Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier: a6QMvvJK1RKfSuTHNyBC4/r1jj+27F5u/57jB7fTTo4=
Subject key identifier: 46:4D:06:17:D9:CE:39:C7:F3:90:22:62:4D:AC:25:03:E7:E0:2A:2F
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial: 0196C013B2CD8EC6A634251D10E1B8F69BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number: 05A6
Signing time: Sun 11 May 2025 16:00:38 +0000
Manifest this update: Sun 11 May 2025 16:00:38 +0000
Manifest next update: Mon 12 May 2025 16:00:38 +0000
Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: HsQdg5z6SbPRvtrWYdFmoIWAa0uv/e3Ylx64HGPgXVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:b2:cd:8e:c6:a6:34:25:1d:10:e1:b8:f6:9b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
Validity
Not Before: May 11 16:00:38 2025 GMT
Not After : May 12 16:00:38 2025 GMT
Subject: CN=464d0617d9ce39c7f39022624dac2503e7e02a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:72:da:97:67:78:60:3b:2e:24:b5:a6:35:
60:b0:e8:8d:a7:25:cd:a3:fb:a1:a3:fb:ce:5c:30:
73:d8:09:f1:23:9f:b6:dc:a4:27:bf:29:d9:fc:28:
49:03:5b:3e:be:72:81:0b:ab:08:55:76:ff:ae:6c:
74:16:a1:98:c4:75:dd:ca:c9:83:40:cb:37:d2:11:
27:69:0d:fb:cd:88:df:8b:72:ad:bc:4b:17:75:b6:
ee:df:f0:8c:86:bb:a3:90:fd:28:29:40:f8:11:52:
eb:a7:3b:f9:71:5d:b5:1a:9b:0e:06:6c:6d:ba:dc:
42:9d:93:33:bc:95:af:bc:8d:db:f6:59:fa:86:69:
ec:64:e2:9c:a4:ba:a7:72:c2:73:81:8b:19:e9:33:
e6:ea:9c:56:57:95:3e:01:79:e3:fd:37:37:c2:a3:
54:b7:a8:c3:26:d6:ac:b9:8e:b5:d9:c3:be:73:c2:
67:4d:f8:f6:51:69:d0:fb:9e:11:a5:ce:b3:47:8a:
66:4e:d5:65:08:55:5b:da:85:d6:5d:5d:01:fc:68:
30:1e:b0:34:25:34:e5:fe:e2:9e:13:d4:6c:0b:6b:
47:9c:4a:51:84:db:a9:79:72:62:db:12:1b:41:76:
9e:5b:aa:95:35:7f:33:3c:d3:23:24:27:d6:3f:ca:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4D:06:17:D9:CE:39:C7:F3:90:22:62:4D:AC:25:03:E7:E0:2A:2F
X509v3 Authority Key Identifier:
keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:76:b4:63:ac:af:05:4e:a9:e3:51:2d:4a:7a:51:90:47:1f:
22:e4:d2:68:30:a7:a5:35:79:37:7d:0a:93:4d:23:64:02:89:
43:29:5b:15:6a:dd:75:62:0e:c3:5c:b0:38:88:08:f1:88:54:
a3:23:83:e8:37:81:3f:33:1b:11:05:ec:64:93:97:5a:18:1c:
fd:8b:ed:f4:af:ac:fc:e9:ac:ce:4f:63:2b:00:b1:95:ce:ad:
69:5b:1c:b7:c7:80:8c:be:28:95:c1:e7:27:0d:ba:08:5e:ed:
4b:3c:77:cc:f1:eb:a4:83:3b:f5:b7:f4:c0:ef:8e:f5:a9:56:
a6:df:f3:5e:85:f9:c3:c9:54:9e:9f:72:ee:cb:39:40:d7:47:
20:a0:34:ae:a4:29:c3:0c:d5:51:ca:0b:fe:cf:bd:7e:b8:60:
37:b9:46:dd:d4:3e:85:dd:f8:dc:4c:39:1e:46:93:61:73:91:
fb:8f:e6:6d:ec:e5:66:ce:51:c3:e9:b6:a0:e5:94:90:53:52:
18:b5:47:e1:cb:31:fd:04:2d:d9:c2:26:2d:d9:62:5f:ac:e9:
ff:c5:bf:4c:af:80:82:37:14:1e:bc:e4:56:34:b1:85:1c:ae:
ec:d7:cb:fb:61:b0:d9:83:a1:46:d9:94:a3:4b:30:ed:81:59:
3f:81:79:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:04:05 2025 by rpki-client