Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
File: q1wa2N15IqRaLMdIHv4B3UMwBsI.mft (raw, json)
Hash identifier: MLuPCWHa+hnBbUt4K4f2/NTCki8pNCRbbu5RC+Qq/XM=
Subject key identifier: 0E:E6:E0:8D:BA:29:D9:38:71:E4:EE:72:D0:4F:70:FE:96:AC:DC:60
Authority key identifier: AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
Certificate issuer: /CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Certificate serial: 01967FB4EF9B880A804BD7DA48C6D2F1EDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
Manifest number: 07B0
Signing time: Tue 29 Apr 2025 04:01:26 +0000
Manifest this update: Tue 29 Apr 2025 04:01:26 +0000
Manifest next update: Wed 30 Apr 2025 04:01:26 +0000
Files and hashes: 1: q1wa2N15IqRaLMdIHv4B3UMwBsI.crl (hash: 8EwlMBt8Ns1xTMTH/cevj4qZM4gox768kbVNcH5DLYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:ef:9b:88:0a:80:4b:d7:da:48:c6:d2:f1:ed:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Validity
Not Before: Apr 29 04:01:26 2025 GMT
Not After : Apr 30 04:01:26 2025 GMT
Subject: CN=0ee6e08dba29d93871e4ee72d04f70fe96acdc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:32:61:b0:a7:f9:16:d2:3d:ba:0e:57:22:
42:35:28:84:4d:b5:0a:5c:28:8d:b7:3b:b7:a1:ed:
fa:65:2e:cb:40:0a:2e:a2:a2:f5:8f:09:8a:dc:d2:
16:95:16:6f:2f:62:dc:c1:38:1d:d1:9d:aa:b7:c4:
b2:8a:3a:fc:a9:ec:23:45:fb:d2:3a:5e:44:21:5f:
5e:58:95:56:91:58:55:4f:b3:b9:8c:a2:dc:e1:c5:
db:c3:a6:b5:39:b3:93:b4:d8:c3:a2:f0:f4:1c:66:
11:9c:73:f9:11:9a:1e:5e:a3:2f:9b:60:a3:e1:54:
7d:75:7f:38:71:ec:24:05:fb:96:14:cf:82:83:4d:
68:47:da:d6:d0:9d:84:8f:d4:8d:91:c7:f8:57:7a:
41:60:9a:b4:aa:1d:ac:a1:58:06:72:51:8b:ad:1f:
d3:53:c7:88:ae:e2:be:98:7c:c7:be:9b:34:e8:15:
ee:1a:ab:20:6d:e2:f8:88:26:d4:b7:e6:d2:e0:5f:
34:4c:50:91:c1:d2:7c:87:d5:c5:80:a9:6b:e4:2b:
0d:29:b3:04:47:ea:d6:f8:f9:23:0f:90:fc:1f:7f:
8a:3c:6f:5a:9c:b3:12:f0:0d:29:43:1d:fd:40:04:
91:94:35:7c:9d:3b:42:bf:d8:dd:da:29:0a:52:e1:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E6:E0:8D:BA:29:D9:38:71:E4:EE:72:D0:4F:70:FE:96:AC:DC:60
X509v3 Authority Key Identifier:
keyid:AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:18:01:3d:5f:95:68:87:a3:ac:1c:94:1c:17:7e:6f:35:28:
dc:ff:dd:5c:42:da:c2:fd:81:73:d6:eb:00:4d:ff:b0:39:00:
1b:8b:f7:01:58:51:2c:e9:8a:fe:be:80:f2:2a:c7:00:df:43:
83:e7:9b:b4:09:0a:6f:09:84:ac:60:43:40:b2:42:d9:de:3c:
c0:6c:e5:ec:79:06:78:c3:6e:7a:ee:4a:e0:b1:97:d1:e9:69:
97:5f:29:00:bf:4b:d0:71:ff:c8:5c:a3:50:49:87:55:53:76:
b5:5f:1b:50:c5:59:62:8b:85:e4:77:c3:c1:46:4b:32:d7:51:
38:e5:d0:31:a7:c9:85:b7:40:0d:d9:16:c6:8c:2d:f1:66:e3:
0a:d6:43:44:66:f1:1c:31:36:49:7c:c0:b5:19:6c:42:e0:1f:
6b:5c:7d:ec:b5:cd:7a:8a:fe:a6:e8:d2:ce:87:0d:fd:94:8b:
28:de:35:90:9e:b8:c5:56:55:a4:d7:35:a4:99:68:e3:a1:12:
a7:b0:bd:31:b1:95:61:52:43:7f:e4:f1:ab:3d:3c:a4:0b:58:
fe:ef:8f:58:e0:f2:02:97:01:0a:89:f6:b1:01:7c:33:f2:59:
e4:d3:ea:ee:26:41:ec:42:a6:4b:07:17:3e:c2:75:15:94:40:
60:9c:3c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:04:53 2025 by rpki-client