Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
File: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft (raw, json)
Hash identifier: o8rCzc1aBUb9w4c68hIRmAcwSltYEV5EZN8l63AANys=
Subject key identifier: 35:CB:C1:BE:B0:66:07:F3:31:FE:B6:00:D4:9A:76:A8:56:FE:9E:0C
Authority key identifier: FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
Certificate issuer: /CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Certificate serial: 0196AFFBB7415AD1BB892A892E03CDCAEF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
Manifest number: 152A
Signing time: Thu 08 May 2025 13:00:31 +0000
Manifest this update: Thu 08 May 2025 13:00:31 +0000
Manifest next update: Fri 09 May 2025 13:00:31 +0000
Files and hashes: 1: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl (hash: +k9VfVDZ8JKfcgwp8yswkAA2gpZS0NHvJs3u9AtDG5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fb:b7:41:5a:d1:bb:89:2a:89:2e:03:cd:ca:ef:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Validity
Not Before: May 8 13:00:31 2025 GMT
Not After : May 9 13:00:31 2025 GMT
Subject: CN=35cbc1beb06607f331feb600d49a76a856fe9e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b0:6f:8e:34:2f:d3:6d:61:40:c6:00:88:92:
d5:b5:79:a9:a7:a9:56:38:d5:a4:25:e7:51:fd:d4:
d7:fa:60:99:f5:d2:f7:e3:d8:57:dd:f4:12:23:63:
4c:fb:1b:a0:c2:af:a5:8a:95:59:f3:4b:53:94:06:
30:72:3d:39:48:d5:db:5c:a4:6a:ef:20:ca:cb:e5:
54:80:fb:55:9b:0d:11:8b:f9:df:0c:f0:7c:6e:1d:
4e:69:8c:10:a8:50:0c:ab:37:86:7a:9d:97:6d:34:
0e:d1:d9:4b:38:fb:38:d9:bf:b1:40:7d:d6:f7:46:
ed:53:17:13:c2:e0:cb:49:ed:40:db:3c:e9:29:02:
cf:a0:c7:63:46:e0:a5:50:25:86:44:5b:5b:5a:67:
67:d4:51:28:53:72:f0:99:85:86:94:9a:6f:03:cb:
e4:b4:0a:4b:97:c7:7b:bc:93:e5:66:f8:39:66:2a:
6a:5d:df:b1:84:c1:42:f3:38:3f:73:3b:d4:a3:88:
14:dd:41:fa:00:f6:08:e4:85:5c:fd:aa:8a:c8:18:
78:64:52:eb:4c:93:c0:41:dc:dc:d3:78:b2:76:9f:
b3:9f:8b:cb:46:86:b4:95:a0:25:50:4e:91:35:69:
8a:b7:98:fa:0b:50:2a:e8:d5:11:ec:c6:72:fa:22:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CB:C1:BE:B0:66:07:F3:31:FE:B6:00:D4:9A:76:A8:56:FE:9E:0C
X509v3 Authority Key Identifier:
keyid:FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c4:ce:76:a7:8a:f6:18:87:9c:64:28:cd:30:92:d3:77:b5:
f1:a5:57:5c:16:03:2d:c9:ea:d7:5f:37:a9:a1:a6:39:56:91:
a4:a1:91:67:5b:bb:70:c4:19:d4:dc:28:32:cc:1f:ba:56:33:
59:b3:e5:07:c7:8b:0d:72:2f:b5:8e:ec:7f:52:24:f1:2c:ee:
91:e3:d9:fc:cf:6e:aa:71:fe:5d:1f:e4:fb:4c:d4:5e:eb:6d:
15:a3:01:43:04:5c:e3:a6:a6:0a:35:a4:07:4c:c3:cf:6b:8d:
be:32:d2:c6:04:06:0b:a7:f7:a9:17:4a:0a:b1:45:c5:5d:92:
24:f0:d7:7d:d0:05:70:b5:15:a9:44:ce:07:94:47:5c:b9:ec:
98:f5:b0:da:4c:5b:53:8f:00:3f:19:6e:64:8b:82:16:84:ea:
d1:79:b6:6a:7a:5c:79:a0:a2:74:12:85:36:b7:c1:9f:61:a7:
d8:8a:19:4d:fb:da:39:4c:8b:ea:75:62:9c:ec:71:1e:60:1a:
62:7e:f1:0a:77:e2:9e:be:72:8d:a8:93:2b:f7:5e:55:99:08:
66:59:0f:7a:b9:c7:a7:89:b9:43:7a:fe:5f:6b:7e:1c:aa:24:
b5:10:87:fb:a0:aa:8c:c1:1e:37:ce:0e:3d:d7:36:3e:5e:23:
9d:09:9f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:54:17 2025 by rpki-client