Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
File: bQ1uHM2JDfL16cFF7LpGiZzOs70.mft (raw, json)
Hash identifier: +wOe3abEEEgAwaThZkP481tznL4GXNahldj8xmHplZA=
Subject key identifier: 8B:06:40:B4:25:7C:19:43:E6:CF:DB:95:8B:5C:A6:01:8C:2A:DC:EF
Authority key identifier: 6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD
Certificate issuer: /CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd
Certificate serial: 01965D5F999F5D14B7D7C1FE9F99C30F3281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
Manifest number: 1192
Signing time: Tue 22 Apr 2025 12:01:08 +0000
Manifest this update: Tue 22 Apr 2025 12:01:08 +0000
Manifest next update: Wed 23 Apr 2025 12:01:08 +0000
Files and hashes: 1: bQ1uHM2JDfL16cFF7LpGiZzOs70.crl (hash: jBh7CWXlRmg/u8FX31ZPJUUkDwfQYgKk0w55bF7nscc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:99:9f:5d:14:b7:d7:c1:fe:9f:99:c3:0f:32:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd
Validity
Not Before: Apr 22 12:01:08 2025 GMT
Not After : Apr 23 12:01:08 2025 GMT
Subject: CN=8b0640b4257c1943e6cfdb958b5ca6018c2adcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:0c:95:39:17:59:86:7b:5e:c2:eb:d7:d1:
7f:5f:47:25:6b:de:f1:70:45:1e:9e:6f:cd:ae:0e:
53:cd:df:23:17:c8:65:c1:7b:18:0d:a2:9c:e4:c7:
83:dd:ca:d8:84:3f:00:6c:c4:0b:fc:05:96:a4:a1:
fe:1d:d3:1d:23:94:10:b1:7c:d7:d9:c1:c6:36:47:
c0:fe:13:fe:1d:2b:29:64:7e:51:17:90:e0:70:19:
ad:c0:b2:13:2c:59:24:d7:09:f4:8e:6d:1f:9c:c4:
66:ff:58:a0:15:09:7f:79:68:45:bb:51:dc:1b:f1:
22:6f:ad:dc:94:9f:74:1f:98:85:4a:37:34:9e:9a:
9e:87:18:0c:1e:37:2a:06:72:d7:23:02:4e:91:b5:
4d:62:4c:3b:e3:a8:03:07:2f:47:9d:c7:a3:cd:c3:
df:5a:e1:41:5d:e6:b5:32:cb:7c:b9:ec:56:3d:a0:
8d:f7:8e:82:33:49:ce:81:7d:56:44:c6:8e:65:24:
2c:e6:0a:7b:11:b3:73:46:77:4a:b1:93:ea:fa:0b:
6b:dc:a3:e8:10:bc:c3:d4:c6:00:d0:69:1a:00:de:
ad:93:ad:52:73:d6:c0:90:5c:b6:b1:f9:c8:53:79:
42:a9:ec:a4:76:72:16:d3:9a:37:00:7b:06:61:46:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:06:40:B4:25:7C:19:43:E6:CF:DB:95:8B:5C:A6:01:8C:2A:DC:EF
X509v3 Authority Key Identifier:
keyid:6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:85:df:2a:03:6e:28:fd:91:9c:a9:64:83:06:f0:fb:78:47:
b7:32:c8:48:ef:ce:bb:38:5b:33:b0:77:ff:4c:3f:01:e3:4c:
01:60:d4:a5:85:5d:ec:54:68:17:01:a1:57:7b:9d:b7:38:e5:
d6:89:e0:fb:21:b6:94:54:13:8d:36:f8:e9:7b:01:3f:db:ea:
dd:30:f3:3e:5f:53:5e:86:64:34:bf:9f:44:51:9a:d3:ce:39:
fa:40:73:a6:da:bd:e9:b4:c1:5a:1a:f5:28:d7:86:4b:09:13:
6c:63:7c:1e:67:8b:2a:4c:18:5f:e6:50:07:11:97:48:6b:59:
ab:61:5d:76:64:aa:29:b2:55:fe:fc:9b:06:6d:fa:29:da:1c:
7f:1e:2b:1f:cc:2f:cd:8a:17:23:ea:8c:93:32:78:4d:af:61:
b6:81:87:40:67:0b:65:2d:27:f5:4d:0f:d7:36:3f:af:b5:1c:
51:41:70:30:a3:68:29:35:ef:39:69:67:1b:c3:ea:73:32:af:
09:4d:33:9d:2f:f9:09:30:7f:c5:2a:89:a6:76:bb:bb:75:dd:
5f:e8:c6:bb:23:da:73:ef:3b:f3:f2:1a:72:97:a6:7e:54:e0:
0a:0d:4c:b2:a5:85:79:1d:31:43:24:70:50:cd:98:8b:7b:54:
67:c1:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:05 2025 by rpki-client