Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json)
Hash identifier: PM9U+hJIK1qznQucgaSc/E2QG6KvTuVznvNe/ESzDKU=
Subject key identifier: 35:FD:92:E9:28:54:C7:2E:CB:5E:EF:55:92:CB:E8:AE:DE:7F:C7:E1
Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6
Certificate serial: 01965A5DF35B1662A8B05B3BADD49E5DBCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
Manifest number: 02BD
Signing time: Mon 21 Apr 2025 22:00:28 +0000
Manifest this update: Mon 21 Apr 2025 22:00:28 +0000
Manifest next update: Tue 22 Apr 2025 22:00:28 +0000
Files and hashes: 1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: 7NjhzFGFqdOA0svfdkgSM0ygF7t6jLogXKPngljHm5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:f3:5b:16:62:a8:b0:5b:3b:ad:d4:9e:5d:bc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6
Validity
Not Before: Apr 21 22:00:28 2025 GMT
Not After : Apr 22 22:00:28 2025 GMT
Subject: CN=35fd92e92854c72ecb5eef5592cbe8aede7fc7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:6c:c9:5e:84:aa:d7:5a:44:57:c7:c4:6f:
c9:72:0a:ac:79:f1:8d:98:b7:bf:f1:ba:cc:40:98:
1a:46:ed:63:2f:37:1f:90:48:ba:49:5f:65:eb:fd:
30:3f:44:0e:50:df:2f:cc:b0:ed:0b:9f:17:3f:4d:
20:86:b1:c5:37:39:d8:cd:89:cb:2e:03:32:e7:f1:
80:fb:d6:0a:ed:e9:3e:74:b6:0d:b2:57:8d:5d:e5:
98:b4:bc:bf:8d:a1:77:38:73:ca:d5:21:0e:8b:f1:
68:00:09:1f:08:fc:62:3f:fb:3c:98:d9:42:9e:70:
db:85:d2:fa:ef:3b:9d:7c:ea:19:29:a3:2b:f5:b7:
6f:0e:d2:8b:12:33:d2:0e:a2:6b:ef:57:3f:d8:4e:
d1:d8:7a:0e:34:e7:53:dc:fd:e4:a8:ca:7f:7f:1f:
98:88:64:4c:74:c8:39:95:66:72:58:4d:9d:60:86:
42:e0:f3:93:28:7a:1d:df:23:b4:53:a7:9a:a1:67:
fb:97:95:11:c5:65:0f:38:c4:bf:9b:01:e7:2b:fc:
f5:b1:4a:5d:91:ad:9d:bb:df:51:a1:2b:ae:83:79:
8f:93:54:29:94:fb:fa:0f:d3:2d:01:8b:f1:5e:dd:
9c:eb:94:9e:58:da:63:6c:b8:7d:c7:85:5e:9b:f7:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FD:92:E9:28:54:C7:2E:CB:5E:EF:55:92:CB:E8:AE:DE:7F:C7:E1
X509v3 Authority Key Identifier:
keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:83:8f:b5:6c:a7:9f:71:29:ee:30:3b:b2:76:e3:3e:d5:9c:
e3:22:65:e5:f3:fb:ab:0c:6a:54:a5:31:8f:45:82:17:00:99:
4a:16:48:0f:48:d7:46:47:28:2b:22:85:32:4d:af:63:98:9d:
51:95:78:96:8f:f5:10:83:5d:8c:f6:81:67:fd:f5:0a:a9:e5:
c0:85:41:e2:d6:a6:71:0c:2d:3c:bf:da:5b:81:16:6a:c8:c6:
19:69:bd:f4:3f:da:f0:c6:1c:19:65:45:70:df:50:6d:70:29:
ec:25:70:7f:a6:98:8a:31:a2:9f:a9:dd:ca:ad:36:80:ee:26:
11:8d:7e:7a:7b:43:bd:93:c8:32:ce:c1:e2:8a:1f:35:b2:3b:
a5:26:31:39:04:f6:48:43:b1:0b:d2:37:3d:8b:7a:fc:33:00:
76:07:e5:14:f4:a2:b2:4e:2b:89:76:c7:22:b6:40:d2:7e:16:
70:a8:e6:79:8d:73:75:9e:2c:a4:6b:17:dd:90:a2:c5:09:8a:
63:c0:6a:65:e3:1f:1c:66:7b:fb:f5:0a:9f:e2:a6:2e:ab:60:
a6:f3:ea:1c:6e:13:a6:d3:0d:18:c9:4a:5a:20:34:ac:a1:fd:
4a:02:ce:a9:6d:f5:b0:02:7b:d0:e3:e4:72:f0:73:0b:aa:e6:
50:0b:a6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:02:50 2025 by rpki-client