Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
File: qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json)
Hash identifier: ht7EEVjVTAOTDNR42DLAoUkXPTwQto+Omzs6xbVjpFU=
Subject key identifier: 8E:ED:B8:AF:F3:0D:EE:F2:7E:25:96:4F:F1:69:93:D1:F6:24:5B:2C
Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
Certificate issuer: /CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Certificate serial: 01965E3AD8C55769CF72B377AF162F74917F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
Manifest number: 133F
Signing time: Tue 22 Apr 2025 16:00:36 +0000
Manifest this update: Tue 22 Apr 2025 16:00:36 +0000
Manifest next update: Wed 23 Apr 2025 16:00:36 +0000
Files and hashes: 1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: 1139eVG0Urf8RI3DJbd2Uu6MHGwrG6KEGcmxmfplDyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:d8:c5:57:69:cf:72:b3:77:af:16:2f:74:91:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Validity
Not Before: Apr 22 16:00:36 2025 GMT
Not After : Apr 23 16:00:36 2025 GMT
Subject: CN=8eedb8aff30deef27e25964ff16993d1f6245b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:12:e7:21:b4:f5:53:b7:30:a4:cc:e9:c2:
f4:93:b8:4d:c2:df:53:76:77:fa:3e:0f:25:c5:57:
4e:f4:ce:00:c2:8d:f6:78:90:82:b9:44:14:3e:48:
51:40:3d:b4:cf:2b:6b:2d:c9:32:8e:9a:2d:cd:1a:
e2:bd:79:bb:fe:10:12:07:a0:cb:a0:8b:d2:e9:b6:
0d:4e:26:8f:8f:24:b2:41:95:87:00:10:d5:f8:53:
43:e8:d5:9f:4b:68:06:d5:f2:35:1b:3a:39:ed:5e:
f7:a2:17:6e:19:e1:10:de:d8:bb:da:97:0c:b2:90:
59:4c:f8:92:bc:60:de:a4:30:c3:14:88:2d:2e:2f:
b4:50:37:06:4b:f1:b8:62:b6:56:b7:a5:05:45:52:
06:7c:0b:e4:1c:a3:65:63:55:e0:ec:88:28:cf:e9:
08:aa:8d:6f:ae:45:52:83:2d:83:9b:e3:7d:18:4f:
93:58:32:6d:c3:39:f8:23:fa:80:59:bf:52:78:97:
0f:75:e6:c1:de:f2:94:e7:23:4b:ce:3a:78:0c:f1:
4a:a0:c1:98:63:a5:ef:87:53:82:98:cb:71:ab:47:
72:da:38:93:0c:94:f1:84:a3:34:23:f3:0f:bf:55:
74:35:1b:44:99:78:e6:f5:6a:85:21:ff:6f:85:e4:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:ED:B8:AF:F3:0D:EE:F2:7E:25:96:4F:F1:69:93:D1:F6:24:5B:2C
X509v3 Authority Key Identifier:
keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ff:40:3d:ae:34:92:ae:8f:c8:04:2e:4e:9e:7d:ce:65:87:
16:63:e4:5a:70:14:d7:58:86:45:ce:75:ab:f1:9a:73:ae:b5:
07:d0:0a:64:06:f2:02:45:dd:27:5c:3c:0f:c4:e0:1f:ce:a3:
9e:f8:36:b1:6c:aa:48:ee:aa:e8:20:f2:96:54:f1:04:8a:e1:
a1:f6:5a:a5:75:e2:bc:e1:47:02:2e:ee:54:b6:d7:27:6a:45:
77:44:0a:9e:4b:a5:09:ee:8b:12:35:70:fd:ef:5b:ba:d7:99:
91:eb:db:d5:b2:ee:71:5c:15:56:c6:a4:89:0f:d5:3d:89:34:
d3:df:ed:fb:c8:8a:31:54:ce:48:17:96:04:14:01:19:57:12:
01:6e:c9:95:33:e8:e2:30:14:b4:bb:aa:3b:b3:f9:81:89:8c:
33:59:2b:cb:11:b5:39:e4:05:8e:95:2b:0b:31:9a:ee:92:b9:
97:a6:d2:6e:b2:04:be:60:76:ef:fc:9e:75:2a:70:84:06:57:
e1:ad:d2:c8:5d:af:48:f6:a4:9e:6a:31:b4:2a:95:b3:a0:25:
1c:b8:cf:d9:e8:2e:45:a5:94:d2:9f:e0:d5:1e:eb:fb:e4:91:
5a:96:8f:76:40:3d:28:17:46:30:ab:ad:1f:1e:44:c9:27:d0:
d1:a1:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:54:37 2025 by rpki-client