Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
File: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json)
Hash identifier: UAr12UuK9Ikd7fjHe/pGoA6wBylR7gcF6HpD2XSinZc=
Subject key identifier: ED:4F:5E:C5:B4:FF:75:6A:6F:7D:2B:1C:A5:27:F7:4D:8A:A6:1F:85
Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
Certificate issuer: /CN=43a3517606989eb352f699976f219faec8e350e7
Certificate serial: 019641E8A42FFD475FFD5AFB91DA46460E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
Manifest number: 14F1
Signing time: Thu 17 Apr 2025 04:01:27 +0000
Manifest this update: Thu 17 Apr 2025 04:01:27 +0000
Manifest next update: Fri 18 Apr 2025 04:01:27 +0000
Files and hashes: 1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: yBCvve1YP6d4gR3NLgYVg9E+7fgWotmI2xs0hsoCxcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:e8:a4:2f:fd:47:5f:fd:5a:fb:91:da:46:46:0e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a3517606989eb352f699976f219faec8e350e7
Validity
Not Before: Apr 17 04:01:27 2025 GMT
Not After : Apr 18 04:01:27 2025 GMT
Subject: CN=ed4f5ec5b4ff756a6f7d2b1ca527f74d8aa61f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:28:b2:93:31:3c:ab:98:d7:65:f7:f8:db:
77:0e:b3:f2:c4:55:59:22:33:ce:e7:78:d9:de:4a:
68:d4:ee:80:22:71:9a:8a:1a:54:cf:64:c9:9a:2b:
45:b3:ba:ba:8c:19:90:ce:62:47:4b:fb:8e:ce:f9:
3a:07:1f:be:d8:5c:bc:4d:53:3e:e7:b7:51:40:66:
72:81:78:94:62:66:a6:d6:a2:a4:8b:3b:ca:b9:42:
56:41:d0:06:28:dc:bc:4b:00:b6:06:ad:0a:f7:a4:
ac:7f:83:58:10:3c:e5:8d:bd:41:a3:32:f7:b4:3d:
59:1b:bc:ca:96:87:b8:5d:66:d7:51:2b:9d:d7:de:
eb:13:02:be:c9:80:a2:9b:e5:a5:dc:38:5e:48:77:
45:bd:98:35:3a:da:e3:61:6e:68:ee:15:a8:97:8c:
cd:6d:df:d0:5a:53:b1:08:5b:07:be:6e:ff:5f:b9:
8f:b3:8d:6e:d8:32:70:6e:16:f4:c8:20:39:7d:8b:
70:b1:28:cb:85:43:04:76:d6:ad:1b:14:8f:a3:d4:
15:a5:96:33:bf:eb:22:c4:32:e0:4d:8a:33:c0:ff:
52:03:e5:51:6c:68:a4:5e:f7:79:fb:b2:f6:70:cb:
2b:d7:55:b9:54:06:41:34:2a:03:99:d8:77:24:5c:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4F:5E:C5:B4:FF:75:6A:6F:7D:2B:1C:A5:27:F7:4D:8A:A6:1F:85
X509v3 Authority Key Identifier:
keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6d:04:eb:c8:82:5d:7b:f6:64:83:2c:ce:ad:fb:e4:b2:a4:
74:23:d6:7a:d3:40:47:4e:6e:02:f8:c9:e4:45:56:0e:02:3b:
b2:0f:df:37:e7:ff:fe:d1:f1:37:20:83:4a:da:70:66:58:6b:
25:e4:cf:65:b2:72:39:ed:22:84:80:18:5d:10:ee:a6:ee:58:
3f:79:1c:ba:35:f7:8f:8c:17:f9:52:83:cd:5b:49:ce:bb:fe:
fb:1f:f7:76:eb:c3:f6:41:9c:1c:0c:c5:38:d6:9d:f8:d5:8c:
2b:b0:06:9e:0b:27:39:a3:89:54:a9:7b:2a:84:c3:19:55:1f:
39:6a:70:50:a6:8f:3e:d2:3e:80:1f:36:2f:d4:54:63:21:19:
09:63:bf:95:78:31:85:7c:dd:ec:f5:47:73:5b:89:b7:a8:a8:
16:0f:f3:82:8a:87:59:06:1b:d3:2f:e0:01:98:72:35:f2:75:
bf:48:13:28:d3:8d:f5:67:9d:a2:6b:a6:e8:04:80:11:c5:31:
2c:71:76:26:45:44:19:fd:e3:38:a5:58:fb:01:ce:d1:c3:2d:
06:86:c2:9d:d9:77:6b:dd:0d:2d:b9:f3:40:7e:02:2a:e0:29:
ee:24:4a:47:6e:bb:ed:90:79:6c:21:49:2f:6f:52:7b:d9:7e:
37:06:e3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:22:30 2025 by rpki-client