Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
File: Q5OKPegDvWyR8UrZZ71BQbigKK8.mft (raw, json)
Hash identifier: LDFwTLEInGru1kSTZFLqePmAoK8dQtzkr5qq+Dzdxpo=
Subject key identifier: 1F:02:1A:7D:0C:5C:5F:BD:A9:7F:35:4E:72:B6:83:54:7A:3B:33:D0
Authority key identifier: 43:93:8A:3D:E8:03:BD:6C:91:F1:4A:D9:67:BD:41:41:B8:A0:28:AF
Certificate issuer: /CN=43938a3de803bd6c91f14ad967bd4141b8a028af
Certificate serial: 0196C4278432E088E6D1112C72CCF704558E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
Manifest number: 1258
Signing time: Mon 12 May 2025 11:00:46 +0000
Manifest this update: Mon 12 May 2025 11:00:46 +0000
Manifest next update: Tue 13 May 2025 11:00:46 +0000
Files and hashes: 1: Q5OKPegDvWyR8UrZZ71BQbigKK8.crl (hash: tA2l4jCvv2vESbl/G4APqAioy5LX7hji0g42DZGlqLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:84:32:e0:88:e6:d1:11:2c:72:cc:f7:04:55:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43938a3de803bd6c91f14ad967bd4141b8a028af
Validity
Not Before: May 12 11:00:46 2025 GMT
Not After : May 13 11:00:46 2025 GMT
Subject: CN=1f021a7d0c5c5fbda97f354e72b683547a3b33d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:b1:12:bd:f3:ac:e5:dd:5a:bf:aa:d4:b6:
1e:9c:11:1b:78:74:b8:f4:01:c1:e9:9f:ca:40:86:
dc:91:4a:bf:85:d3:d6:1c:81:52:ad:a6:3d:2c:13:
cf:e0:66:6c:1f:af:58:5f:87:53:02:90:4e:44:93:
19:a5:2c:d5:69:61:7f:a3:23:37:b5:85:b6:8d:a9:
7e:1f:e0:14:6a:95:e8:e0:51:5a:70:e4:5d:4e:dd:
d5:7f:0b:32:c5:5c:8e:46:10:06:5d:58:7a:52:eb:
92:b0:91:31:a8:2d:7a:39:a7:f8:57:0d:61:64:72:
97:42:be:4f:48:f0:bb:ca:b8:78:bd:1d:a6:95:f6:
0b:4b:17:68:79:1b:ad:77:e6:19:e7:57:87:cc:9f:
b1:c6:a2:a6:6e:20:65:b5:71:4e:38:8c:c6:24:63:
24:10:38:3c:b2:4d:87:45:7f:3f:56:a0:42:5b:d4:
60:d6:65:79:c6:c7:c1:e6:06:50:04:25:3c:c5:e6:
3e:d7:d4:ca:c3:5c:bd:13:83:f3:98:79:e8:78:a0:
af:00:d1:72:4f:56:6c:fd:9c:73:bc:16:ad:e2:2b:
46:27:06:85:0b:de:1b:d7:45:cb:b1:db:31:0b:5f:
44:5b:b1:5b:8d:fd:37:fa:45:2f:cc:97:d5:52:39:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:02:1A:7D:0C:5C:5F:BD:A9:7F:35:4E:72:B6:83:54:7A:3B:33:D0
X509v3 Authority Key Identifier:
keyid:43:93:8A:3D:E8:03:BD:6C:91:F1:4A:D9:67:BD:41:41:B8:A0:28:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:68:2e:f5:3a:68:b9:9c:0a:23:c4:80:8b:a3:e5:f1:7d:e8:
b4:38:21:e1:57:30:17:e7:7e:eb:84:34:0e:88:24:f7:13:ad:
cf:49:83:80:56:fa:82:e9:99:1e:90:7b:99:e9:7b:2b:08:54:
03:f3:bc:21:41:19:11:1b:bc:ff:1f:a7:96:bd:8c:73:c5:83:
d9:9d:0c:44:4a:fb:73:d9:f0:0b:43:a9:3d:9a:70:00:3e:a9:
d2:02:e4:29:20:f5:50:6f:6d:ba:e7:bf:45:f3:8b:e5:67:23:
1f:09:bf:00:31:e4:b1:a6:0d:9f:77:1c:0d:13:1e:3e:c3:7a:
cc:33:a1:c6:51:fd:33:e3:33:09:98:32:8c:86:24:73:ce:c9:
36:ca:3c:49:9d:fb:d2:6b:9e:6a:33:90:e7:bd:e3:2e:76:76:
7a:e6:99:cf:8d:fb:26:a9:67:9f:82:71:11:42:73:ff:20:d6:
52:e1:44:c0:18:1b:11:4f:f4:2b:35:b7:0f:61:c1:d9:d3:25:
df:2a:78:3e:fd:52:44:a4:5e:1f:3a:a6:2d:c4:53:c5:26:a2:
24:5b:cc:fe:60:b1:fb:51:98:06:f6:6e:d9:c7:9e:e1:ce:db:
4a:62:e5:4c:dc:1c:ee:41:82:67:a5:3e:27:f8:16:66:66:52:
8d:8e:3b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:24:20 2025 by rpki-client