Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File: Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier: XEeRck2aEfMEDr9QJ/kEGXpS7IxuhebFibSB5u28FCE=
Subject key identifier: B0:86:7C:51:73:B2:73:1A:CF:41:CF:46:36:DF:F3:10:ED:C3:86:35
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer: /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial: 0196515AE9170E7BA95454381C610608384F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 04:00:34 +0000
Manifest this update: Sun 20 Apr 2025 04:00:34 +0000
Manifest next update: Mon 21 Apr 2025 04:00:34 +0000
Files and hashes: 1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: AexiDZ0aufoEYCR8VflM/B3tYQ3yOCililiBkgJ427Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:e9:17:0e:7b:a9:54:54:38:1c:61:06:08:38:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
Validity
Not Before: Apr 20 04:00:34 2025 GMT
Not After : Apr 21 04:00:34 2025 GMT
Subject: CN=b0867c5173b2731acf41cf4636dff310edc38635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:51:ca:a8:da:dd:ea:ae:5a:10:f4:f7:db:
5b:4a:8f:06:56:d9:dc:73:a0:6e:ff:90:64:1c:65:
09:a5:d7:d8:58:3b:9e:c3:55:fe:ba:24:bf:7c:c5:
ba:8c:4a:92:30:7d:69:cd:1c:49:db:c3:fe:28:ed:
79:18:34:2f:79:ee:f7:71:40:4b:84:d7:22:27:7b:
ef:e8:79:49:f6:48:62:58:e3:15:7d:bb:91:ae:9a:
51:03:58:0f:12:61:50:7e:5b:86:85:5c:87:1a:bb:
39:a9:c5:9f:13:e2:44:87:3a:69:51:c2:3b:e7:a1:
89:cf:66:bf:60:68:b7:33:e2:39:18:dd:39:d0:83:
1d:9f:a9:d5:3b:02:ec:ae:b5:72:9f:49:8f:e1:e7:
87:f7:2d:2c:6c:ef:0d:e0:f7:6c:b0:89:74:50:56:
0f:88:b1:0f:50:f2:60:97:c4:0a:a1:1e:38:a1:70:
76:c7:7a:5f:32:e3:fa:62:7d:40:b6:2e:e5:45:4d:
35:cd:06:c5:be:1e:9f:db:fb:41:bc:d2:29:00:76:
a4:a9:47:05:b9:29:9e:21:ce:c0:1d:61:26:78:a6:
34:b0:1d:aa:f0:d7:49:fb:5c:f3:3a:a0:56:75:ec:
27:88:86:4b:ed:5d:77:03:7d:bf:6a:57:a5:a5:b1:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:86:7C:51:73:B2:73:1A:CF:41:CF:46:36:DF:F3:10:ED:C3:86:35
X509v3 Authority Key Identifier:
keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ea:53:8e:27:05:a5:d3:61:75:ba:31:74:68:8b:87:3f:84:
6f:44:3d:38:75:12:e1:f2:fa:7d:80:bf:6c:0b:c2:38:f3:14:
50:fc:82:6b:2d:7a:92:09:98:17:92:b3:b4:a6:74:a3:a8:a3:
4f:6f:8d:85:e0:4c:20:41:36:d2:2f:a9:66:14:c2:c7:3b:48:
7f:33:ae:e0:87:a2:58:a5:40:bf:e2:be:d9:5e:37:c2:c0:2b:
b5:a3:5c:f9:ac:85:9a:4a:da:22:71:27:58:c2:5a:30:78:df:
83:62:a4:1c:b0:c8:e5:47:c6:39:01:5c:56:ca:b1:32:04:0d:
c8:ab:00:64:84:27:a7:ad:6f:7f:21:c0:47:16:9d:1e:68:a1:
c0:32:e0:93:66:45:da:2e:a3:a4:26:55:93:c4:93:ee:30:e8:
1f:ad:14:d2:e5:db:83:41:5d:4d:0e:5b:a9:71:72:d4:a7:97:
8a:15:23:5a:c3:d2:92:f1:ca:7d:8a:3b:62:16:74:8f:9d:31:
62:ec:9a:eb:e9:ae:46:b7:aa:20:e4:a7:85:b0:87:e1:07:e5:
27:ca:d9:cf:40:88:c8:80:d3:c9:bb:5a:b6:24:75:91:3a:cf:
4d:76:e1:42:ee:2c:1f:6c:e5:8b:74:77:de:6a:f0:7c:a6:9f:
db:7b:df:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:06:37 2025 by rpki-client