Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json)
Hash identifier: qDkmw/vAjglLca1+8yMOJo0P78N8n6ZWHbHzHaOYOV8=
Subject key identifier: 1D:F1:91:35:F8:62:4F:A6:F2:B2:95:03:21:77:02:EB:C1:EE:B7:EE
Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Certificate serial: 019511A29BA603D8BDC0F53C284DDBBF9384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
Manifest number: 13E6
Signing time: Mon 17 Feb 2025 02:00:24 +0000
Manifest this update: Mon 17 Feb 2025 02:00:24 +0000
Manifest next update: Tue 18 Feb 2025 02:00:24 +0000
Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: Bww2+e9lhV+H6reLqyzIHhVEofEEpGElkugAmSf/C7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:9b:a6:03:d8:bd:c0:f5:3c:28:4d:db:bf:93:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Validity
Not Before: Feb 17 02:00:24 2025 GMT
Not After : Feb 18 02:00:24 2025 GMT
Subject: CN=1df19135f8624fa6f2b29503217702ebc1eeb7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:c1:fc:2e:b7:d7:7b:57:58:42:ec:8e:cb:
12:ee:ec:31:36:39:2b:e7:40:43:0d:a2:ef:c7:4c:
5a:2f:06:ee:c3:8c:4f:17:b0:f5:3f:6d:20:e2:be:
50:6b:b0:d4:01:eb:70:32:91:62:78:b8:28:d2:81:
77:b2:52:62:b1:ff:2e:02:37:f1:00:fe:f9:3e:66:
35:34:00:77:62:63:ef:de:6e:84:24:93:df:a8:25:
fa:cc:95:24:71:70:0e:7f:23:f1:74:dd:42:7b:f4:
4d:2f:51:ee:19:bd:4d:ab:9c:6d:9b:66:60:4c:44:
3c:15:84:04:c7:86:94:de:a4:ac:39:94:89:00:4e:
3a:57:87:34:08:b5:4c:a5:19:2a:dc:21:5f:6e:46:
87:bd:90:b9:0f:ef:f6:28:2a:55:46:5a:32:16:fa:
6b:7b:18:e3:44:c7:7c:e6:dd:af:07:06:1f:93:82:
bb:05:10:01:82:08:73:9f:15:cf:f4:bd:9b:b9:f3:
28:e2:bc:97:5d:7a:ec:8d:66:40:26:dd:7b:4f:3b:
f7:57:4a:6e:ae:27:6b:09:e2:32:f8:bb:ff:58:eb:
88:98:6f:ee:ab:69:c8:2d:15:20:de:ae:2a:63:fc:
f2:b6:6f:ec:55:86:19:17:c7:7a:73:eb:a2:11:6a:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F1:91:35:F8:62:4F:A6:F2:B2:95:03:21:77:02:EB:C1:EE:B7:EE
X509v3 Authority Key Identifier:
keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:f9:41:49:98:5e:49:a7:e6:87:86:f5:7a:f3:96:ba:20:e2:
ae:41:f9:5f:33:3f:c7:dd:cb:d5:f8:c0:0b:9d:21:45:a9:ff:
8f:15:2f:d8:b0:ce:5c:06:21:bc:77:7d:1e:d9:76:a7:bc:62:
64:63:ab:87:1e:5f:86:c1:42:63:a8:36:e7:65:c1:f6:0b:d4:
b2:ff:2a:5d:19:06:28:67:b8:ed:08:07:8c:cd:fd:8a:ff:64:
1a:dc:7c:83:4e:4b:e9:56:a3:86:48:01:ac:bf:d4:26:3f:61:
6c:a2:65:35:58:d2:0f:3f:87:e9:ab:d0:8f:bd:a9:05:b5:fa:
c5:0c:57:3e:d3:f4:50:d4:fc:50:6e:9a:cf:37:ed:2e:9d:83:
68:c6:50:da:fb:21:8a:10:b6:88:57:e1:18:d8:73:1b:51:05:
00:f9:07:cb:ae:9d:b1:06:ad:ad:0a:80:fc:ba:f1:a5:9a:48:
2e:da:72:7d:5e:9f:38:b2:8f:aa:6f:84:af:90:30:4c:d8:cf:
c4:be:84:18:3d:e7:b9:ee:7d:f7:14:6e:2b:33:46:88:d2:85:
54:d8:57:78:97:f3:79:7d:04:c8:71:43:27:b0:37:54:2b:f3:
b2:2d:9e:19:fe:5a:c1:3f:82:9c:ad:ba:a6:31:ed:d2:5d:aa:
8c:31:27:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:29 2025 by rpki-client