Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
File: mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft (raw, json)
Hash identifier: N0oXPIOBdC/tYORfS1iQcrfuG8IyJmjwEq9xieyUO3s=
Subject key identifier: F1:31:7A:DF:84:0C:87:58:68:A9:B3:04:3A:23:D6:FE:DA:FF:7C:D0
Authority key identifier: 98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
Certificate issuer: /CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
Certificate serial: 01965011554362CE152F32586FF8B3F043BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
Manifest number: AC
Signing time: Sat 19 Apr 2025 22:00:35 +0000
Manifest this update: Sat 19 Apr 2025 22:00:35 +0000
Manifest next update: Sun 20 Apr 2025 22:00:35 +0000
Files and hashes: 1: mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl (hash: BXLHkiGtTFoRzxkOaxsSW3klsopTuGCaOHPp5AdLuas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:55:43:62:ce:15:2f:32:58:6f:f8:b3:f0:43:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
Validity
Not Before: Apr 19 22:00:35 2025 GMT
Not After : Apr 20 22:00:35 2025 GMT
Subject: CN=f1317adf840c875868a9b3043a23d6fedaff7cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3c:83:f3:4e:96:3d:72:78:f6:84:cb:46:ab:
f7:3e:0e:e8:06:9a:a3:33:15:ea:a2:86:6f:7f:83:
ef:1d:43:4e:ea:42:78:c7:88:23:8e:1d:33:94:89:
d2:f1:17:88:bc:fb:0f:f8:a4:6a:e3:6f:07:a2:b6:
58:6d:a5:31:d2:05:c3:1f:82:dd:02:c0:d2:01:99:
77:4a:a6:f8:ee:94:39:11:8b:a9:bb:bb:76:bf:62:
24:9f:c6:a8:91:c8:61:93:a5:fd:e3:b5:92:f2:2c:
88:c7:f7:d0:d1:c6:77:5c:dc:41:55:cb:d0:b3:74:
09:5c:85:92:5c:dc:aa:d8:76:2d:3e:90:06:a5:3f:
4a:5c:80:ec:cc:77:3f:d4:0b:39:a5:bc:f1:c8:5a:
5f:38:bb:bd:8d:86:39:74:98:09:56:87:df:e6:8b:
c3:d4:8f:53:a2:21:35:2c:f6:33:ec:51:79:c2:23:
fb:a7:63:43:2a:b8:1d:ad:4c:6c:4d:a9:93:ce:8b:
44:83:5d:48:74:a7:82:9e:92:67:f3:8d:a8:1d:83:
af:4d:0a:b1:07:cc:71:ef:0a:e2:9c:ba:3d:72:01:
c0:37:9e:f7:9a:48:e4:2e:4e:5e:c5:f9:84:b7:11:
6e:b5:fb:39:84:8a:b4:ca:95:32:79:1a:9f:4d:28:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:31:7A:DF:84:0C:87:58:68:A9:B3:04:3A:23:D6:FE:DA:FF:7C:D0
X509v3 Authority Key Identifier:
keyid:98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:37:e2:a7:06:e2:46:d8:cc:e9:6a:1d:be:03:a8:3d:e5:95:
ce:a5:be:c2:2a:f5:39:8b:08:03:5c:ea:5a:16:4b:5b:df:7f:
04:06:c2:09:e5:f6:3e:19:99:af:8f:50:22:d8:d3:73:51:89:
aa:fc:45:68:a7:10:a4:97:c2:28:e3:c9:fb:ad:bc:05:38:0c:
69:3d:62:ae:11:5f:32:d4:1b:a3:9a:6a:ee:e4:62:18:a0:1e:
96:9a:50:f7:88:80:31:88:11:84:19:18:8d:d7:42:d1:3a:bb:
91:bf:20:3c:2b:f6:47:d8:ec:95:7d:04:58:df:35:f4:ae:5b:
f6:14:47:2d:30:03:a3:02:e5:d9:85:2a:18:54:64:f3:ca:88:
45:4f:47:f0:c9:94:e9:47:74:d6:ea:54:a8:7e:fc:c2:50:0c:
1d:28:00:a1:da:38:32:14:8b:af:3e:f6:0c:a2:05:7b:79:a1:
4f:6c:d3:70:4e:b1:57:f9:4c:6b:ea:7f:6d:50:83:51:fa:7c:
63:2b:58:7d:03:8e:fd:13:b2:0b:8c:5a:63:24:0f:d1:41:98:
5d:79:05:5f:65:bc:9c:d2:80:dc:87:94:c8:05:34:26:67:56:
37:55:35:55:c7:75:9f:97:ea:ae:46:02:e6:42:23:d7:cf:38:
d2:cb:e9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:40 2025 by rpki-client