Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier: fUfVkKWCZ8uVI/DfaLfJdG5efzailIbGnMy9LGRyvgw=
Subject key identifier: D7:45:60:03:21:9D:FA:9F:98:BA:C7:31:2D:69:16:0E:36:80:CB:88
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial: 0196561319A04E336F0ECABAB7EA468A9121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number: 07A4
Signing time: Mon 21 Apr 2025 02:00:14 +0000
Manifest this update: Mon 21 Apr 2025 02:00:14 +0000
Manifest next update: Tue 22 Apr 2025 02:00:14 +0000
Files and hashes: 1: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: EfLcmflDbqXswgTvzM0I09LPgh7jC0i5D8p/rVCdiX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:19:a0:4e:33:6f:0e:ca:ba:b7:ea:46:8a:91:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Validity
Not Before: Apr 21 02:00:14 2025 GMT
Not After : Apr 22 02:00:14 2025 GMT
Subject: CN=d7456003219dfa9f98bac7312d69160e3680cb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:df:23:ca:1d:e1:97:dd:f2:31:a0:9e:23:
61:39:93:05:4d:6a:fc:43:85:ca:88:8f:e8:4e:2d:
a6:7d:c7:32:c3:da:f2:31:87:1a:02:d1:05:03:f2:
57:26:43:68:d8:68:17:c6:64:1c:66:65:ec:48:f9:
1a:94:65:28:80:e9:87:07:6f:24:68:d1:28:7d:69:
15:2a:78:35:ff:e2:fd:7d:95:ee:38:08:c7:c0:68:
ba:3c:20:e4:c8:1f:48:72:dd:af:62:11:c0:dd:db:
c4:82:98:45:d4:84:ff:d7:b3:93:c0:c0:a2:51:df:
c1:29:e7:b2:cd:9c:80:47:90:99:7e:a2:ed:39:5f:
c3:78:d7:1f:35:73:f6:fd:ae:1e:a1:ec:d3:09:d6:
12:8b:09:62:d4:f4:c8:0b:f5:64:87:52:47:0e:f0:
da:c3:5d:ba:4f:72:3c:8f:53:b7:e8:34:52:73:a4:
bb:79:03:4c:df:08:77:a6:b9:0b:ff:c6:7f:9d:be:
68:2b:56:aa:53:6b:1d:14:5f:e1:01:26:cf:92:b9:
44:69:c0:4f:d9:47:61:11:7b:7c:2d:6e:b0:8c:4f:
d9:41:82:34:17:30:c6:65:dc:ee:6e:20:79:cb:e4:
0c:3c:f9:0a:51:7c:8a:51:29:3e:97:a2:0c:9a:52:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:45:60:03:21:9D:FA:9F:98:BA:C7:31:2D:69:16:0E:36:80:CB:88
X509v3 Authority Key Identifier:
keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d8:e7:f1:fe:c0:c8:dc:58:d2:ff:06:84:7e:ea:f8:94:1b:
c6:9c:d0:26:0c:db:14:79:9a:51:0a:4f:d7:33:60:30:c7:09:
eb:c7:08:40:fc:a6:54:47:81:95:15:a7:71:3d:b0:ff:ea:71:
4e:44:eb:5c:13:2d:0b:03:cd:7b:c8:4b:3a:43:a3:4d:e3:be:
1d:f4:f2:7d:af:e2:f8:f8:d3:2a:2e:19:03:83:2d:84:2b:59:
c3:dc:d1:07:d6:e5:29:17:3f:ab:08:fb:96:8b:56:ba:b6:f9:
00:db:e2:dc:12:d0:32:21:e5:c9:69:73:f5:e1:04:76:7d:47:
02:43:d4:27:26:cb:ba:3d:da:74:cb:0b:dc:59:77:d6:14:33:
cc:f8:8b:e1:40:42:c6:95:66:0d:86:bf:11:92:62:d2:b1:04:
e8:5e:01:f8:7f:f1:89:58:14:ae:24:8b:bb:df:0d:1e:93:86:
cc:a2:d5:f2:c9:ac:84:6e:e8:b4:47:34:dd:ca:0d:a1:93:7a:
a2:fd:4f:d5:49:92:c7:5e:4b:a0:3c:d8:03:de:f8:0b:e8:39:
b3:f8:3b:6e:8b:0a:53:29:75:a7:14:48:38:d6:30:7b:cc:01:
b0:af:d0:d7:2f:56:53:0a:e9:4c:5e:32:32:65:44:72:ad:c0:
05:e0:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:39 2025 by rpki-client