Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
File: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft (raw, json)
Hash identifier: QfZ5P1qxLkAdaYq0EuPNgoTr4h1OvTTv0x1pJC4TvtQ=
Subject key identifier: 0A:8A:FA:66:EE:FD:1B:1F:37:48:5D:B1:82:A9:AE:8D:5D:B8:94:0D
Authority key identifier: A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
Certificate issuer: /CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Certificate serial: 0196534A0FA34F5CAEFB7D188788116BE238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 13:01:24 +0000
Manifest this update: Sun 20 Apr 2025 13:01:24 +0000
Manifest next update: Mon 21 Apr 2025 13:01:24 +0000
Files and hashes: 1: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl (hash: 6/i+MaAhwJw9Ugp7vw30g9LtyTzwCU3F/kPIzTiAtlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:0f:a3:4f:5c:ae:fb:7d:18:87:88:11:6b:e2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Validity
Not Before: Apr 20 13:01:24 2025 GMT
Not After : Apr 21 13:01:24 2025 GMT
Subject: CN=0a8afa66eefd1b1f37485db182a9ae8d5db8940d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a5:58:df:d1:99:d3:9d:9f:f1:ec:8f:f9:c8:
aa:61:c5:3a:57:d1:54:7d:87:b7:b4:4c:ff:47:b5:
bb:7e:72:d6:09:48:47:7f:89:4f:62:9e:d1:b9:e0:
6b:72:82:22:e1:00:1e:a9:9c:3f:6e:08:37:17:51:
e1:d7:9e:ce:1e:e5:40:44:d5:db:17:e1:25:ab:fc:
24:89:29:a0:c2:0d:54:a9:a2:de:25:9a:cc:d7:01:
58:60:96:0f:98:2d:c2:2f:ce:3a:1a:42:58:cb:d5:
69:77:93:e1:27:58:97:59:99:99:f6:5b:81:22:8b:
ce:25:6a:1e:90:11:eb:df:67:25:cd:b9:a3:eb:01:
12:fd:51:b2:12:1a:2e:56:4a:c7:58:0d:24:42:11:
c9:34:31:62:d3:c5:4c:9f:7c:b4:04:5e:d1:97:87:
25:8c:e6:c8:5e:bc:e2:d8:ba:fd:68:35:0c:10:f3:
9a:ca:58:8f:25:e6:39:e8:2d:de:3e:35:d7:2f:f9:
73:87:07:97:65:a9:62:f1:cc:15:e2:1a:4e:c0:0e:
04:93:3b:cc:c8:e1:bf:cd:08:fe:1d:f4:d3:7c:33:
65:96:82:89:e8:e6:6e:11:77:1c:80:2c:bb:15:33:
1d:df:95:24:5e:c7:09:79:4c:4e:26:50:13:9c:1b:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8A:FA:66:EE:FD:1B:1F:37:48:5D:B1:82:A9:AE:8D:5D:B8:94:0D
X509v3 Authority Key Identifier:
keyid:A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3e:c5:88:93:4e:62:bf:fb:aa:c0:ca:06:41:14:e2:15:66:
09:b7:1d:fe:99:1d:59:0b:e2:3d:f5:e7:e6:38:1c:9f:f0:9b:
87:64:ac:9b:d1:91:47:0c:23:c8:7a:a5:c0:de:fc:9d:c8:84:
ac:3f:eb:9d:cb:78:65:57:c7:9a:99:a9:08:29:7b:3d:85:53:
83:95:05:79:c6:6d:c7:2a:61:35:14:bd:60:4c:b9:e1:2a:01:
cf:f2:af:51:6b:82:1a:8e:d2:2c:77:2b:ca:14:f5:1e:a6:eb:
ab:42:81:ac:28:ff:2c:cb:25:2c:09:d1:8e:d6:e2:62:7c:22:
98:f0:51:71:8c:ec:cf:33:38:89:3c:bf:64:3c:fd:ec:4d:a4:
7a:f6:3a:ab:05:79:ad:68:08:ad:a6:eb:ed:ca:fc:46:4a:58:
10:a9:40:a5:ee:4b:63:fc:46:1a:87:02:4a:e4:ec:38:19:b1:
23:69:f3:c5:33:df:9f:78:01:1e:d9:17:b0:7a:54:98:aa:35:
43:2c:98:b5:52:ef:ac:88:c0:60:e4:d6:db:8e:88:90:0a:76:
88:29:4e:30:91:1a:6f:c0:cd:b2:63:27:5a:5d:8c:3a:9c:2b:
5e:f8:87:6c:3d:09:9e:a2:4d:0a:2a:72:4d:ee:aa:1d:6d:f0:
3e:ea:b1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:27:09 2025 by rpki-client