Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
File: Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json)
Hash identifier: amPWIMQE8DM2dE+skfe9Tod1oSKwMpsplBBPK6otihQ=
Subject key identifier: F5:F8:8A:AE:FA:AA:C3:11:3C:26:E6:51:B3:F9:C8:37:11:D8:C2:F2
Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
Certificate issuer: /CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Certificate serial: 019655007056DE3C14E4136F1B5066375354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 21:00:14 +0000
Manifest this update: Sun 20 Apr 2025 21:00:14 +0000
Manifest next update: Mon 21 Apr 2025 21:00:14 +0000
Files and hashes: 1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: CydCH9XW5qQjCGrWIa75ABmDa9vqL5UeEyM36wX/kRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:70:56:de:3c:14:e4:13:6f:1b:50:66:37:53:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Validity
Not Before: Apr 20 21:00:14 2025 GMT
Not After : Apr 21 21:00:14 2025 GMT
Subject: CN=f5f88aaefaaac3113c26e651b3f9c83711d8c2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:6a:73:b8:f6:c5:7a:97:de:65:5c:1f:9f:
4d:62:98:5f:67:98:67:06:34:aa:d9:10:91:02:7c:
33:ce:97:cb:b1:4b:01:36:82:c8:f0:12:7e:a5:c7:
01:bb:75:9b:a6:14:e3:23:3b:10:33:e1:ab:8c:0f:
29:0b:39:94:67:8f:27:18:fa:a9:3c:44:3d:64:d7:
89:71:97:80:de:2a:95:b1:70:61:01:83:e0:1c:17:
42:21:b2:84:0f:c0:98:52:0d:8a:fd:4f:70:11:cb:
6a:90:84:2d:a5:f8:83:59:33:84:67:8d:d2:c3:c0:
47:af:5d:03:1c:d2:50:5b:dc:39:f4:5e:4f:ce:31:
53:c8:70:53:87:3b:db:7e:3d:9b:ee:f6:b8:76:b0:
91:a5:c7:c0:02:02:a1:b7:ad:e4:6e:c6:78:b3:6c:
af:2d:2b:43:3a:96:44:84:d1:38:1e:42:2e:37:39:
48:52:6a:90:0e:5d:b3:dc:10:11:eb:04:4c:ec:5e:
5c:91:c2:87:fd:ad:3f:fa:4f:c2:c0:fe:4f:0d:21:
4c:81:ac:d1:2e:55:62:e6:b5:9e:c5:af:98:d8:2d:
c1:33:d0:1f:e3:5a:23:7c:0b:e4:31:87:3f:17:3a:
d5:03:2c:c2:6c:bf:52:20:5a:8b:b1:af:96:a5:1c:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F8:8A:AE:FA:AA:C3:11:3C:26:E6:51:B3:F9:C8:37:11:D8:C2:F2
X509v3 Authority Key Identifier:
keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ce:46:d9:c7:29:14:e7:c2:67:ca:6e:8f:8a:a9:33:a1:dd:
16:fb:83:e9:7a:df:ed:f0:29:44:87:21:0c:9d:41:35:14:a1:
58:e2:42:a6:53:0c:9f:2b:3e:3b:67:ed:ea:87:ea:88:4e:c8:
ca:25:03:60:16:40:1f:51:8b:40:69:91:bf:0c:fa:81:b7:b7:
f4:ce:d6:4c:03:7b:cc:11:a6:f7:2a:fe:77:0d:ee:c7:97:6e:
80:5c:1e:b7:0b:27:92:46:32:8d:d2:64:db:33:9a:cf:48:d2:
9a:fe:f1:27:2b:a8:9f:23:4a:b0:4e:dc:13:78:5f:57:08:cc:
3f:39:9a:5d:9d:2b:67:fc:98:c3:b2:3e:cb:f7:df:5c:7d:2d:
fa:3d:9b:9c:79:fc:0b:7e:1f:72:4c:84:48:07:53:7d:fa:05:
23:fe:17:7b:45:36:65:da:9c:76:e2:78:60:d9:20:a7:b0:ac:
81:ae:10:1e:c6:46:1a:e0:18:c0:45:f9:3c:9c:2c:99:53:cb:
dc:a2:f5:97:b3:58:d8:f9:4d:87:17:88:86:48:f2:16:a7:56:
36:f6:a3:e6:04:24:f9:35:e2:71:6a:3d:e5:f4:69:84:2c:5a:
55:ba:3c:56:ca:ac:26:61:87:ca:a7:38:d9:d2:87:20:e9:34:
f7:9c:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:50:58 2025 by rpki-client