Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
File: qK9MCjctAUVV99TXyJz5lvBRQvU.mft (raw, json)
Hash identifier: X/p7kq+LrTFd7+C1UKYPmfuH+93BDJJuJfg3CpzjxoE=
Subject key identifier: 17:F8:52:6D:3F:95:05:AD:E7:D1:6A:FB:F4:40:1A:80:9F:BC:B8:B3
Authority key identifier: A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
Certificate issuer: /CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Certificate serial: 0196DA785DE0E3BD9C08565E91D5413CE98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
Manifest number: 02D6
Signing time: Fri 16 May 2025 19:00:43 +0000
Manifest this update: Fri 16 May 2025 19:00:43 +0000
Manifest next update: Sat 17 May 2025 19:00:43 +0000
Files and hashes: 1: qK9MCjctAUVV99TXyJz5lvBRQvU.crl (hash: TZXsCiIqU6/2UtUX/3NELmtlDQSjSM+/YGpjNZRtQPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:78:5d:e0:e3:bd:9c:08:56:5e:91:d5:41:3c:e9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Validity
Not Before: May 16 19:00:43 2025 GMT
Not After : May 17 19:00:43 2025 GMT
Subject: CN=17f8526d3f9505ade7d16afbf4401a809fbcb8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e2:60:cb:12:ce:d9:b7:ed:fb:c0:2d:ca:4b:
4e:5a:8e:6b:e8:16:02:32:cf:32:74:39:c3:38:30:
bb:5d:62:6d:53:df:3e:ae:c7:c1:10:df:f1:ea:5e:
f4:f2:f1:74:03:2a:e2:1d:24:d4:0a:b3:ac:79:4b:
56:88:2c:6c:00:4c:c0:4a:a8:6f:9b:58:0f:fa:c2:
4f:76:6c:6d:89:83:74:f8:21:91:4c:10:a4:8c:30:
80:f0:2a:5d:03:1b:15:5c:1f:27:96:42:fe:0c:2f:
2f:5f:82:3c:17:41:31:fa:d6:5f:ad:ca:d4:78:c0:
4e:f6:db:b5:8c:f8:43:d1:6d:de:19:d6:fa:fd:bf:
c6:ec:47:15:56:e2:6f:0c:b3:b2:59:b7:41:63:ec:
5d:bd:23:56:d6:56:84:e5:7e:7d:89:da:d5:c5:eb:
2b:c8:f3:e2:55:79:b9:5c:68:9f:ef:5a:a7:f8:59:
38:06:fa:a0:1d:32:f9:b8:5f:97:91:7f:1a:47:ad:
89:b9:78:e9:02:ef:80:f1:12:93:79:36:d8:3f:d0:
86:21:d2:bd:73:7f:b8:d5:ac:4f:0d:d3:a5:4c:4d:
d9:3a:12:30:d9:f7:bd:66:37:31:36:b1:71:b5:64:
69:75:7e:34:be:7b:0a:b8:d2:ab:6f:f0:db:7c:f5:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F8:52:6D:3F:95:05:AD:E7:D1:6A:FB:F4:40:1A:80:9F:BC:B8:B3
X509v3 Authority Key Identifier:
keyid:A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f8:0a:ac:30:d5:b4:ff:f2:a3:1f:b0:38:ad:8f:62:79:3a:
dd:61:6b:f6:3a:5c:36:7d:10:c7:03:5f:88:73:20:05:11:6a:
69:48:ae:c7:37:4f:f9:e1:78:81:f7:9a:0d:ad:4f:fc:17:c5:
54:90:0b:64:8a:51:d5:57:76:9f:88:d9:eb:54:cb:8b:e2:59:
43:5d:a4:5f:6e:59:67:3b:3e:85:15:e2:84:f2:41:df:dc:87:
d8:25:a4:98:90:71:0f:96:74:ca:34:21:77:1c:6a:45:a8:34:
d4:9a:d3:58:67:54:04:f2:8a:e8:d1:fe:0a:77:23:05:67:9f:
5d:73:bd:85:7e:64:c9:1b:77:26:3c:13:d1:41:bc:c5:85:79:
0a:25:17:42:0e:35:71:b5:1d:01:74:d1:10:e9:4c:91:8c:e8:
0d:69:c0:35:2a:bc:d3:42:32:ec:5f:8e:e9:7b:bc:83:dc:35:
c3:34:a9:61:8e:69:10:c2:29:2c:a9:08:3c:c9:2f:83:8b:64:
af:80:f2:7d:b8:b2:30:8b:75:d9:7e:ae:cb:f9:d2:4e:ae:c0:
6f:a4:97:16:63:3a:46:20:2e:dd:4c:5b:d0:d6:a6:0b:e7:f8:
85:87:d8:b9:35:7e:38:90:9d:c9:32:36:81:38:bb:f9:1e:34:
0c:c8:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 23:19:26 2025 by rpki-client