Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
File: qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json)
Hash identifier: IkjszfdzU7d6NLX+79cRzZJUF5u/9x9Ip3sD03xQNwI=
Subject key identifier: 36:16:6A:8C:B3:A8:0C:E6:16:F5:34:91:5D:31:C5:48:71:F7:97:A2
Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
Certificate issuer: /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Certificate serial: 01964DEBD53FDF81CDBAD18A29AD515FF55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
Manifest number: 0970
Signing time: Sat 19 Apr 2025 12:00:23 +0000
Manifest this update: Sat 19 Apr 2025 12:00:23 +0000
Manifest next update: Sun 20 Apr 2025 12:00:23 +0000
Files and hashes: 1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: RtIGxEwSHa7P5gfB+BPfPY1PH3z8ron8tIIzG+LgafM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:d5:3f:df:81:cd:ba:d1:8a:29:ad:51:5f:f5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Validity
Not Before: Apr 19 12:00:23 2025 GMT
Not After : Apr 20 12:00:23 2025 GMT
Subject: CN=36166a8cb3a80ce616f534915d31c54871f797a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:bf:4e:30:d6:ac:d3:67:3b:f0:45:38:7b:
7f:38:20:85:d0:c5:4a:11:e3:c4:ff:79:5e:19:e7:
09:81:5b:16:5b:27:33:28:1f:3e:4a:0c:47:f1:af:
1e:b0:3f:31:64:9e:48:f3:cc:0c:1e:73:4f:82:a3:
26:ec:99:0b:a5:b6:f8:94:c5:a3:8d:01:cf:b8:fe:
3e:8d:22:be:25:76:68:ea:a2:b9:79:0f:8d:84:83:
e1:7e:4c:61:03:64:85:07:85:04:14:f9:90:c7:e8:
8f:ea:a1:a5:35:a2:7e:d7:9c:fe:4a:b7:ad:d4:20:
7d:90:5c:65:18:0c:34:cc:95:0d:87:af:87:e7:7c:
ee:64:b0:17:05:ef:c5:17:1f:ba:c8:79:67:fc:fe:
66:6c:54:ae:a9:0a:df:ec:1e:c4:1d:a9:8b:21:bf:
2f:e0:a4:22:2a:4e:f1:10:10:fc:7e:dc:f7:df:27:
a3:41:37:7b:e9:02:0b:99:ea:f1:a0:f0:ef:11:f0:
fb:5d:85:a6:65:a5:97:b3:7a:4e:4f:35:d1:3d:71:
c5:f0:c5:95:d7:16:bb:c1:18:f9:7a:29:65:90:bb:
28:4b:2a:ff:2c:ae:43:22:33:19:61:32:d3:c3:86:
60:13:fc:d3:e3:db:91:3d:7c:32:55:f2:73:20:2e:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:16:6A:8C:B3:A8:0C:E6:16:F5:34:91:5D:31:C5:48:71:F7:97:A2
X509v3 Authority Key Identifier:
keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:14:82:55:a4:56:4a:bc:44:57:59:af:65:0a:94:c0:4f:3d:
41:95:cc:a7:b5:bf:60:9d:e5:bd:be:46:7c:4a:fb:8f:70:2c:
05:95:8c:8e:62:8f:f7:0b:ca:44:f4:54:0e:7b:32:de:5e:25:
f6:e5:27:84:fc:ba:bb:2b:21:aa:ed:79:37:ce:b6:df:34:cb:
01:08:35:3d:05:40:57:a4:e9:b0:9d:01:bb:f8:dd:86:66:4b:
93:5e:d4:2a:c6:e6:94:3b:90:e1:78:e0:63:84:fa:fc:ae:93:
4e:68:91:31:d9:dd:a6:17:26:5f:5b:2e:cd:79:a0:60:30:7d:
77:6b:b5:f9:21:3b:8e:11:db:d3:d0:2c:63:91:8f:04:d9:01:
e4:9d:81:fd:15:cf:46:cc:c1:6f:06:bc:4f:4c:36:1d:ce:1a:
e4:9b:75:fd:43:1f:cf:30:a8:3e:02:d9:9c:72:55:06:c5:4a:
a6:15:3d:12:83:39:35:48:df:a3:04:0b:0a:ba:8a:4a:de:85:
f3:2c:01:82:56:ee:b5:73:35:3b:d3:7a:62:b4:eb:4e:a8:be:
b1:63:24:b4:f5:41:9e:87:8a:79:f7:7f:75:62:50:56:1c:0b:
68:01:e8:62:cf:f5:5d:1d:b0:7c:85:a0:89:f1:1c:07:53:a8:
75:a5:73:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:25:52 2025 by rpki-client