed:8f:4d:
67:07:9f:75:ee:59:ad:03:d1:da:89:11:9e:4a:7c:54:18:c1:
ba:a4:45:a7:bd:4a:7b:6d:c5:66:b7:9e:4f:32:97:81:cf:d9:
c7:a8:a2:5a:89:da:39:28:df:7c:fa:58:cd:e4:5f:98:3c:99:
c7:0d:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:51:28 2025 by rpki-client