Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
File: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft (raw, json)
Hash identifier: n35HoR7iGmrQwSkQ5ZK+XT46LYJ3yyefLdR4PBUw8IE=
Subject key identifier: CC:A5:F2:1F:1A:E2:68:0F:F2:FE:C7:22:E9:AC:46:4F:28:5C:34:03
Authority key identifier: 43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A
Certificate issuer: /CN=43a2ef27472a9604bf626fea0e187f8db624134a
Certificate serial: 01958C971E5D3E2DB7B0C410E84DDB4DD8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
Manifest number: 0C34
Signing time: Wed 12 Mar 2025 23:01:08 +0000
Manifest this update: Wed 12 Mar 2025 23:01:08 +0000
Manifest next update: Thu 13 Mar 2025 23:01:08 +0000
Files and hashes: 1: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl (hash: WFlQofMcsU84mURtAz+oODKpxAIxzAWQn7kHp7qtS7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:1e:5d:3e:2d:b7:b0:c4:10:e8:4d:db:4d:d8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a2ef27472a9604bf626fea0e187f8db624134a
Validity
Not Before: Mar 12 23:01:08 2025 GMT
Not After : Mar 13 23:01:08 2025 GMT
Subject: CN=cca5f21f1ae2680ff2fec722e9ac464f285c3403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:a5:1e:55:77:c8:45:b2:f4:02:11:79:36:
95:7d:49:ff:15:04:fd:46:d5:8b:5e:f3:89:ae:c7:
86:18:b5:2b:c4:d7:3d:b8:39:02:45:d0:ed:57:f4:
e4:bc:0d:7f:7f:a0:56:96:5b:c9:05:70:cf:5b:1c:
44:08:aa:23:3d:11:a9:7b:8a:31:2a:3e:ee:63:5b:
27:23:b6:ea:72:7f:6d:0f:da:15:57:9b:ed:4f:f5:
0c:83:22:1b:e3:91:bb:4c:af:fc:01:04:0d:fc:08:
c4:b4:e8:7f:2e:1d:f3:e0:78:cb:db:28:6d:1e:6d:
22:ed:9f:bc:61:68:79:85:12:75:8a:fa:4b:51:c2:
55:ce:25:01:41:28:fb:35:9b:58:9b:57:3a:d5:b7:
e5:bb:e1:c1:ef:8c:b4:bd:b6:33:19:c8:57:62:7d:
0f:55:fb:ac:af:bb:3b:7d:65:d6:ab:62:cb:d0:64:
a3:a1:2b:c2:ef:f0:63:3f:59:c8:b9:6a:a7:f9:f3:
e5:f5:16:fd:88:5e:c2:e9:2d:cb:d8:c1:fb:83:20:
51:0c:ad:29:7b:c6:ab:cb:8a:08:f7:5c:fc:d7:0d:
aa:b4:3b:01:29:cb:fb:bb:da:1d:ac:18:fe:9f:88:
a3:7d:9b:a8:5e:64:ef:60:03:29:9b:91:04:9d:a7:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A5:F2:1F:1A:E2:68:0F:F2:FE:C7:22:E9:AC:46:4F:28:5C:34:03
X509v3 Authority Key Identifier:
keyid:43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c0:9d:eb:7e:ae:f7:6b:33:c6:e9:44:d0:45:53:8a:e0:67:
67:24:71:26:27:a9:4d:cc:3d:46:95:48:0c:41:e0:28:6a:ad:
18:dc:21:81:66:a7:46:75:64:3d:83:7c:0b:57:a6:fc:62:4f:
da:d9:5a:5e:56:f3:30:da:3d:6d:9e:57:a2:37:51:69:92:24:
d8:07:6e:67:c4:ca:06:47:b9:8e:e4:66:9c:bd:71:90:7b:f1:
50:29:d5:62:91:15:85:ac:61:1c:e7:89:65:9c:d7:15:de:72:
b6:2e:7d:96:b4:56:5b:d8:9f:2f:50:8f:59:98:02:e3:61:4a:
45:dd:15:7d:5c:17:4b:95:9e:92:26:5a:3b:fa:75:c9:29:55:
05:6e:39:be:f0:30:96:f3:99:d7:2a:cf:36:5f:1d:c4:03:91:
a5:ea:59:7a:49:16:83:e9:70:87:7d:7d:68:a2:a1:19:f1:89:
17:a8:cc:6e:bc:98:a3:e8:6a:61:e5:61:dd:d4:4e:8a:b3:fc:
6d:dc:27:05:62:33:02:a1:9e:fa:f6:08:8f:fa:f9:eb:81:63:
6e:27:37:a1:c7:46:5a:e0:f1:38:a3:33:b6:be:96:8c:86:e3:
af:72:c8:2e:3a:68:8e:8e:bc:6c:d9:fe:d2:89:cb:37:38:23:
fb:ea:ff:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:19 2025 by rpki-client