Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
File: q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft (raw, json)
Hash identifier: fwWIZsK8w/DNy+jp/ZysUSnGGvxak8O6N54pRCyZaRY=
Subject key identifier: F4:FD:B4:52:2F:FF:A9:14:9F:4F:54:98:9C:62:B7:6A:5D:52:BF:A7
Authority key identifier: AB:73:BF:62:BD:1A:3F:49:DD:92:49:07:8E:39:D1:B9:4E:AE:6D:2B
Certificate issuer: /CN=ab73bf62bd1a3f49dd9249078e39d1b94eae6d2b
Certificate serial: 01965DCD0787B107663D300359A6D1159BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
Manifest number: 1070
Signing time: Tue 22 Apr 2025 14:00:39 +0000
Manifest this update: Tue 22 Apr 2025 14:00:39 +0000
Manifest next update: Wed 23 Apr 2025 14:00:39 +0000
Files and hashes: 1: q3O_Yr0aP0ndkkkHjjnRuU6ubSs.crl (hash: KBU+MBgsXifEc4WlsiEv1yBfqScRFRrk2hFrT3iXeLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:07:87:b1:07:66:3d:30:03:59:a6:d1:15:9b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab73bf62bd1a3f49dd9249078e39d1b94eae6d2b
Validity
Not Before: Apr 22 14:00:39 2025 GMT
Not After : Apr 23 14:00:39 2025 GMT
Subject: CN=f4fdb4522fffa9149f4f54989c62b76a5d52bfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:d6:dd:cb:1c:5e:fc:18:67:49:cb:0e:e5:
21:f3:33:e5:40:37:06:80:11:dd:2e:fb:88:30:9f:
55:75:45:06:d1:2e:79:c0:de:26:3a:b6:b4:4f:66:
49:69:75:93:8a:76:a7:40:58:3b:0d:85:90:f5:eb:
b4:02:3d:4b:30:3a:82:02:8f:77:6b:f6:16:75:f5:
6b:57:f0:e2:95:ff:b7:37:8a:f4:5c:60:5e:8e:8a:
8f:ef:3d:ec:ed:51:28:ba:1f:3d:ab:fe:2b:a9:48:
3e:f8:6a:63:f2:46:19:7b:9e:6e:89:3c:83:f7:94:
1a:5f:5c:ab:d9:5d:45:ce:bd:d1:c2:a1:24:45:1b:
d3:05:5e:87:28:99:76:4c:a5:87:32:39:18:ff:20:
78:a9:34:30:0c:94:5f:45:b9:d0:3e:2a:01:6b:fb:
1a:2f:c5:95:4b:21:3d:88:49:78:95:99:fa:4b:e9:
c4:e8:66:f2:43:a4:7c:b6:cc:5c:c4:01:f4:04:19:
d8:3d:60:50:54:f0:d5:07:5f:25:ee:b5:e4:19:c9:
80:51:e7:c5:7f:28:78:8b:0d:fc:89:2c:c2:ce:f7:
0b:91:0d:e1:20:55:b1:03:a9:31:2e:92:e2:94:ba:
fe:43:e4:6f:82:b6:8d:80:5c:5d:a7:dc:9e:ed:da:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FD:B4:52:2F:FF:A9:14:9F:4F:54:98:9C:62:B7:6A:5D:52:BF:A7
X509v3 Authority Key Identifier:
keyid:AB:73:BF:62:BD:1A:3F:49:DD:92:49:07:8E:39:D1:B9:4E:AE:6D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:12:da:7c:17:57:01:d2:9c:71:ab:4b:7d:28:10:b9:63:f9:
e1:65:35:c5:20:3d:2c:8f:23:36:1c:a0:8f:7d:ba:31:f1:f9:
dd:3f:1c:77:7f:a5:a5:0d:d5:4f:f5:4b:45:ba:76:73:2c:b3:
59:97:68:c7:78:45:ee:67:70:12:b1:33:59:d7:0a:2c:98:da:
c8:5d:35:b3:ad:17:3b:5a:bc:1d:2f:41:82:fb:f8:1d:24:27:
73:ca:82:3a:b8:9f:50:01:ba:0b:dd:0b:dd:c7:b7:2c:7f:4c:
69:1f:8d:63:f9:09:3f:a7:02:c0:15:3f:ff:9f:dc:55:46:5c:
46:55:72:d1:d5:f1:35:f0:c0:fc:da:8b:68:85:ea:11:aa:c1:
cb:7a:ea:87:b2:88:63:f6:6a:6a:8d:f2:94:4c:31:93:bc:8e:
89:53:44:b6:63:4e:f0:ee:56:7d:e1:57:6a:57:8e:fc:48:78:
32:25:47:45:c4:73:07:5c:49:d4:f3:bf:79:92:f9:5f:1c:58:
7a:41:91:17:89:7c:95:7c:1c:72:0d:34:b8:e1:3f:d6:03:c4:
f8:a6:d6:ec:c2:56:fb:08:0c:7f:e1:77:6f:ac:88:b6:dc:f8:
5a:d8:d3:9d:01:6b:b5:3f:31:f8:7d:6b:a1:c1:f5:ee:7a:6a:
82:47:de:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:31:21 2025 by rpki-client