Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
File: q06x4MU6aA6qQLjHzT8hzJYEPoo.mft (raw, json)
Hash identifier: t7dNYHSifjd3uPJZ8yUiqrxr+CqnfT8VoG+2M0jWjN0=
Subject key identifier: 25:14:1B:5F:0C:ED:1D:32:D2:B4:A0:F0:B7:3E:A6:62:11:F0:85:84
Authority key identifier: AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
Certificate issuer: /CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Certificate serial: 019653EDF9BB3BE242116CB2681DA55FC2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 16:00:26 +0000
Manifest this update: Sun 20 Apr 2025 16:00:26 +0000
Manifest next update: Mon 21 Apr 2025 16:00:26 +0000
Files and hashes: 1: q06x4MU6aA6qQLjHzT8hzJYEPoo.crl (hash: 7Zo8GfxLWCVHsJ2c/cpi3r6Cs8W4hL0W9TK9HJiuyF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ed:f9:bb:3b:e2:42:11:6c:b2:68:1d:a5:5f:c2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Validity
Not Before: Apr 20 16:00:26 2025 GMT
Not After : Apr 21 16:00:26 2025 GMT
Subject: CN=25141b5f0ced1d32d2b4a0f0b73ea66211f08584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:e5:c3:be:86:64:a9:a5:c6:40:49:14:9d:
03:26:c6:b7:83:34:c4:38:b7:95:3e:6b:5b:67:0b:
8a:9c:b7:60:80:5c:94:11:a6:a3:46:68:62:53:87:
1b:28:02:b6:b3:94:06:1d:b0:78:76:bd:7f:d1:db:
b5:18:90:3f:c5:82:3e:82:37:d7:0b:1f:22:d0:41:
20:16:53:fe:0a:02:ef:5a:44:f7:6d:83:d6:67:3c:
32:cd:70:75:74:0a:65:33:1b:76:36:de:dc:5d:d9:
03:f2:68:e7:b5:4b:cd:40:23:2f:dc:62:9f:5c:20:
01:35:9d:69:b1:93:e9:ae:59:8b:6f:26:48:c1:23:
73:73:19:8c:da:c3:a6:14:4f:a0:5a:f2:9f:6e:23:
1d:f7:f1:1e:3e:4a:83:c8:2f:94:8f:b1:f4:84:c1:
3a:78:69:c0:82:12:c2:70:e0:46:2b:ce:fa:49:e6:
2c:2b:2a:48:f1:37:52:60:cc:8c:18:7b:84:8e:9a:
ae:8e:bd:f5:e2:86:cf:ce:b0:ab:7c:80:58:bf:ff:
62:f4:ce:4c:43:ab:d3:dc:6a:d6:ee:b4:03:74:aa:
81:44:1b:6e:ee:6f:31:32:29:4c:89:73:a8:2c:f7:
ba:58:50:7f:fb:02:21:bd:39:13:b0:2e:5a:ba:81:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:14:1B:5F:0C:ED:1D:32:D2:B4:A0:F0:B7:3E:A6:62:11:F0:85:84
X509v3 Authority Key Identifier:
keyid:AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:36:46:88:1b:fd:6d:1a:76:58:e2:6e:7f:fa:fe:ae:01:b8:
1c:b8:28:ad:e9:38:33:06:cc:58:dc:5a:00:ee:f0:21:71:d4:
85:18:c8:a0:a6:2a:60:ac:3c:05:48:8b:6f:58:25:a9:2c:c5:
df:0e:21:9b:b3:91:7b:63:e7:67:14:0a:75:84:ec:47:8e:e1:
cb:b3:a8:48:f3:17:19:ec:c4:97:1b:f0:4b:76:f2:3e:4e:02:
5c:62:21:81:10:04:10:08:e2:a7:b9:2a:6b:05:de:47:55:a8:
d4:68:f0:8c:9b:a3:ed:12:a7:79:8f:7a:30:27:ee:32:a1:13:
54:0b:1b:a8:31:7c:2a:80:d6:e6:a8:5a:ff:14:e8:85:5a:85:
ce:34:c0:19:52:42:72:26:f0:17:e2:4c:e6:96:40:af:96:f0:
09:94:cf:e7:5a:dc:1a:66:a9:4c:34:36:28:87:28:e4:48:42:
0c:03:96:9a:a2:79:53:fd:fc:7e:ad:2a:32:2e:aa:19:ac:4b:
78:0c:85:33:d8:88:92:49:ef:cc:e4:f9:d0:02:79:bc:c1:bc:
27:f5:31:d9:ba:85:fb:99:70:14:03:c6:53:15:4c:55:ad:21:
9d:51:1a:61:06:83:9b:e3:ad:e2:9b:2b:04:e3:da:a4:32:f0:
d3:7c:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:50 2025 by rpki-client