Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
File: sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json)
Hash identifier: iXcc5pIXGKHoJZ0Lkz8+ZI1mc82/rtuPJ3Yj7ynYBpw=
Subject key identifier: 20:93:28:F5:4F:06:D4:98:AB:0E:F5:25:48:F4:00:52:8A:38:06:9F
Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
Certificate issuer: /CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Certificate serial: 01958EF3902B111E42408BE157EECE992889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
Manifest number: 1425
Signing time: Thu 13 Mar 2025 10:01:21 +0000
Manifest this update: Thu 13 Mar 2025 10:01:21 +0000
Manifest next update: Fri 14 Mar 2025 10:01:21 +0000
Files and hashes: 1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: qNhxQ9VN6N6BCt/egw9dhybPYd29ALucAaIyGAOz5Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:90:2b:11:1e:42:40:8b:e1:57:ee:ce:99:28:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Validity
Not Before: Mar 13 10:01:21 2025 GMT
Not After : Mar 14 10:01:21 2025 GMT
Subject: CN=209328f54f06d498ab0ef52548f400528a38069f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:25:f3:23:09:5b:bb:8e:fe:ce:3c:f0:7b:
ee:14:4c:1c:9e:18:4d:fb:0e:77:35:51:a2:b9:70:
5d:fe:42:0c:c9:10:d7:74:19:6d:a8:d7:08:f6:50:
77:01:1b:5f:49:53:0f:82:86:4d:8e:6c:31:e4:54:
35:a4:a0:d3:e8:4a:f7:a9:a9:ee:e9:6b:8f:b4:a8:
ea:75:01:62:c1:96:4c:5f:df:aa:d9:5f:23:11:a2:
a5:76:e3:91:05:3e:f8:af:04:5c:56:25:93:e8:de:
75:a4:e0:34:07:f1:ab:dd:40:d5:2b:df:13:4f:72:
16:26:b4:65:bd:b3:73:45:5a:1d:4b:2d:f0:c9:51:
ba:ba:98:7b:0e:b6:4b:2b:fb:65:26:c8:56:7f:bb:
5e:5b:75:f1:8a:e1:d7:55:98:13:3f:64:4f:b8:13:
fc:75:d8:5c:4b:c2:ef:bb:96:17:c6:79:bd:40:4c:
14:d5:56:dd:70:3f:68:09:39:57:b9:78:f6:f4:14:
d1:04:ce:b2:ca:eb:c1:2a:da:3b:7c:35:1a:fb:b1:
f6:bd:6c:8c:d4:cb:bf:ef:60:70:cc:fd:b9:4c:d2:
ba:ff:7f:6d:45:de:d2:49:b5:50:41:96:72:7d:d2:
24:51:0f:88:a8:b1:e3:00:9f:4b:ee:87:e6:dd:4c:
c1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:93:28:F5:4F:06:D4:98:AB:0E:F5:25:48:F4:00:52:8A:38:06:9F
X509v3 Authority Key Identifier:
keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5f:d5:9b:72:c6:48:d0:e3:b9:2c:03:bf:09:17:c8:11:47:
09:54:ac:22:5a:94:85:24:55:34:ea:2d:dc:a0:65:ca:6f:5d:
c3:5f:7b:80:92:ec:71:b5:e5:ee:92:e0:8d:99:c3:00:54:a2:
81:b2:42:13:2e:40:6d:92:36:45:f7:2f:9f:f0:13:0f:bf:e0:
2f:e9:3b:6e:70:bc:95:65:0e:29:41:6f:52:da:07:0b:58:f3:
00:47:5e:0a:75:56:35:c6:48:13:7f:14:46:d6:da:01:e5:e0:
d8:b6:d4:60:de:d7:1d:a6:88:1e:a0:00:98:bd:13:43:68:9b:
e2:f3:6e:cf:9c:95:c8:6e:0b:30:50:3b:9d:a5:5f:38:3e:47:
ab:e7:2e:74:87:0d:ce:31:29:39:aa:7b:1e:6f:37:37:2f:af:
dd:77:37:dd:54:57:f7:48:02:ef:1b:e5:47:20:0d:19:a4:da:
37:3d:88:7f:9c:4a:0e:4b:03:41:91:bf:51:ba:03:60:0d:b0:
c9:e1:37:82:34:d4:95:71:3f:ea:0d:6f:bb:f8:29:cb:1b:34:
a3:c8:6d:ca:9a:b7:e9:d0:fe:d0:9f:41:67:81:f6:2d:36:14:
5c:e4:c5:6f:06:c9:f3:4a:bc:b7:07:47:5f:47:c5:31:44:5a:
54:6b:09:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:59 2025 by rpki-client