Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
File: Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft (raw, json)
Hash identifier: 9nQCgF7O134MVlxHYXyzSBOl4NpoZGo1zINNWjrnckQ=
Subject key identifier: 5F:DB:62:75:55:21:2E:DA:C3:62:38:F9:7B:1E:56:48:17:39:92:A1
Authority key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
Certificate issuer: /CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Certificate serial: 01965349E8EFA55E3538B92F37EE9E6F11E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 13:01:14 +0000
Manifest this update: Sun 20 Apr 2025 13:01:14 +0000
Manifest next update: Mon 21 Apr 2025 13:01:14 +0000
Files and hashes: 1: Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl (hash: oTMGZdViEfne9uAZ7Vu94LYYNSjkxbhgOWGaMyuL1EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:e8:ef:a5:5e:35:38:b9:2f:37:ee:9e:6f:11:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Validity
Not Before: Apr 20 13:01:14 2025 GMT
Not After : Apr 21 13:01:14 2025 GMT
Subject: CN=5fdb627555212edac36238f97b1e5648173992a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:bf:6a:f8:e0:21:d3:ff:5d:42:17:55:28:
6f:c3:3b:c1:9f:05:54:6f:d5:76:40:42:eb:22:60:
db:04:a3:b4:20:8e:6a:7e:37:0e:c5:98:b5:90:33:
3a:e6:e5:79:ab:3d:7e:5a:d6:70:3b:3a:15:4d:13:
dc:3c:63:0c:d9:c5:ba:50:d8:bf:88:ae:4c:7b:b3:
16:25:f5:14:ff:83:80:7d:01:61:5d:e9:e0:90:3c:
d5:78:e8:81:57:48:b0:2d:b4:9b:09:48:09:e0:bb:
ae:e1:5b:8e:b4:16:f1:b2:ff:a0:7f:e4:6f:ea:6a:
38:e4:42:a6:85:81:db:91:10:65:78:ce:9e:45:42:
7e:27:6d:e4:80:3f:76:68:6a:91:6b:f2:f4:0e:ab:
87:b0:ac:7e:68:28:07:80:2c:bf:3d:aa:0c:c3:a4:
60:83:13:7d:e7:c1:77:4d:65:1a:6b:21:7b:3f:94:
30:c2:ba:b2:31:5e:a0:57:10:bf:55:f8:36:9f:f3:
33:11:15:9c:70:1b:e9:40:a9:88:56:02:cc:b7:f8:
c5:fc:0d:ba:85:4a:48:84:46:07:c1:1d:d7:b7:f2:
52:d2:b3:cd:b8:f4:05:ce:57:e5:e4:e3:67:0f:13:
d1:b3:5e:c3:41:64:e9:ce:a5:92:07:d4:c1:59:ef:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DB:62:75:55:21:2E:DA:C3:62:38:F9:7B:1E:56:48:17:39:92:A1
X509v3 Authority Key Identifier:
keyid:46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:29:76:40:60:73:db:d9:fd:f4:c4:86:c3:6a:89:d3:5f:c2:
75:2c:86:b2:d8:64:df:22:d2:37:a7:33:1c:82:fd:43:8f:06:
2f:7a:5f:27:09:b2:2b:b1:7c:57:e3:11:43:41:4f:c4:b6:81:
a8:d7:f7:ca:0e:6c:57:98:3a:86:0e:f0:0c:07:2a:e1:16:17:
6f:82:f6:08:dc:93:be:74:86:e5:f4:9c:6b:32:4b:5f:f5:48:
6c:aa:d6:c2:98:f0:70:85:b1:f2:84:81:9b:7a:cb:65:a4:13:
2c:f8:50:a4:15:71:07:21:ef:56:3f:cc:96:93:c6:7d:70:8a:
d0:fc:17:da:d8:2e:f5:c1:7d:1e:7d:d6:03:cf:a9:3c:9c:2d:
a6:80:71:83:ca:f9:3d:f8:da:67:46:51:97:64:03:90:71:ce:
1b:18:a6:80:8f:48:8c:1f:39:d6:a7:3a:c8:44:cf:2a:7e:ff:
7c:50:53:85:ae:a5:68:d2:f4:fa:13:46:a3:c3:fb:46:b3:5c:
1e:44:38:92:57:98:58:bf:df:0b:b3:64:54:fd:d0:11:a2:76:
e7:2b:2c:92:73:ed:7c:91:d9:2f:52:e7:76:32:14:dd:47:c8:
4f:9b:26:72:22:eb:2e:ab:e5:d8:c5:74:72:f9:96:f1:6a:ac:
c8:5c:ab:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:59:03 2025 by rpki-client