Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
File: Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft (raw, json)
Hash identifier: 5YLAN36carTRt8F2X0scfPodzkCe8/TqpzhElAsTLHA=
Subject key identifier: 50:3B:CD:02:C3:1F:BE:8B:D0:9E:46:D5:F0:ED:9C:13:49:1E:AA:D6
Authority key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
Certificate issuer: /CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Certificate serial: 0196CB06076B7A75D0F8CFE3080A59DC6284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 19:01:31 +0000
Manifest this update: Tue 13 May 2025 19:01:31 +0000
Manifest next update: Wed 14 May 2025 19:01:31 +0000
Files and hashes: 1: Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl (hash: kEVTYbeiB9arkpF7dgW9YVVekZho/kzNlqT5J9oJFYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:06:07:6b:7a:75:d0:f8:cf:e3:08:0a:59:dc:62:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Validity
Not Before: May 13 19:01:31 2025 GMT
Not After : May 14 19:01:31 2025 GMT
Subject: CN=503bcd02c31fbe8bd09e46d5f0ed9c13491eaad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:25:50:d4:30:ae:3b:13:52:a8:90:fd:8e:d1:
eb:41:1d:5e:ad:fc:7a:5d:7d:bc:04:43:55:38:70:
e1:54:52:37:c7:78:04:57:06:00:20:13:36:a1:6c:
2b:f2:15:d0:89:8f:00:1d:7e:b2:0f:61:ce:1a:26:
6c:3a:f0:fd:3c:0c:7d:93:09:88:a5:a4:f2:fc:b2:
73:d2:50:20:d2:a3:23:c0:56:bf:c7:59:e2:4f:e8:
5a:f3:53:03:0b:8b:ee:eb:44:57:9a:34:40:c1:be:
80:c4:00:14:4f:2b:cd:03:cc:27:71:70:6d:5b:a7:
0c:0d:85:cb:2a:8c:6f:3e:8f:7d:bb:fb:dd:93:a4:
b2:3a:d7:6e:1c:49:bd:34:07:6c:09:95:60:25:07:
27:c4:f1:48:f3:c3:c2:0a:cd:87:1c:35:7a:6b:b9:
9f:1e:08:17:ab:d3:4d:a3:a5:78:65:f6:21:ad:fa:
dd:f5:c8:ca:13:1c:75:a9:87:f9:8c:45:36:8a:b2:
ac:c7:5b:04:eb:53:57:3d:c9:0b:c6:26:2b:85:62:
6d:b5:51:2e:4c:af:d8:bd:17:00:c7:29:4f:da:d0:
ab:f8:37:dc:1c:a9:3e:68:a3:dd:62:0e:df:c1:b8:
78:c5:ef:38:19:2a:5c:16:44:cb:a9:21:e0:42:3e:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3B:CD:02:C3:1F:BE:8B:D0:9E:46:D5:F0:ED:9C:13:49:1E:AA:D6
X509v3 Authority Key Identifier:
keyid:46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:2d:ce:c4:7d:ea:ab:38:99:c7:98:a0:e4:3e:f9:dc:0f:05:
50:65:a8:b1:83:ab:e0:f5:47:86:7d:99:ab:44:ac:cc:b6:11:
14:9d:a3:ed:1e:8a:8e:5b:ad:31:19:63:3b:0d:a0:f4:4f:ab:
9c:72:ab:47:d5:e1:11:ca:e1:03:e1:03:98:d5:a9:e7:a0:de:
e1:b6:0b:f4:83:56:41:f0:0b:bb:93:47:51:00:49:3e:17:b3:
58:7d:c1:dc:7a:0d:b8:fe:8b:1e:aa:00:1e:79:2b:55:8c:4d:
bd:f7:0b:89:89:2c:24:8b:55:a4:f8:90:7d:d3:51:8d:c9:76:
2e:56:d1:65:0a:f0:de:be:b2:ab:bb:43:68:7c:4d:ea:ba:e6:
17:99:73:81:10:bf:96:13:30:ab:81:6f:1c:db:9a:5e:bb:0a:
32:b9:64:f9:ac:a9:ed:5e:85:7a:93:d8:71:0f:ac:61:b3:63:
92:d5:cb:33:fb:a8:b8:1a:5b:87:9d:5b:58:07:7b:5b:35:f8:
f8:65:03:de:84:7e:f3:38:dc:79:9f:9a:cb:45:29:3d:bb:72:
3c:2b:09:60:f4:a2:c9:dd:ad:ff:70:42:c1:e8:4b:18:07:b8:
04:6a:73:04:0d:e4:d0:b9:2b:76:ad:9e:c5:b6:eb:c7:8a:05:
98:55:e9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:02:55 2025 by rpki-client