Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
File: nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json)
Hash identifier: A3tzdU6WOry4oj1BW1JarqJ6PCWKLRM12II11xf6OXU=
Subject key identifier: 10:41:65:69:00:72:51:AE:A6:90:00:21:75:C1:8B:82:03:F5:E3:A1
Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
Certificate issuer: /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Certificate serial: 01958BBB7BF8284F6762C0402CEBD6832505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
Manifest number: 03E4
Signing time: Wed 12 Mar 2025 19:01:14 +0000
Manifest this update: Wed 12 Mar 2025 19:01:14 +0000
Manifest next update: Thu 13 Mar 2025 19:01:14 +0000
Files and hashes: 1: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: TEXNOEw7uChTj//xQ7br+Fn9EZX4lBDPaSt1wtdYlAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:7b:f8:28:4f:67:62:c0:40:2c:eb:d6:83:25:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Validity
Not Before: Mar 12 19:01:14 2025 GMT
Not After : Mar 13 19:01:14 2025 GMT
Subject: CN=10416569007251aea690002175c18b8203f5e3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:7f:e1:64:8f:34:8a:25:53:82:19:c6:d5:
d0:8d:a5:76:84:b6:0c:54:79:96:ee:3b:8a:45:2e:
d1:11:55:33:36:50:5c:96:94:83:63:14:14:61:35:
ec:32:eb:55:e7:70:bc:2e:3e:c6:f2:cf:bb:c7:d9:
2c:11:5a:87:ba:cf:56:1c:48:74:d2:ba:c8:1a:68:
3c:33:6d:92:ed:46:8c:8d:18:1a:42:44:86:d2:a2:
7d:3d:3f:36:ea:79:f5:af:bc:65:d1:3b:5c:16:7d:
fa:72:43:28:dc:eb:78:28:d2:50:47:d7:e8:fb:50:
e2:9f:ba:2a:cc:6c:dc:27:95:06:1d:86:b2:0a:05:
e1:f8:6f:ec:3e:d6:10:3b:6b:8f:2d:9e:7f:f2:31:
59:01:54:33:0d:5e:39:23:20:7b:78:9d:39:13:3f:
f2:85:ab:aa:5e:ed:75:88:5a:0d:46:98:97:28:51:
7f:4d:54:2e:1c:c9:fa:36:16:19:e3:60:9b:e3:23:
61:bd:73:75:8b:b7:28:7d:d2:88:f6:6c:26:06:8b:
18:f2:a5:af:f9:d8:12:47:79:2d:a1:66:a5:6a:27:
1d:33:e8:7e:84:99:93:a0:a8:ed:c3:de:5c:ae:89:
cf:ee:6c:dd:52:80:1a:61:bc:3c:3c:9d:ed:25:95:
8a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:41:65:69:00:72:51:AE:A6:90:00:21:75:C1:8B:82:03:F5:E3:A1
X509v3 Authority Key Identifier:
keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:75:81:cf:a8:3d:92:d2:59:57:b6:7b:2d:63:88:3e:5c:81:
e6:7b:fa:cf:b6:34:0c:99:2a:23:77:ab:83:f1:8b:9f:7a:c0:
c7:ac:37:e5:04:3b:16:f1:c6:5e:6e:9f:bb:65:60:ee:ff:c2:
c8:08:00:b8:8b:09:22:c4:49:ad:1e:8c:be:00:21:63:5f:8a:
3a:a1:7e:f5:fc:96:fa:c1:f0:ea:7a:ef:00:9d:c2:6f:51:24:
db:3b:1d:b6:54:06:e3:e6:2e:2d:46:03:48:da:a6:63:ee:9b:
96:6f:ee:c3:fd:26:20:28:97:85:27:2e:fa:c7:bb:5a:37:2a:
57:16:4b:54:6b:35:da:aa:dc:dd:87:c8:99:ad:3f:63:e6:e0:
65:23:3b:8b:e3:8e:2c:7f:fc:c6:13:02:3b:65:72:d9:0a:82:
73:00:28:d0:60:94:68:42:9c:81:33:77:12:87:6a:ad:2e:9c:
82:fc:56:0a:c0:0f:1f:a0:b3:08:43:fa:e4:74:6d:29:1d:d8:
2a:b0:8b:83:dd:46:31:6a:b0:6c:27:1d:32:1d:4e:7b:b2:3a:
05:a3:dd:1a:e5:1c:43:d2:70:b0:e9:96:20:33:0e:d5:60:5e:
a8:a4:b1:9d:de:e8:34:58:b3:b3:d7:56:81:6f:3b:70:f7:33:
fa:d6:a1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:33 2025 by rpki-client