Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
File: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft (raw, json)
Hash identifier: XkfZgVDRqyh2CwYpwX46IE+mYb6uu11MaXTokxixPmU=
Subject key identifier: B8:38:A5:94:84:84:1D:A7:FA:09:2C:E9:59:B2:2E:BF:6C:04:B5:C7
Authority key identifier: B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
Certificate issuer: /CN=b50edfc96d2b61788689533142969e65566512aa
Certificate serial: 01964A46920C4727264434FA745B9DC2811E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
Manifest number: 1476
Signing time: Fri 18 Apr 2025 19:01:00 +0000
Manifest this update: Fri 18 Apr 2025 19:01:00 +0000
Manifest next update: Sat 19 Apr 2025 19:01:00 +0000
Files and hashes: 1: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl (hash: WTBRVACg+N/2Bs6tYfNzkEqBQK+ls/tO/vhUgJXBp7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:92:0c:47:27:26:44:34:fa:74:5b:9d:c2:81:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50edfc96d2b61788689533142969e65566512aa
Validity
Not Before: Apr 18 19:01:00 2025 GMT
Not After : Apr 19 19:01:00 2025 GMT
Subject: CN=b838a59484841da7fa092ce959b22ebf6c04b5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:3f:71:1f:bd:f6:8a:69:1c:d2:3e:c5:cd:
53:ab:49:da:00:79:28:39:6b:64:27:a0:b3:d6:ec:
6a:bf:27:16:e9:b8:99:22:a4:41:07:6e:34:9b:06:
08:67:5e:d9:ff:04:e4:29:6b:fe:8f:61:ab:6d:53:
56:1e:c0:9a:f3:4a:78:be:79:3a:5b:d6:37:bd:46:
5c:71:4e:39:c9:3f:e8:06:fa:5a:b8:78:e6:da:cf:
a5:d5:2c:a5:2a:89:af:71:78:a6:a9:c5:ab:e0:44:
7f:c0:e9:4f:bf:23:8f:13:66:bf:5d:27:6b:4e:08:
b5:a4:66:7a:4b:41:03:75:8b:fc:49:e6:a6:a7:24:
f5:4f:31:03:b1:fc:ba:10:e8:eb:ce:90:e7:22:89:
cd:25:a5:8d:31:c0:8e:ea:11:16:48:30:d5:bc:74:
9f:72:3c:f5:24:da:7f:91:20:19:68:1a:c2:89:7b:
91:90:1c:bc:e9:f5:8a:03:f3:95:c8:48:5f:14:b2:
0c:9b:9e:68:da:68:55:82:23:5b:fa:3c:df:38:ca:
97:39:fc:39:d4:a9:c3:84:fa:e2:47:ac:36:c8:ad:
cc:82:4c:4d:82:4d:f4:c3:d0:f6:17:ff:fb:70:c3:
0c:78:47:b2:f0:3e:12:1d:37:c7:b8:da:13:fc:40:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:38:A5:94:84:84:1D:A7:FA:09:2C:E9:59:B2:2E:BF:6C:04:B5:C7
X509v3 Authority Key Identifier:
keyid:B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f2:b8:af:e1:31:9d:16:af:4b:4f:ee:25:24:1a:62:36:fc:de:
09:b2:97:6f:50:21:37:c8:25:4b:49:af:58:1d:57:48:27:cd:
58:93:06:4e:8a:91:34:7c:45:6c:29:14:e5:0f:2e:9d:a6:a4:
0f:97:b5:95:87:4a:4e:05:ef:34:bc:42:bb:07:34:51:69:48:
7c:38:4d:1c:79:99:06:36:88:fb:9b:74:03:7e:e5:20:4c:90:
08:06:dd:83:ef:6e:a8:1f:9d:3b:c6:e6:24:23:80:47:f3:21:
89:8f:49:02:78:bd:b6:be:ed:ba:27:63:00:aa:26:99:c8:dd:
07:d4:df:12:28:af:b6:ba:89:aa:a3:51:0a:2a:6c:fe:a3:e1:
a5:e5:6d:5c:55:61:55:36:68:23:ba:3a:ea:79:4e:c4:a0:f8:
c4:13:25:b2:8f:d2:d3:51:ca:6d:f7:97:a2:ba:f2:ea:e2:21:
6a:40:ff:3b:cb:99:d2:6c:69:51:e9:a2:9c:87:91:52:8a:2a:
b4:23:b3:e5:ba:b0:8b:28:bb:1f:66:b0:13:67:13:7f:7c:66:
98:ac:1c:f0:17:f0:c2:c0:83:7d:37:d5:09:77:c8:4e:b1:e0:
d6:77:2e:e1:a2:71:0d:85:66:54:a5:ed:50:36:68:63:e9:0f:
4f:63:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:35:22 2025 by rpki-client