Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: ijTHi9BghV6x4O2Sn+ctkBUxwJ7aGtL1rO/TjmP3YvM=
Subject key identifier: E1:43:ED:04:C6:E2:B7:20:1B:EA:47:C5:2C:13:18:85:6B:62:40:B5
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 01964BFDF7524914F5F079530696C688DCCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 03:00:57 +0000
Manifest this update: Sat 19 Apr 2025 03:00:57 +0000
Manifest next update: Sun 20 Apr 2025 03:00:57 +0000
Files and hashes: 1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: OytrVQdzZMHGneL0JfBiL9dai1aMJEsiwOZjkqnDMH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:f7:52:49:14:f5:f0:79:53:06:96:c6:88:dc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Apr 19 03:00:57 2025 GMT
Not After : Apr 20 03:00:57 2025 GMT
Subject: CN=e143ed04c6e2b7201bea47c52c1318856b6240b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:51:1a:6f:37:de:b0:e1:20:c2:33:d8:da:
ee:c2:41:e9:fd:2c:64:b4:98:a8:be:4f:40:be:e1:
cb:30:16:e3:73:ec:bb:af:06:4a:6f:56:5a:29:22:
75:f1:3c:7f:47:20:39:c7:6f:cc:f0:ff:eb:17:a8:
b1:4a:48:51:34:cb:7b:b7:20:98:e2:88:71:73:5d:
bf:17:5e:5f:b4:f9:3d:b7:c5:e7:7b:94:cf:76:6b:
32:53:8b:c1:95:02:84:f0:49:70:eb:83:35:36:34:
74:b1:cf:94:aa:de:7e:19:28:aa:42:dc:b7:35:e0:
d7:bb:5c:c2:91:2a:55:67:9d:49:d0:d6:46:77:34:
31:4c:b4:40:47:05:00:12:2d:56:97:8a:42:99:51:
c6:e7:2b:95:13:37:7b:bc:6c:ca:9e:87:52:b0:0a:
18:28:0e:cb:03:34:b2:c3:86:d8:95:c6:5e:5f:08:
a0:ca:46:f2:ea:f4:78:9e:eb:e1:44:13:01:db:8b:
be:2d:c6:98:b3:43:01:61:b6:58:22:66:f5:61:81:
20:13:fe:c3:3c:88:59:b2:2d:a2:30:e4:79:b4:69:
bd:eb:03:b7:62:32:09:41:96:68:66:14:e8:67:2f:
7d:8c:20:d3:56:15:6d:3b:82:c0:44:c8:0f:8c:05:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:43:ED:04:C6:E2:B7:20:1B:EA:47:C5:2C:13:18:85:6B:62:40:B5
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d6:36:c7:52:8b:95:d3:db:36:29:6b:1c:20:95:c9:15:a6:
c3:71:06:35:e1:03:51:83:c2:f2:1f:82:16:4b:91:48:4b:7c:
9d:b3:c3:47:d6:28:99:90:fc:5e:f4:36:31:bf:9e:cc:d0:44:
dc:2c:6f:b8:07:5e:67:34:5c:b0:13:28:08:9d:3b:c0:3b:3d:
30:89:e9:5c:8c:0f:1f:13:0a:e0:20:db:21:5c:3c:b2:47:de:
1a:3d:30:a3:b9:b3:45:72:af:77:2f:60:73:95:19:72:57:e5:
57:97:13:69:c3:ae:23:9d:e7:39:34:24:7f:2c:08:50:36:3c:
47:f2:a8:42:95:cf:15:4e:a1:27:80:d9:f2:7d:31:90:30:67:
ce:7d:fa:5c:26:34:c4:88:85:0b:2e:26:a4:07:8e:8c:50:69:
6b:af:22:01:bd:05:a6:fb:72:aa:ac:fe:b8:20:d9:b8:14:81:
f3:07:44:19:33:1e:09:62:9b:c8:8f:e1:12:b6:02:56:12:65:
93:0b:6c:d2:1e:5b:82:b4:8d:24:6d:db:91:26:1c:4f:b5:b7:
62:c4:31:9f:e5:a5:89:ee:ed:eb:87:f2:2c:af:88:ea:ca:8e:
29:09:d2:5b:fd:94:b4:05:17:93:10:d8:3b:8b:19:1b:77:e1:
21:d3:38:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:27:58 2025 by rpki-client