Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
File: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft (raw, json)
Hash identifier: qGPY6pCB+n8iYZWsOaj0oNcmdczTr6WP14J5b3F1ZCU=
Subject key identifier: 18:4D:C8:DA:FE:BF:E9:BB:64:53:63:AB:B9:0E:C9:A3:5D:AC:9A:02
Authority key identifier: 43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A
Certificate issuer: /CN=43a2ef27472a9604bf626fea0e187f8db624134a
Certificate serial: 0196575D0A839879DFFDB6A02296182FFD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
Manifest number: 0C9D
Signing time: Mon 21 Apr 2025 08:00:37 +0000
Manifest this update: Mon 21 Apr 2025 08:00:37 +0000
Manifest next update: Tue 22 Apr 2025 08:00:37 +0000
Files and hashes: 1: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl (hash: 0nCSkH7/Gpv+y65NgJ6sq6JzhRTkFtX+FMxx+oE26+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5d:0a:83:98:79:df:fd:b6:a0:22:96:18:2f:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a2ef27472a9604bf626fea0e187f8db624134a
Validity
Not Before: Apr 21 08:00:37 2025 GMT
Not After : Apr 22 08:00:37 2025 GMT
Subject: CN=184dc8dafebfe9bb645363abb90ec9a35dac9a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:28:5c:9e:a8:c4:50:a6:1a:7b:2b:a3:2b:
13:7f:bf:83:69:8e:5f:9c:a9:92:6c:16:0e:dc:66:
f6:ce:93:a4:8d:82:55:f2:0c:42:10:80:98:3b:bb:
b9:10:5c:a0:a5:bb:13:82:be:24:46:93:fd:49:8b:
5e:8a:9e:03:0d:09:2d:69:3f:f4:d9:1c:3d:12:a7:
43:5b:80:38:3a:ad:38:c0:6b:d4:a0:a2:7a:6f:d3:
7f:26:99:15:3e:1b:94:91:25:b8:64:29:8d:fe:1b:
ac:bb:26:2a:ae:b1:cd:36:39:99:bb:41:8f:14:0c:
74:6e:19:f7:98:55:82:90:81:66:40:6c:68:af:98:
29:e9:66:8a:11:38:14:d9:48:40:92:59:f5:02:08:
71:d9:53:ac:33:f9:ef:10:c8:14:9c:9d:cb:b8:34:
61:86:c6:48:8f:06:f4:8e:4f:b4:eb:8d:2f:66:e4:
3a:39:96:04:9e:e8:2a:90:2f:8f:f9:b2:69:da:9c:
c4:c9:f2:53:b1:f8:ae:71:a9:7d:b7:86:4b:74:63:
b5:f6:dc:f1:88:13:6c:40:ce:74:77:2d:d4:40:e2:
de:a6:f7:e8:4d:b7:f1:17:3e:50:60:6a:92:48:fd:
44:c8:f8:87:e5:ff:b4:00:ef:4d:14:f8:77:ad:f7:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4D:C8:DA:FE:BF:E9:BB:64:53:63:AB:B9:0E:C9:A3:5D:AC:9A:02
X509v3 Authority Key Identifier:
keyid:43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dd:86:26:2a:e3:4d:fa:5e:5a:65:78:d2:25:dc:5f:7d:8a:
ac:c9:32:15:9c:00:13:65:7f:3f:92:58:40:60:a3:cb:cd:e1:
40:55:2d:89:37:f8:31:66:ba:44:e1:d6:02:1b:96:5b:6c:7c:
57:56:09:97:6f:f9:63:4c:85:2b:6f:8e:5e:37:5f:76:75:9d:
d1:b8:75:c8:20:01:f7:5f:4f:4a:73:ef:64:e3:e6:e7:e5:4e:
8f:9f:13:61:80:07:21:69:77:b5:be:e5:fc:d5:f4:4e:a7:53:
8e:20:cb:63:ec:17:3d:bf:d1:ab:1b:ed:b8:13:4b:6d:c9:5c:
aa:8c:26:41:a1:20:f2:66:01:30:ed:34:ad:41:bb:4d:e2:c1:
7f:9a:e0:8f:14:4b:78:27:14:73:66:3d:74:29:ed:be:b4:29:
3a:7b:1a:82:d3:7c:22:d2:18:22:a3:19:f5:3b:84:98:16:03:
22:3b:87:3a:4e:a1:81:9d:05:60:d8:e4:54:88:fb:85:53:64:
7d:6b:f4:d3:e2:17:fa:2b:37:b2:82:1c:b5:a1:38:66:09:d1:
06:fd:75:d5:2b:4a:a3:f5:98:58:78:75:dd:ef:b5:0f:f1:ec:
e6:37:b8:f0:5e:c3:be:de:c5:42:ef:f5:2a:df:74:6b:ba:9d:
51:93:0f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:17:22 2025 by rpki-client