Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
File: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft (raw, json)
Hash identifier: xojbqGmhlCoDlDNT/yo3JDHsOk0AADCdnmv5D6KY/HI=
Subject key identifier: A3:25:38:14:DF:AD:C3:6D:12:0F:75:7D:35:98:32:A6:B1:65:8E:5D
Authority key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
Certificate issuer: /CN=985b50a10d2d58c67503eaaa701e510915dd5192
Certificate serial: 01964BFE09D9764827C795EE5161F30D5237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
Manifest number: 0455
Signing time: Sat 19 Apr 2025 03:01:01 +0000
Manifest this update: Sat 19 Apr 2025 03:01:01 +0000
Manifest next update: Sun 20 Apr 2025 03:01:01 +0000
Files and hashes: 1: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl (hash: WZWmyd+dFvSLU8RYqzAhNi0Q15EaceT8w5BmbV+XPno=)
2: yN69dqz--m8dWXCMtbZ1dGzJo1k.roa (hash: pNrNwHsIk6sG4oFCvOY8zkn+qIXflJs47/VLFYzRdxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:09:d9:76:48:27:c7:95:ee:51:61:f3:0d:52:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985b50a10d2d58c67503eaaa701e510915dd5192
Validity
Not Before: Apr 19 03:01:01 2025 GMT
Not After : Apr 20 03:01:01 2025 GMT
Subject: CN=a3253814dfadc36d120f757d359832a6b1658e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:7c:53:98:46:9d:44:50:62:19:6e:a2:d7:
d0:7b:78:75:9f:f2:35:2f:60:a3:f4:fa:77:76:a5:
7d:4c:94:30:a6:93:46:cf:89:7a:84:e3:f4:72:e1:
d2:e2:a0:61:8e:f6:41:0e:26:c1:67:dc:67:f6:7b:
ed:d1:31:73:c5:9e:03:bc:5f:d5:82:d8:ed:b1:d2:
33:98:45:80:f2:b2:09:d2:57:27:c3:59:fc:43:47:
c3:c2:fe:42:43:cf:77:9e:63:99:61:a6:24:04:a2:
19:ea:0b:e3:79:ad:fd:b8:99:2a:c5:19:03:92:72:
8f:6e:78:a2:bf:44:c0:32:4c:98:a0:3c:d5:34:63:
17:84:6a:44:36:24:13:99:a0:42:b4:61:36:43:84:
e5:cb:7f:d4:e4:a6:03:4a:b2:91:e2:38:8d:6a:27:
e0:1c:c7:67:85:ed:35:1c:8e:8c:5c:d6:a3:bb:c0:
6f:74:a6:22:cf:57:7a:e8:1f:0b:b8:7d:50:38:8d:
16:3c:e8:7f:6d:cc:ce:08:7c:4b:1d:88:ba:bf:a3:
9e:d0:31:18:64:32:a4:47:0e:9d:24:1a:b7:7b:16:
6a:23:76:7d:27:17:55:3b:c7:da:9b:b0:5a:5d:c8:
e9:ee:1e:11:2a:c7:5d:fb:35:18:88:ff:85:7b:9d:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:25:38:14:DF:AD:C3:6D:12:0F:75:7D:35:98:32:A6:B1:65:8E:5D
X509v3 Authority Key Identifier:
keyid:98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bb:a8:04:bd:77:45:8e:bc:89:df:c8:4f:28:3e:01:f8:b3:
3f:f2:67:66:72:5b:d5:aa:be:ae:66:64:c8:a5:99:f1:50:ba:
3a:7b:76:6a:a9:cd:99:be:07:c1:ef:f8:9a:47:ab:ef:6b:47:
15:46:9b:43:a5:7a:99:33:b8:63:a8:7e:47:22:35:6a:45:0b:
50:2d:23:e6:60:8c:32:3c:87:80:02:f3:de:72:38:8a:9c:f9:
94:e6:e5:84:76:cf:4e:f5:92:4a:ef:a3:bf:8a:16:02:a7:18:
4e:47:cf:12:07:80:cf:36:b1:f8:6b:89:16:a7:61:5f:28:ff:
11:6d:95:64:57:ea:8f:28:27:a5:92:bd:4d:46:13:c9:47:5e:
59:64:1f:00:aa:f8:d1:63:22:b2:7b:1c:73:68:73:04:7d:d9:
c1:f1:3d:a9:0f:20:b6:0f:53:fa:38:b4:32:dc:49:67:cb:97:
67:ad:71:4c:fa:58:18:a8:04:5d:12:29:35:4b:e2:b0:4b:57:
e4:cd:68:f5:d4:10:a0:6f:5d:67:21:14:b2:3e:9a:70:6e:98:
8c:e7:f5:1a:c2:66:c2:33:8e:65:36:aa:65:48:f2:c5:7f:22:
69:d3:1a:25:e5:dd:39:48:f9:e5:d6:0f:86:5e:9c:79:3a:09:
12:3b:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:21:13 2025 by rpki-client