Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
File: Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft (raw, json)
Hash identifier: JR7c2UHEJ473n3nNG0xDCdbcTyjtMh7y/AQEjz1nZqQ=
Subject key identifier: D2:3F:6C:3F:E6:57:FD:1F:F6:0A:AA:33:18:8A:57:1A:8C:BF:25:F3
Authority key identifier: 43:66:84:74:E7:BB:3D:BD:B2:6A:DC:01:83:8C:E7:06:2D:70:C4:98
Certificate issuer: /CN=43668474e7bb3dbdb26adc01838ce7062d70c498
Certificate serial: 01965D282FB535DDF6FF9069C17F92FF37CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 11:00:36 +0000
Manifest this update: Tue 22 Apr 2025 11:00:36 +0000
Manifest next update: Wed 23 Apr 2025 11:00:36 +0000
Files and hashes: 1: Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl (hash: DltyL6YY7T3O4zz73uuB0BuZxG0SiXbGnzwdtLn3ScE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:2f:b5:35:dd:f6:ff:90:69:c1:7f:92:ff:37:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43668474e7bb3dbdb26adc01838ce7062d70c498
Validity
Not Before: Apr 22 11:00:36 2025 GMT
Not After : Apr 23 11:00:36 2025 GMT
Subject: CN=d23f6c3fe657fd1ff60aaa33188a571a8cbf25f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:a8:8e:6d:ed:b7:00:0e:ee:10:96:ce:f5:
c6:47:73:9c:b4:94:98:cb:ec:57:95:7e:8f:2a:61:
6e:b8:71:3c:67:25:7c:33:e4:a2:72:e4:8c:a9:6d:
ac:6b:4c:b8:25:65:07:df:6b:f5:ba:84:64:54:80:
0d:40:44:bd:33:54:e7:02:30:13:4e:d9:77:80:ae:
fa:4b:77:2e:21:3e:b5:88:7c:65:26:e7:53:10:14:
c2:a0:31:c5:a6:cf:1f:c2:56:c6:e3:ab:c8:cd:1f:
24:ca:30:66:e4:6c:7c:8e:a5:81:ee:74:27:30:16:
6c:69:62:f5:42:b1:d0:b1:d5:d3:62:86:1f:85:b1:
5b:a2:54:ea:d6:78:36:4a:a0:fb:63:bf:f5:d4:32:
fd:f8:99:06:41:71:a4:8d:e4:72:69:9d:be:44:6d:
74:90:4c:e0:4c:01:ef:f6:7d:ba:55:a0:1f:d0:bf:
5b:28:96:e1:c2:00:67:1d:62:4e:1a:2c:00:9c:b9:
bb:78:44:36:0e:56:61:88:5e:1e:b9:11:9e:62:f8:
5d:6b:1b:7b:e8:a5:f0:33:c6:40:b1:7b:66:09:95:
23:d7:08:ed:6a:d2:57:d7:89:eb:79:8b:de:3a:8d:
96:2d:32:47:4f:c2:3f:3f:0b:e9:90:c0:d3:4a:93:
9b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3F:6C:3F:E6:57:FD:1F:F6:0A:AA:33:18:8A:57:1A:8C:BF:25:F3
X509v3 Authority Key Identifier:
keyid:43:66:84:74:E7:BB:3D:BD:B2:6A:DC:01:83:8C:E7:06:2D:70:C4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:63:d5:0c:26:1b:09:bd:18:1f:67:23:f3:d8:e0:fd:8d:c9:
ec:e8:2e:95:3f:62:b7:3d:48:7a:69:00:7b:e8:d3:2d:f3:d0:
2c:5a:28:9c:3f:fc:fe:f3:c4:d3:61:4e:f5:79:37:a1:7d:74:
60:50:46:20:f6:3c:45:e9:c2:a6:b7:09:56:f0:c2:0c:30:fe:
70:e9:10:8c:78:13:4c:ef:c7:6a:4d:d0:e5:55:c5:67:71:2d:
25:bf:e2:0f:d3:82:bc:56:a2:68:6b:e2:87:0f:65:31:22:df:
68:6b:16:d4:1e:06:52:f3:35:d4:36:73:ea:98:b3:8d:2f:bc:
f6:78:6c:44:d9:21:27:1d:0d:0a:de:2c:bf:46:a0:2d:bf:bc:
38:ab:0e:e9:e1:82:9e:d3:02:1e:dc:00:63:18:b5:0e:3e:e1:
06:d7:3f:9b:bf:e4:b7:c0:bc:53:19:2f:41:ae:c0:38:cf:1c:
ec:a3:18:26:c0:60:7c:85:60:f1:b6:d2:89:59:99:8a:8e:4e:
d5:1a:34:82:5e:d5:97:64:f6:3e:24:4f:14:7a:28:57:1a:52:
dc:52:2a:4a:ac:17:de:60:50:0c:b6:0b:6e:41:1e:b3:d0:47:
f2:68:8f:a1:a9:7d:04:b1:d1:7b:af:fd:50:4f:ca:e9:f5:4e:
bf:1c:69:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:58:39 2025 by rpki-client