Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
File: SLQt9x-KKZb70xXQqmF63zQ9WwY.mft (raw, json)
Hash identifier: qB/h/UMXhdQ4g+lfem7IXjAlfg3SjQu/bD4ckxGUYbY=
Subject key identifier: B4:59:F2:C0:E8:7C:A6:84:F8:33:53:48:09:5A:A1:A8:54:D6:BB:50
Authority key identifier: 48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06
Certificate issuer: /CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
Certificate serial: 01965B03D1565C1A403425266B9A6CCF5CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
Manifest number: 0272
Signing time: Tue 22 Apr 2025 01:01:38 +0000
Manifest this update: Tue 22 Apr 2025 01:01:38 +0000
Manifest next update: Wed 23 Apr 2025 01:01:38 +0000
Files and hashes: 1: SLQt9x-KKZb70xXQqmF63zQ9WwY.crl (hash: PEygXrC/Y9gejzvqRA37+a7IeMvHZmLbQxDxadV/HLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:d1:56:5c:1a:40:34:25:26:6b:9a:6c:cf:5c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
Validity
Not Before: Apr 22 01:01:38 2025 GMT
Not After : Apr 23 01:01:38 2025 GMT
Subject: CN=b459f2c0e87ca684f8335348095aa1a854d6bb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:c4:f8:d0:bc:ba:a5:d4:93:5b:f0:2c:55:
1a:49:91:33:67:1b:63:99:e8:59:c6:13:ba:6d:cf:
52:58:4a:ea:1e:a1:eb:0b:55:e2:2f:86:64:70:bc:
ee:0f:02:f5:42:39:6f:43:a3:9f:63:b6:37:05:84:
e9:b8:03:05:20:5f:b5:cc:77:d4:8f:46:d6:7e:16:
0f:c8:72:ce:38:f3:cb:78:52:68:ff:55:be:11:c6:
c1:82:b2:5d:5c:aa:d3:a6:1b:d6:ca:2e:e8:78:2c:
0e:4d:32:8f:b3:c3:cb:73:1b:20:0a:1b:a2:42:f3:
5d:7d:4c:a5:bb:d2:d9:09:d8:50:ec:4f:eb:fd:ed:
50:9f:57:db:06:e5:ee:76:ca:73:66:0d:5f:77:95:
04:f0:29:b1:38:11:5e:1f:01:56:46:1b:32:f1:41:
95:c3:f7:15:75:62:7b:fc:9b:52:a6:7c:12:ef:19:
9d:c7:5c:32:b9:f6:54:ba:a9:f9:46:35:96:bd:fb:
e5:9e:a9:98:4e:c9:5a:37:d2:1f:30:02:98:d1:03:
5c:54:59:42:f0:5d:11:69:05:4f:9c:7b:69:2e:70:
3b:ea:b5:23:d0:5f:c8:ae:11:4e:aa:d5:a8:8c:c5:
2a:92:d5:e2:fc:b9:d9:ce:c0:11:52:5a:53:e3:83:
24:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:59:F2:C0:E8:7C:A6:84:F8:33:53:48:09:5A:A1:A8:54:D6:BB:50
X509v3 Authority Key Identifier:
keyid:48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f1:d1:5f:7f:48:8d:99:a9:24:b7:c4:8c:dd:68:31:9e:8f:
72:56:04:7d:70:8b:6a:55:ca:42:47:bb:55:04:1d:69:73:e1:
e6:7c:bc:e6:44:c5:c0:5f:2a:94:75:9f:dd:6c:52:9d:e2:ed:
54:fa:62:cc:f8:a4:a1:cf:40:55:f3:5e:1f:fd:ee:66:aa:fe:
ba:ea:fb:26:75:84:38:89:20:b7:2a:20:8a:c8:f5:30:b3:a9:
a8:e8:38:1e:70:59:38:c1:1f:07:6f:b1:80:c9:42:e6:28:83:
51:51:c3:ec:57:59:37:1d:e5:b9:d8:cf:35:a5:fb:55:3c:77:
59:5b:bf:a9:aa:9f:a5:2a:2a:60:e0:1c:06:44:47:a7:71:47:
b1:8c:cd:ee:d8:6f:8f:2f:bb:02:d2:42:c5:c7:b9:b1:80:34:
3d:ce:82:98:e3:f6:76:7e:3f:61:32:b2:44:4b:01:6a:9e:66:
b5:ab:be:ea:99:27:ec:7f:77:cc:a3:b5:d9:e8:9f:d9:9b:1d:
92:24:d5:32:50:3e:88:59:c9:93:58:07:03:93:4a:f7:fd:7c:
d2:6d:3c:02:6e:56:73:f8:d3:27:ae:b5:47:45:03:59:cb:0a:
75:9c:1b:bd:26:f1:e7:f0:4a:d1:82:55:2a:fd:32:75:1d:d5:
a9:54:79:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:58:27 2025 by rpki-client