Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
File: qI1YyAfJSdssH18nPx78TfGlxVM.mft (raw, json)
Hash identifier: W+V999iIZS/wkTeBxZwRwoP0rRA+XLMTRvoHgmLSKRA=
Subject key identifier: 2B:FA:44:9A:47:6C:FF:E6:FB:79:50:0B:32:31:AC:97:BD:5A:CE:21
Authority key identifier: A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
Certificate issuer: /CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Certificate serial: 01963B778E38DBB420474D9A3E3E1CA4C6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
Manifest number: 0655
Signing time: Tue 15 Apr 2025 22:00:12 +0000
Manifest this update: Tue 15 Apr 2025 22:00:12 +0000
Manifest next update: Wed 16 Apr 2025 22:00:12 +0000
Files and hashes: 1: qI1YyAfJSdssH18nPx78TfGlxVM.crl (hash: uSQci7QeogKSmircGmcykognOHMlqH2O6h34j34DtdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:77:8e:38:db:b4:20:47:4d:9a:3e:3e:1c:a4:c6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Validity
Not Before: Apr 15 22:00:12 2025 GMT
Not After : Apr 16 22:00:12 2025 GMT
Subject: CN=2bfa449a476cffe6fb79500b3231ac97bd5ace21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:62:91:78:f4:15:ec:c3:48:fc:a2:1a:63:
52:68:55:81:ba:bd:b7:fc:2f:b3:79:f7:f8:2c:e7:
a3:27:eb:42:93:f7:29:7b:5c:69:7c:49:9b:6b:ea:
03:28:2a:dc:bc:df:da:5b:0e:51:ce:53:6b:0d:42:
67:1c:9d:e0:ac:b2:59:5f:67:ef:27:1b:51:1a:66:
53:e9:81:c5:d8:61:81:03:44:6e:a4:4f:db:b9:20:
51:f2:0c:86:05:c3:e0:47:58:85:ed:eb:e9:5b:ac:
02:17:ed:51:d5:f6:8b:e5:df:61:3b:03:eb:d8:17:
f2:47:ad:44:f7:28:2e:5d:f4:22:71:19:da:5f:18:
69:ed:91:ba:f0:8c:a8:a3:58:2d:92:ac:be:98:df:
ab:23:b5:66:58:2d:0c:66:44:5a:05:51:b4:7c:74:
bc:b5:3f:a3:62:a0:7f:4f:c7:8b:7f:b1:ef:41:93:
7c:70:33:5e:99:b5:44:ce:99:db:ff:c3:a9:ef:9e:
c6:ad:7c:b1:2e:89:e6:3e:84:38:08:de:ad:e1:ff:
23:ff:94:dd:8f:b0:03:77:7d:33:64:e2:9e:2b:e1:
ea:0e:98:00:88:28:b9:31:47:ff:bf:ca:34:28:7a:
35:1c:56:96:83:c6:0c:db:33:9a:3c:20:18:b3:d3:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FA:44:9A:47:6C:FF:E6:FB:79:50:0B:32:31:AC:97:BD:5A:CE:21
X509v3 Authority Key Identifier:
keyid:A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:79:3e:d3:33:e0:eb:92:be:88:d4:81:54:94:60:87:b9:da:
ab:72:1c:64:bc:ed:bc:af:6c:0c:fa:a0:b0:45:21:bd:16:12:
a9:92:93:2a:c5:4c:25:62:d3:e2:81:71:00:12:70:6a:49:79:
61:52:8c:e8:ac:f4:04:7d:6f:65:56:41:78:54:0c:d0:d3:ea:
4c:8c:7c:e7:1e:76:bf:bc:32:82:cb:fd:d7:73:af:cf:2d:10:
52:a0:b3:76:80:d3:04:e9:e5:c8:8a:15:82:22:d5:1d:de:3a:
54:b2:3d:91:e1:b2:80:f4:2b:70:e5:b3:9a:31:35:2e:d2:74:
da:02:c8:e5:d1:4f:2d:1f:50:0c:07:c1:ea:bd:85:2f:40:67:
9d:d4:0a:28:af:75:98:cd:a9:c0:56:0c:23:69:f7:d7:99:e1:
1c:62:87:9d:0e:fa:3e:56:f7:83:f9:e8:9e:ae:57:94:3a:b8:
7d:40:30:2d:90:91:22:d1:5e:71:8d:bd:05:7d:77:78:ca:a2:
b8:54:70:d3:bd:e0:a5:85:b1:4b:b9:6e:59:35:9d:11:25:db:
20:b5:f2:22:c1:cd:c6:05:d9:52:0d:6a:89:fb:11:02:bd:64:
65:6a:3c:1f:7f:a3:09:bf:4e:a1:3b:33:b6:5d:de:82:fb:da:
aa:33:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:24:09 2025 by rpki-client