Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
File: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft (raw, json)
Hash identifier: j9E/X/lZJ8y77n3PC5r5aluW9U674CwIL5czxaZecO4=
Subject key identifier: 50:98:45:E2:61:AC:6C:E0:E2:02:CB:21:A5:1F:63:B1:E8:6A:66:1B
Authority key identifier: 9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64
Certificate issuer: /CN=9aa664662db37faf9cb53809f8189f64542a8f64
Certificate serial: 0196A1D2B52DC2391FA41BA6846E7B5C6277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 19:01:02 +0000
Manifest this update: Mon 05 May 2025 19:01:02 +0000
Manifest next update: Tue 06 May 2025 19:01:02 +0000
Files and hashes: 1: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl (hash: OrxX0E3/AWKCDn5DwVFquX39Pqp3PXcZDGGnM3KQK94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:b5:2d:c2:39:1f:a4:1b:a6:84:6e:7b:5c:62:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aa664662db37faf9cb53809f8189f64542a8f64
Validity
Not Before: May 5 19:01:02 2025 GMT
Not After : May 6 19:01:02 2025 GMT
Subject: CN=509845e261ac6ce0e202cb21a51f63b1e86a661b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:b6:a1:03:72:c0:12:0d:26:ea:4f:aa:30:
63:df:1a:57:3f:ac:33:c6:6b:3f:3a:84:66:d1:3c:
82:2e:b4:8f:44:26:8c:91:12:36:d9:67:be:16:c7:
d3:37:16:8f:b8:91:ee:96:4b:18:ad:38:f8:ff:3a:
db:8d:53:ad:8b:25:9f:93:f6:1d:4a:a3:7a:81:e0:
13:c6:e4:22:a9:2f:a4:30:e0:c6:52:69:1c:d3:c0:
bf:0c:2c:62:8d:e5:37:d0:4c:da:79:2c:74:d7:e0:
e3:6f:6a:66:ac:85:02:d5:03:0c:22:70:d2:f5:55:
f4:a0:d8:0b:60:27:03:9e:c3:f0:bf:e9:4a:6d:db:
b6:a7:6a:4c:e0:9e:4c:13:72:58:a8:63:6b:24:1e:
fa:64:70:7d:d0:a1:a4:ba:e3:61:66:c5:21:15:66:
75:18:96:08:62:04:95:97:4b:e3:de:7b:4a:f8:11:
57:b8:47:3b:cd:45:9e:81:62:1a:0a:79:9e:02:d7:
7e:b7:2d:15:6d:90:29:1c:bd:b5:93:86:e7:d3:9c:
1f:8d:cb:54:50:f0:62:2c:79:a6:65:2c:39:5d:c4:
ac:8e:19:49:c4:63:58:8f:64:03:0a:1f:34:75:90:
d9:6a:74:27:2e:3b:e7:a2:de:c8:51:3a:34:f2:02:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:98:45:E2:61:AC:6C:E0:E2:02:CB:21:A5:1F:63:B1:E8:6A:66:1B
X509v3 Authority Key Identifier:
keyid:9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:45:23:db:58:e2:25:a3:62:30:5c:22:9d:80:44:16:1d:03:
0f:bc:ed:8d:9e:52:62:d0:38:32:cd:5c:38:85:c5:14:0a:53:
a8:92:ee:a4:f8:c2:0e:27:bf:e6:01:07:59:36:e4:25:fd:64:
95:67:71:e5:93:12:a7:e6:e9:62:54:e1:30:00:7b:72:dd:9d:
19:f2:8d:56:51:3d:92:96:43:76:c5:0e:6f:8d:7a:37:f0:da:
c6:97:84:56:1d:53:c5:5d:88:e4:81:ec:6a:0c:e4:3f:4d:aa:
12:7a:c5:a1:c8:e0:f2:b3:e6:1b:11:3c:a1:2b:8e:95:56:77:
b5:85:0a:90:2e:74:62:69:32:62:9f:f5:3a:55:ef:93:a7:b8:
40:36:16:74:c2:e2:73:de:f2:41:bd:10:8b:e4:b3:ee:d9:1b:
5e:80:0f:bf:be:bf:8a:33:a0:4d:3c:f6:8c:a4:94:ef:f1:c1:
43:bc:7d:0b:78:ec:5f:48:3a:75:ad:92:75:ab:15:f0:0b:8f:
75:a7:db:4d:11:19:0c:35:1d:cb:f4:62:9e:6d:4f:9f:cb:2e:
df:25:38:e5:82:16:06:c9:38:0c:6b:15:43:f7:41:69:e1:6d:
d5:75:a5:4d:6c:fe:bf:e1:04:81:0b:73:21:72:78:41:e0:8a:
6e:6e:79:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:32:30 2025 by rpki-client