Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
File: q1wa2N15IqRaLMdIHv4B3UMwBsI.mft (raw, json)
Hash identifier: 6zqKh5/WeVsu/tunmST6DN7ihOHK1L2C3pUbY7Aawwc=
Subject key identifier: FD:DF:81:E6:86:EF:4D:DD:B3:50:87:E4:B8:62:77:95:0C:F8:DB:70
Authority key identifier: AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
Certificate issuer: /CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Certificate serial: 019645C496900C17358453484A0A0FCCB654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
Manifest number: 0792
Signing time: Thu 17 Apr 2025 22:00:33 +0000
Manifest this update: Thu 17 Apr 2025 22:00:33 +0000
Manifest next update: Fri 18 Apr 2025 22:00:33 +0000
Files and hashes: 1: q1wa2N15IqRaLMdIHv4B3UMwBsI.crl (hash: Mr7pHWqN1eyDnoqkAh3FLZRdn/4G9koOIABhSuKQl2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:96:90:0c:17:35:84:53:48:4a:0a:0f:cc:b6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Validity
Not Before: Apr 17 22:00:33 2025 GMT
Not After : Apr 18 22:00:33 2025 GMT
Subject: CN=fddf81e686ef4dddb35087e4b86277950cf8db70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:48:bc:ef:7c:4b:24:c9:c4:7b:ac:a0:50:
4b:5d:6e:33:70:8c:47:7e:05:3a:b7:3d:da:de:3b:
6e:70:9c:aa:ed:f6:1f:43:f7:63:52:23:14:b4:63:
b2:a3:aa:c7:a0:74:14:f0:75:2f:91:0f:5b:f7:54:
6f:d8:0e:4e:6c:c1:13:70:f5:06:bd:1b:58:4d:aa:
0a:a9:9b:db:b7:fa:dc:61:10:1a:c5:94:d3:54:6b:
a8:ee:94:71:82:3c:00:88:50:d3:06:38:ab:47:51:
6d:97:ad:f4:74:f3:bc:2a:6c:62:3e:de:2b:3e:b0:
14:25:28:6a:0b:7b:b8:0a:79:63:3a:48:89:22:2d:
6b:34:69:ff:e6:5f:d6:64:76:17:5a:ce:ae:16:c5:
a9:d2:41:64:3c:28:be:b3:b4:52:db:11:0e:28:9a:
57:b6:45:33:aa:d1:95:77:a8:10:01:0d:63:e6:a4:
fe:9d:7a:e9:0e:48:a3:4b:ff:c2:cc:39:d7:5b:a9:
c5:da:88:6a:d7:83:0f:cc:94:7b:b4:8a:06:08:b4:
f4:c0:6f:5c:62:73:61:9b:6c:57:ab:db:3a:3d:91:
b5:9b:f2:0a:cb:99:ac:aa:c0:9e:d5:c2:40:60:e8:
1a:38:c8:72:af:0d:fc:3c:b1:99:2f:99:ef:24:b9:
92:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DF:81:E6:86:EF:4D:DD:B3:50:87:E4:B8:62:77:95:0C:F8:DB:70
X509v3 Authority Key Identifier:
keyid:AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4e:06:aa:f2:97:77:a3:fc:ee:a3:76:1b:3c:3d:50:f4:85:
b7:90:a7:08:01:1f:0b:57:19:26:0c:b3:c6:0a:5c:23:bc:7f:
0c:b2:fb:2d:b3:89:e8:2d:94:76:96:f9:41:a5:c3:d3:9e:ce:
