Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
File: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft (raw, json)
Hash identifier: vyzwUDluK5kf0wuL30V5LLU/aKmK1vAq9VTZFRM5ZQM=
Subject key identifier: C7:ED:68:A4:CA:3B:6C:37:91:61:B0:86:E2:F6:8A:54:8B:19:4C:E6
Authority key identifier: A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
Certificate issuer: /CN=a86ee450deb3a708aee85b78238fa370f90457f9
Certificate serial: 01964F6D7A84A3057EAF1BE7156C8B85813F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 19:01:36 +0000
Manifest this update: Sat 19 Apr 2025 19:01:36 +0000
Manifest next update: Sun 20 Apr 2025 19:01:36 +0000
Files and hashes: 1: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl (hash: odDAhc/bIA6QLdkEK9BgIJF2k/x9oqyI4qFv1tK20dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:7a:84:a3:05:7e:af:1b:e7:15:6c:8b:85:81:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86ee450deb3a708aee85b78238fa370f90457f9
Validity
Not Before: Apr 19 19:01:36 2025 GMT
Not After : Apr 20 19:01:36 2025 GMT
Subject: CN=c7ed68a4ca3b6c379161b086e2f68a548b194ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4f:4d:d1:77:40:0a:2b:95:2d:4f:25:97:50:
90:98:95:f9:22:d0:61:42:14:7c:2b:8e:3c:13:dd:
c4:44:b7:43:26:18:05:a8:00:8f:16:19:cc:e9:22:
32:9d:e3:3e:5d:fb:a8:4b:0b:f5:8a:1e:d1:8e:7a:
c6:52:e5:96:46:f0:38:7c:f5:fa:6c:58:ef:cb:15:
ad:64:e5:cc:6a:31:9f:bb:3c:05:be:83:9d:c0:47:
2a:60:1f:b0:e8:49:db:b1:44:62:a6:5a:a6:32:1b:
15:60:5e:f2:da:e5:c2:02:14:a5:26:5a:41:7d:4e:
a0:fa:91:9d:8e:2c:c0:46:ed:63:b2:f2:32:03:8a:
c2:e0:a7:f7:69:0b:bc:64:3e:cb:e2:60:72:36:a1:
ed:19:30:f5:e8:8f:5e:7e:24:b0:39:24:6f:df:63:
e0:af:d2:7c:88:38:f4:88:21:08:3c:7d:1f:86:2e:
cd:ed:6c:85:39:ea:4c:4c:aa:3f:84:f4:7e:85:bc:
e7:da:9d:83:f0:48:d9:b1:25:dc:c5:97:a7:20:48:
7c:ff:52:25:41:13:40:8b:6e:1f:b1:46:b6:70:65:
be:b2:39:51:71:a7:bd:bd:28:58:2e:e4:fc:0b:6c:
4c:c6:42:cb:16:d6:95:1b:6c:bb:5d:e1:72:4d:40:
53:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:ED:68:A4:CA:3B:6C:37:91:61:B0:86:E2:F6:8A:54:8B:19:4C:E6
X509v3 Authority Key Identifier:
keyid:A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ff:2f:00:a4:e2:b1:1f:96:fb:78:ac:2d:12:1f:28:ed:07:
77:88:3f:9b:0b:d8:bc:46:ed:58:26:54:49:48:48:96:81:03:
6c:5a:73:9e:12:95:b0:80:1a:b7:44:8b:eb:d4:7c:bc:cb:05:
3c:33:af:4c:c6:56:4c:2a:83:39:8f:3e:60:44:c6:d7:0b:4b:
90:c9:5a:71:36:0a:d7:ad:aa:d9:ff:57:cb:89:7b:e4:4a:f7:
12:66:fe:52:8d:54:e6:9b:a0:57:57:a2:dc:a1:55:9f:57:e0:
bc:b4:8a:38:92:b2:d5:a3:dc:a6:2b:b6:b1:db:f3:9f:28:1c:
47:a5:6d:c1:26:a8:c9:07:8a:fb:45:1c:37:74:89:4a:bd:49:
db:42:75:e4:2e:39:c4:30:df:a9:77:6f:88:d4:44:d6:ee:70:
17:1e:36:24:77:02:d9:27:35:18:2f:bf:76:d0:80:52:75:5c:
81:e0:82:08:e6:6d:70:dc:62:8d:0a:b1:65:67:f0:f5:8a:00:
e2:84:a7:40:73:90:d9:62:9d:ad:a3:43:a0:e9:4d:bd:39:b9:
2e:c9:e0:00:9a:dc:2b:76:d0:c4:94:b4:f1:27:9e:9c:04:aa:
3a:99:95:a0:34:6c:ba:e2:9f:6e:7c:86:28:8a:bb:35:43:39:
dd:88:16:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:23:18 2025 by rpki-client