Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
File: Q5_i1RcHd00tDCv50SrQercmQqI.mft (raw, json)
Hash identifier: yFnims1H3SAg+q8S1F54GcGITBqu/O4Dxy/ZexPkmRM=
Subject key identifier: D4:BD:2E:33:77:6C:8F:BC:18:D8:22:1B:BC:15:44:8C:69:22:A4:DD
Authority key identifier: 43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
Certificate issuer: /CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Certificate serial: 0196A1D25F4D604A6B891991DA418A1AFD27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
Manifest number: 0D8A
Signing time: Mon 05 May 2025 19:00:40 +0000
Manifest this update: Mon 05 May 2025 19:00:40 +0000
Manifest next update: Tue 06 May 2025 19:00:40 +0000
Files and hashes: 1: Q5_i1RcHd00tDCv50SrQercmQqI.crl (hash: E85WgbL6JZcwVcGQWYaDRMP56UKZ+Hnz28FYFcUCxAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:5f:4d:60:4a:6b:89:19:91:da:41:8a:1a:fd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Validity
Not Before: May 5 19:00:40 2025 GMT
Not After : May 6 19:00:40 2025 GMT
Subject: CN=d4bd2e33776c8fbc18d8221bbc15448c6922a4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ae:bf:29:6b:e4:fc:6e:fd:91:07:1a:db:48:
bc:e7:dc:4b:62:2c:82:60:30:f8:c1:d9:37:15:33:
e4:6e:61:73:2f:92:e0:c7:e1:cd:ce:08:77:6e:c8:
5e:86:64:a8:ae:c0:7f:dd:e7:ed:85:6f:a4:63:fd:
ee:ee:ab:ca:9e:17:45:48:81:28:f2:e6:82:b8:a5:
8a:ec:b7:72:e5:03:e5:f4:ee:1f:7e:51:2a:75:d9:
1a:ea:db:22:78:ff:fd:7c:3f:ce:8f:5e:3e:a6:cd:
11:bb:8b:a9:81:ab:c9:6f:03:c3:a5:9a:0d:1b:e9:
98:6d:dd:22:89:d3:84:72:d8:48:86:1d:b6:d7:a3:
a6:dc:7b:a6:76:36:a2:09:67:80:be:90:aa:c0:4a:
34:64:11:f7:4d:97:07:18:d2:81:fb:46:37:3f:d6:
63:e9:71:b8:2f:5e:08:ae:d6:e4:c0:c9:58:42:26:
fd:13:da:4d:13:12:ca:8e:ef:b1:c8:2d:6f:e9:e8:
16:f6:b3:47:5c:e5:45:ca:58:5d:19:81:c6:2c:cf:
3c:47:5b:9d:aa:ab:72:4c:26:16:37:83:9a:1b:19:
68:3e:65:ae:d4:d4:56:47:69:cf:8a:16:88:e3:81:
1a:12:e0:33:b6:fc:e4:2c:2c:58:31:0b:77:72:66:
fe:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BD:2E:33:77:6C:8F:BC:18:D8:22:1B:BC:15:44:8C:69:22:A4:DD
X509v3 Authority Key Identifier:
keyid:43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:53:f1:f3:5e:74:73:a3:2e:49:07:d7:f1:68:fc:63:20:2f:
c6:a7:85:92:a9:e8:a2:02:a9:5f:32:7b:6b:15:3f:56:11:6e:
72:07:80:e2:cc:ae:b3:22:38:84:f7:b8:7e:c8:7a:a4:e3:e1:
d3:f6:0d:f2:70:92:ff:d1:52:48:2e:37:8c:57:ce:76:aa:1f:
06:2d:f3:02:21:f5:7f:e1:9f:72:93:7a:6e:ec:27:83:39:67:
15:98:b9:02:ab:d1:59:39:da:70:3f:28:0e:53:02:5b:b2:a1:
20:6b:c7:21:06:70:7d:6f:7f:cf:f6:d7:28:85:cc:62:a4:95:
b9:a3:ec:05:cd:ed:48:dc:f7:93:98:b1:39:b7:ff:df:50:d8:
58:32:6c:66:0e:3e:8c:73:fb:68:f5:20:01:42:2d:a1:96:a9:
8b:48:0b:05:7b:cb:2c:a7:04:ea:67:31:78:01:d0:a4:00:15:
5f:4c:a3:80:16:b9:ca:b5:b1:dd:35:30:1c:04:98:c3:2e:a2:
4d:4f:1a:3d:df:94:e2:e2:81:cd:26:3b:a6:30:22:df:52:90:
ca:f8:1d:9f:c9:f9:4f:43:b4:3b:a2:08:a6:41:08:36:7d:7a:
f9:d0:dd:41:74:9e:d0:4e:b9:2f:5c:ad:9c:0b:2a:bb:73:33:
17:6c:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:16:21 2025 by rpki-client