Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
File: qTThBr5Thu0QZ17g3jNtx34gDVk.mft (raw, json)
Hash identifier: syNsJ0m7W5mKzp0+joR5qO4bFZHc5DKc1si8jJiCi9Q=
Subject key identifier: CF:3A:15:9E:EC:D1:B2:6F:8F:64:32:84:11:62:91:61:08:D9:DB:61
Authority key identifier: A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
Certificate issuer: /CN=a934e106be5386ed10675ee0de336dc77e200d59
Certificate serial: 01965492DB8877A748CAD4E5FDBF3A30552E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
Manifest number: 034F
Signing time: Sun 20 Apr 2025 19:00:32 +0000
Manifest this update: Sun 20 Apr 2025 19:00:32 +0000
Manifest next update: Mon 21 Apr 2025 19:00:32 +0000
Files and hashes: 1: qTThBr5Thu0QZ17g3jNtx34gDVk.crl (hash: OsqvHRQcBZDrsfvmhxy/EjrLDI9rBZZNjkro7weuEww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:db:88:77:a7:48:ca:d4:e5:fd:bf:3a:30:55:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934e106be5386ed10675ee0de336dc77e200d59
Validity
Not Before: Apr 20 19:00:32 2025 GMT
Not After : Apr 21 19:00:32 2025 GMT
Subject: CN=cf3a159eecd1b26f8f6432841162916108d9db61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:6c:6d:b4:c7:7f:86:ac:a2:ec:d2:c7:20:
1e:8f:e2:1e:63:5d:02:7a:07:c3:1f:04:90:ea:02:
d3:39:68:8e:e1:9e:8b:1c:99:3e:b3:c0:06:a4:2b:
c2:b6:af:3c:92:e3:16:74:67:36:ef:ee:36:47:9b:
18:cc:88:bd:cd:d2:4e:43:13:6a:7e:b2:17:94:73:
b0:6b:ab:a1:6e:e4:98:a8:8d:2a:0b:61:7b:e0:3a:
c8:59:00:a2:d3:b3:b6:df:50:ad:d3:7c:01:41:87:
7d:e8:79:0f:1a:a4:82:c1:d9:04:53:c6:37:78:36:
8b:18:f4:12:16:ef:37:51:9f:32:d4:61:cd:56:05:
e7:6d:4e:a9:ca:85:16:29:50:80:76:bf:38:ee:db:
04:69:b0:28:ea:b8:a9:de:4b:38:b0:89:e4:0d:dd:
dd:3c:10:10:f2:ee:03:aa:1f:05:12:1b:9c:4d:23:
24:d2:a7:bd:25:a7:ff:1c:b4:d6:34:d8:96:56:26:
88:10:9c:17:05:a4:10:6b:c4:98:46:4f:6d:ec:bf:
f0:c8:c3:b8:dc:3d:0c:d6:51:9a:c2:b1:01:40:bd:
8f:ef:8a:88:e7:eb:6e:24:fd:68:e5:1e:58:6f:16:
9e:36:b1:58:dc:54:95:fb:49:83:5f:0b:e1:70:5f:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3A:15:9E:EC:D1:B2:6F:8F:64:32:84:11:62:91:61:08:D9:DB:61
X509v3 Authority Key Identifier:
keyid:A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:94:83:41:78:cb:90:cf:ec:61:1d:2d:1e:b8:c1:62:98:77:
e2:b6:68:b0:c2:54:f2:14:ae:3e:51:0c:ea:a4:ee:02:07:b6:
cf:73:4c:6a:be:f6:63:22:d2:17:f7:28:f7:b8:9d:e7:4e:50:
73:b7:a6:65:af:c3:ab:2a:97:66:0b:a3:3c:9c:05:3f:6b:1b:
87:e7:0e:4d:04:44:53:4b:27:1c:ff:88:4d:12:80:8c:25:47:
44:d6:4a:18:7c:2d:e1:5f:7b:0b:28:9d:fc:ce:66:40:c7:e6:
02:85:7e:f4:b5:d6:d0:96:b7:26:b9:87:91:be:0d:c2:9b:50:
e7:41:08:7e:e6:e8:29:27:27:b3:d7:fc:85:8a:d8:90:d4:d8:
cb:4e:5e:e7:ac:b3:96:18:61:fa:9d:82:ed:92:02:5d:c2:80:
41:27:61:44:02:89:1d:8d:25:6e:71:56:b0:97:b6:43:b2:ba:
9f:4c:e9:a2:0d:ce:3b:03:64:ed:13:2e:bd:b2:c9:1c:07:58:
05:52:14:0f:58:30:af:a4:1c:ef:8c:fe:85:e5:1a:d1:0f:0f:
2e:5d:0a:34:19:c4:56:df:5d:71:81:59:de:5f:33:32:f7:b4:
e5:45:a2:7d:10:3c:c6:b4:7f:bc:70:12:c8:2f:1a:c6:9a:a6:
c3:ef:9a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:19 2025 by rpki-client