Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
File: fqQd0tUnX7allrJhoCfMjX-fNGw.mft (raw, json)
Hash identifier: u4wKEVebw/BAR/PzAR4I+SHhSY9sq9bpoFP+FXqSNWM=
Subject key identifier: 16:08:6A:71:C3:76:B4:1F:5E:4B:4B:F0:BA:A2:B8:26:D2:EB:95:7C
Authority key identifier: 7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
Certificate issuer: /CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Certificate serial: 0196591427DE6E38B384819BA215A671BEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
Manifest number: 0BE8
Signing time: Mon 21 Apr 2025 16:00:15 +0000
Manifest this update: Mon 21 Apr 2025 16:00:15 +0000
Manifest next update: Tue 22 Apr 2025 16:00:15 +0000
Files and hashes: 1: fqQd0tUnX7allrJhoCfMjX-fNGw.crl (hash: iBVzjIivKuLHbWvaIXM0p7hQw6jAfAnumJVZestgycA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:27:de:6e:38:b3:84:81:9b:a2:15:a6:71:be:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Validity
Not Before: Apr 21 16:00:15 2025 GMT
Not After : Apr 22 16:00:15 2025 GMT
Subject: CN=16086a71c376b41f5e4b4bf0baa2b826d2eb957c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:e5:60:85:fd:4c:e5:a3:ef:18:3a:5a:d5:
91:25:2c:be:14:85:a2:6b:7d:04:3a:ed:6a:6c:51:
b0:d0:92:ee:35:5d:0e:32:9f:21:6b:8c:cd:08:73:
97:6f:43:a0:b7:9c:c4:d4:65:e2:56:10:88:82:9e:
07:5f:25:78:28:32:b3:12:fe:61:b0:86:4b:56:46:
4f:6c:0a:58:6c:18:b6:e0:42:d0:8e:6b:96:a9:5e:
9f:95:62:11:69:13:99:f5:f0:dc:ab:fb:6a:78:78:
ae:b4:b9:55:97:99:a9:19:2c:a6:55:85:91:5d:16:
f7:83:6b:5f:35:e9:65:89:e2:5f:73:05:2f:1e:42:
8e:40:9d:0d:d4:7b:76:a0:3c:b6:c2:03:43:35:ef:
c5:85:48:b6:44:3b:0d:e5:04:fd:ea:70:d7:ed:9f:
19:e9:f2:fa:15:ef:8b:e1:05:5d:2f:c8:5a:7e:34:
2b:25:46:35:9c:e9:55:03:eb:dd:e0:ae:7b:d1:f3:
5c:c5:d0:e8:d8:2c:99:83:f4:bd:7c:2f:d9:52:4f:
26:b7:0e:96:be:4f:af:87:d2:5e:d6:de:9e:da:93:
d2:06:5d:cd:92:d6:08:e6:52:05:ca:5b:25:15:91:
fd:a3:24:5e:6c:da:2f:37:0e:70:a5:46:26:de:4b:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:08:6A:71:C3:76:B4:1F:5E:4B:4B:F0:BA:A2:B8:26:D2:EB:95:7C
X509v3 Authority Key Identifier:
keyid:7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3f:22:25:3a:47:bf:7f:77:88:88:43:a1:5e:f9:d1:6a:94:
b8:f6:01:fc:54:ae:3b:24:20:dc:aa:53:f3:70:79:a6:53:64:
a0:a3:c6:29:c2:44:cf:94:4f:4c:d3:c0:b5:7a:8a:d1:c3:41:
17:ed:9b:9b:92:7b:53:da:67:83:49:ae:e3:e3:f0:cd:cf:76:
f8:6d:f6:48:fa:d6:17:08:b9:be:c0:c9:b5:58:c0:d1:45:ed:
14:cf:b3:09:d7:f9:b6:64:5b:47:79:9d:6d:26:ae:b6:d8:3c:
a6:f3:67:30:fd:e7:19:5d:c2:06:9b:67:cf:81:f8:91:9c:cd:
b7:77:43:89:b0:fe:af:9d:e0:e2:31:fe:a8:c7:84:e5:1d:3c:
60:6b:1c:60:9d:c6:f4:1a:ee:c6:76:55:5d:0c:99:5a:28:97:
d7:c6:da:2f:cc:d7:10:b5:0c:d4:8e:34:3b:7e:2e:19:d2:25:
db:a2:d8:c4:b4:5f:e5:a5:be:71:e1:92:08:4e:43:b4:a4:fa:
60:28:42:ea:b0:26:5c:f0:36:f2:44:50:5d:57:da:a3:b5:78:
81:32:c1:b1:d3:80:c9:e9:2b:c2:2d:b7:64:9c:25:4d:d1:26:
b8:81:ea:16:25:ea:01:8f:91:c7:9b:38:66:ed:3a:11:e3:36:
3e:2b:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:14 2025 by rpki-client