b2:48:b8:4e:ce:f8:96:6c:46:18:05:99:9d:5e:69:1d:fd:9c:
4a:d3:c4:85:aa:09:9f:80:2d:cf:35:f8:df:02:19:db:b4:fd:
67:c3:2f:d6:44:23:28:54:1c:cd:e8:52:3f:f9:49:f4:2f:01:
3c:82:91:35:49:81:a7:56:bd:5c:99:85:f2:13:83:a7:99:8d:
98:1f:38:77:e3:72:df:ca:02:9a:ca:1e:a9:52:b0:57:5b:f3:
0b:ac:c4:09:0c:d9:d4:3e:51:85:30:fe:d3:30:43:54:5d:ab:
52:12:9c:2a:9e:50:62:34:77:f0:5e:d3:25:37:b2:d7:7f:1a:
f1:cd:95:7a:2d:ff:ab:80:22:c7:99:c0:03:72:80:a3:6c:0e:
26:7e:e1:03:f8:98:51:e5:04:e7:81:20:12:85:2e:a5:8c:0a:
de:7f:b4:18:13:19:b4:ca:b6:9b:9a:03:88:84:b9:21:a1:dc:
e1:9b:96:37:e7:10:e1:83:14:9d:cc:d1:e4:22:9d:01:08:04:
db:21:58:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFxJaQDBc1hFNISgoPzLZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNWMxYWQ4ZGQ3OTIyYTQ1YTJjYzc0ODFlZmUwMWRkNDMz
MDA2YzIwHhcNMjUwNDE3MjIwMDMzWhcNMjUwNDE4MjIwMDMzWjAzMTEwLwYDVQQD
EyhmZGRmODFlNjg2ZWY0ZGRkYjM1MDg3ZTRiODYyNzc5NTBjZjhkYjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvtIvO98SyTJxHusoFBLXW4zcIxH
fgU6tz3a3jtucJyq7fYfQ/djUiMUtGOyo6rHoHQU8HUvkQ9b91Rv2A5ObMETcPUG
vRtYTaoKqZvbt/rcYRAaxZTTVGuo7pRxgjwAiFDTBjirR1Ftl630dPO8KmxiPt4r
PrAUJShqC3u4CnljOkiJIi1rNGn/5l/WZHYXWs6uFsWp0kFkPCi+s7RS2xEOKJpX
tkUzqtGVd6gQAQ1j5qT+nXrpDkijS//CzDnXW6nF2ohq14MPzJR7tIoGCLT0wG9c
YnNhm2xXq9s6PZG1m/IKy5msqsCe1cJAYOgaOMhyrw38PLGZL5nvJLmSDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3fgeaG703ds1CH5Lhid5UM+NtwMB8GA1UdIwQY
MBaAFKtcGtjdeSKkWizHSB7+Ad1DMAbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTF3YTJOMTVJcVJhTE1kSUh2NEIzVU13QnNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85ZTk5YmYtMmQ4OS00NDAxLWJjOWYt
Y2JhOGM4YTU0NTNlLzEvcTF3YTJOMTVJcVJhTE1kSUh2NEIzVU13QnNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS85ZTk5YmYtMmQ4OS00NDAxLWJjOWYtY2JhOGM4YTU0NTNl
LzEvcTF3YTJOMTVJcVJhTE1kSUh2NEIzVU13QnNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArk4GqvKX
d6P87qN2Gzw9UPSFt5CnCAEfC1cZJgyzxgpcI7x/DLL7LbOJ6C2Udpb5QaXD057O
ski4Ts74lmxGGAWZnV5pHf2cStPEhaoJn4AtzzX43wIZ27T9Z8Mv1kQjKFQczehS
P/lJ9C8BPIKRNUmBp1a9XJmF8hODp5mNmB84d+Ny38oCmsoeqVKwV1vzC6zECQzZ
1D5RhTD+0zBDVF2rUhKcKp5QYjR38F7TJTey138a8c2Vei3/q4Aix5nAA3KAo2wO
Jn7hA/iYUeUE54EgEoUupYwK3n+0GBMZtMq2m5oDiIS5IaHc4ZuWN+cQ4YMUnczR
5CKdAQgE2yFYuA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:52:50 2025 by rpki-client