Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json)
Hash identifier: CeP1Dpw3BbqJOqD/x35rmt0AmfVCQBzahMpLGuF6oBs=
Subject key identifier: CE:6B:C3:C7:97:AB:DB:D3:DF:6B:DD:6F:23:20:AD:BE:DA:99:DE:00
Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Certificate serial: 01964C6BB5F60F088D3F5963083C1C260EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
Manifest number: 0E75
Signing time: Sat 19 Apr 2025 05:00:49 +0000
Manifest this update: Sat 19 Apr 2025 05:00:49 +0000
Manifest next update: Sun 20 Apr 2025 05:00:49 +0000
Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: 4RZTEM+fWNi7FoTodUCL5/ZfhlvhYC+sJF6IWuZ9ufE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:b5:f6:0f:08:8d:3f:59:63:08:3c:1c:26:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Validity
Not Before: Apr 19 05:00:49 2025 GMT
Not After : Apr 20 05:00:49 2025 GMT
Subject: CN=ce6bc3c797abdbd3df6bdd6f2320adbeda99de00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:ab:79:7e:ca:55:0d:3f:1c:02:bb:04:5a:
83:e3:0f:4d:e1:10:2a:47:2b:91:24:b0:82:79:42:
2f:c5:71:f0:2f:db:2f:26:f5:39:a0:bf:d4:42:65:
1a:46:e2:89:75:06:be:66:a4:4e:71:44:11:e9:ef:
e9:06:cf:04:21:40:6c:71:71:7f:aa:6b:f5:94:47:
1e:40:4b:f3:44:79:0d:93:b1:34:ef:a7:d1:a4:db:
24:c1:60:8b:bd:d3:91:36:5a:76:b8:f1:9d:4c:58:
33:ab:b1:4d:2a:27:65:d4:79:4d:40:98:ae:b8:22:
a1:84:f7:4d:1c:59:f0:72:5d:b1:67:d5:ff:95:3b:
c0:7c:46:de:5e:6f:b3:a8:5c:6f:99:a3:cf:fe:97:
c8:26:ca:23:13:cc:cd:75:49:1f:c7:aa:21:3f:f2:
a5:c4:4d:de:a9:48:cd:ec:25:7d:85:d1:82:7e:a6:
8e:38:22:af:83:26:28:50:54:9e:08:be:43:81:b4:
2f:ec:b5:8d:13:5d:bf:0e:db:a8:0c:05:80:8d:dc:
26:9d:ac:aa:ea:af:4b:e9:61:34:c0:89:0b:f4:1a:
55:35:3c:0a:62:66:90:f7:0c:04:f5:d1:c7:4a:df:
b5:36:6b:54:da:48:43:e5:9a:2a:25:6f:c9:10:fa:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6B:C3:C7:97:AB:DB:D3:DF:6B:DD:6F:23:20:AD:BE:DA:99:DE:00
X509v3 Authority Key Identifier:
keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4b:ca:00:dc:92:f3:63:d2:c1:86:83:10:55:39:e2:04:92:
80:4d:de:44:9d:aa:a0:24:2e:ff:d7:86:aa:ef:4d:f8:17:dc:
57:c5:48:d4:5b:97:d5:88:9d:8a:c7:e2:47:e4:8f:b7:13:b3:
61:7d:97:67:ca:53:20:7e:5d:3b:67:ea:b5:01:ab:ff:08:f8:
07:8a:5d:e1:de:1a:07:bc:37:14:7d:64:3c:0d:1b:7f:12:5a:
df:5c:33:7e:37:01:d3:a5:81:7e:35:40:92:2c:9d:64:6d:a0:
2c:0c:11:4d:ee:4a:58:80:00:ad:4c:e5:61:a3:e2:30:63:b4:
c6:7b:39:c5:f9:f8:4e:32:a1:c3:15:ed:67:68:18:c7:fd:23:
31:d6:1e:45:57:cd:1c:f3:e9:87:2e:22:89:88:74:a9:2a:bc:
19:4d:66:60:77:53:55:4a:10:37:b2:c3:ee:ca:7b:d1:44:10:
17:96:ac:6b:b3:88:b2:ea:47:a3:9a:f4:35:a2:da:06:55:23:
a5:21:5c:e3:db:4e:00:c1:9f:3a:94:c7:2a:53:42:72:1d:77:
76:a1:de:2e:f3:5c:62:0b:50:1d:1d:e4:de:72:aa:7f:f2:e6:
2c:95:15:fa:9c:e5:54:64:f2:79:7f:22:b1:28:4a:55:4a:a9:
b6:a4:37:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:45:24 2025 by rpki-client