Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
File: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft (raw, json)
Hash identifier: b4DPN3VnERlvkQjM4PnXjq9HxUhwMklod/kRyM+IDZQ=
Subject key identifier: BA:0C:4A:A9:51:59:9E:7B:CE:47:DB:19:B6:72:B4:B0:DD:00:CD:92
Authority key identifier: FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
Certificate issuer: /CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Certificate serial: 0195903CE887F03BEEA25166B38FC78BD963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
Manifest number: 1495
Signing time: Thu 13 Mar 2025 16:01:05 +0000
Manifest this update: Thu 13 Mar 2025 16:01:05 +0000
Manifest next update: Fri 14 Mar 2025 16:01:05 +0000
Files and hashes: 1: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl (hash: esnlgPJo3wYcqQTSkXb82xK3TshBT0/382a3ow52eIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:e8:87:f0:3b:ee:a2:51:66:b3:8f:c7:8b:d9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Validity
Not Before: Mar 13 16:01:05 2025 GMT
Not After : Mar 14 16:01:05 2025 GMT
Subject: CN=ba0c4aa951599e7bce47db19b672b4b0dd00cd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f1:5e:e1:70:0d:9a:f5:7f:29:96:5f:7d:33:
06:da:d9:97:5a:ec:1c:1a:ee:10:16:5a:52:fe:a2:
42:f9:e1:60:e5:be:da:f1:18:ff:70:7c:f0:96:0d:
ce:d6:c3:98:95:e8:5f:ce:da:65:9a:b4:46:70:64:
7e:40:6f:4f:36:9d:f4:fa:7e:0c:99:c0:f6:90:22:
f6:b5:08:bd:d8:84:be:db:82:fa:9d:c6:3a:72:01:
e4:4e:b4:e2:e6:c3:94:ee:a4:ce:e7:cf:7c:26:35:
a0:43:2a:6e:af:0f:36:bc:ae:93:f5:f0:14:a5:da:
21:dc:46:7a:c5:47:54:d5:6f:80:85:1d:15:4d:03:
f5:b7:7a:76:99:8b:fe:57:68:12:5e:03:fa:10:1e:
8e:11:2f:d6:b8:e9:6e:6f:e3:ce:64:29:7b:0f:f0:
55:47:8f:a1:e0:00:3d:df:3d:1f:2a:20:54:b1:2f:
ec:ae:89:c9:60:b5:55:91:4a:4a:71:16:09:96:22:
dc:b8:04:b6:25:bc:64:ac:8a:a6:e7:2f:92:31:21:
f5:7e:6d:7d:d9:0a:36:06:df:0c:6f:43:56:c8:3d:
fd:45:ab:1e:09:c4:60:bb:2f:26:85:dc:47:9a:76:
00:93:b2:9c:88:6e:86:1f:df:16:2d:b9:c1:e0:0a:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0C:4A:A9:51:59:9E:7B:CE:47:DB:19:B6:72:B4:B0:DD:00:CD:92
X509v3 Authority Key Identifier:
keyid:FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0c:7c:cb:e2:dc:75:ad:ed:26:9f:80:8b:6d:79:a7:46:ae:
7a:ae:78:62:dc:28:62:bf:dc:27:65:88:a2:77:4c:5a:40:2a:
0c:c7:29:5c:28:89:bd:4a:9c:75:f7:45:2f:2e:53:43:ed:6c:
2b:f5:3d:3a:8e:1e:ab:dc:c6:0a:58:ad:fc:31:03:ae:ca:8d:
ce:74:53:81:2a:e3:22:b1:46:f3:3a:3d:cc:b8:82:81:75:06:
69:f4:f8:8d:44:9f:75:43:f5:ee:66:0e:ee:78:d6:3c:d7:b0:
87:b2:eb:ee:b8:82:3a:93:a4:28:52:03:a9:17:98:8a:7d:2f:
15:5c:6d:fc:21:69:c1:3e:30:1b:0f:7b:80:b6:7b:f4:5f:1b:
ec:65:ce:ef:c2:e4:90:59:d9:3e:f3:a6:a6:45:8b:32:c6:50:
d0:9f:89:dd:78:5e:15:6c:94:3a:3a:88:9c:9a:03:4b:2d:7b:
54:cb:e2:00:1d:ef:5e:b8:d1:32:80:a6:17:2f:10:30:82:39:
0a:d5:f9:96:75:30:81:cb:e9:e8:71:87:58:6d:62:0d:f4:76:
f6:48:64:ba:9b:b7:8b:bb:d4:28:52:6b:38:0a:d6:46:5f:25:
16:78:07:7b:23:75:7d:0a:50:be:06:f7:a9:5e:e1:c6:d3:04:
c3:c7:3c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:00 2025 by rpki-client