Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
File: qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json)
Hash identifier: X30BLO8M8PqoJ8AO99a9ZU0zp95okbQBLURL0uyAwEQ=
Subject key identifier: 3B:B4:19:5E:37:EA:9F:A9:4D:19:81:11:9F:67:97:FC:DC:29:26:D9
Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Certificate issuer: /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Certificate serial: 0196C04B351FEC608F388F27FAE0213BD744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
Manifest number: 124B
Signing time: Sun 11 May 2025 17:01:16 +0000
Manifest this update: Sun 11 May 2025 17:01:16 +0000
Manifest next update: Mon 12 May 2025 17:01:16 +0000
Files and hashes: 1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: KMBGXK3+vDpjG5F+qQl1wLXca7E8KUDzPqadHQ7zzYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:35:1f:ec:60:8f:38:8f:27:fa:e0:21:3b:d7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Validity
Not Before: May 11 17:01:16 2025 GMT
Not After : May 12 17:01:16 2025 GMT
Subject: CN=3bb4195e37ea9fa94d1981119f6797fcdc2926d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ef:c8:42:36:b0:65:a5:e2:70:d7:44:93:8f:
df:5f:1d:12:2c:9a:3b:37:3c:24:93:70:ad:7a:29:
a7:6a:3c:78:05:eb:fa:78:b2:c3:64:1b:e0:56:ce:
93:56:af:ec:a7:6b:43:9b:60:9b:cf:6d:63:c2:ea:
5a:df:d1:f3:54:c0:04:94:f4:f6:20:8f:51:ba:6d:
6a:00:80:06:c7:0a:37:a5:43:ad:27:13:00:9a:3c:
a7:c4:e0:4d:a1:a6:87:4e:18:36:1b:ba:2d:70:db:
db:74:43:4d:c3:04:de:be:98:05:af:c3:17:6b:86:
2e:34:79:06:b4:88:f2:b9:f1:67:2b:c3:e2:0e:14:
1e:f9:12:85:87:81:74:ca:3a:81:fb:93:79:db:d6:
77:2b:3d:77:f2:97:79:b7:a4:26:ae:42:02:1e:98:
bd:68:f7:b3:c4:ce:2f:46:50:d0:a2:30:65:1b:25:
e9:0a:dc:88:ee:89:c2:7b:2b:13:49:6e:df:5e:c6:
8d:2f:bd:84:e2:a5:d7:34:87:a7:6f:96:e6:2e:2a:
fb:84:eb:bf:c1:54:30:ae:11:07:02:74:e9:97:2a:
01:80:cc:dc:4b:fb:f5:4f:f1:00:f0:b4:1c:c9:d7:
88:9c:11:19:ad:e7:a0:b4:f2:ab:5e:2c:71:db:e7:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B4:19:5E:37:EA:9F:A9:4D:19:81:11:9F:67:97:FC:DC:29:26:D9
X509v3 Authority Key Identifier:
keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f6:3c:ea:d9:08:d3:62:f8:d5:72:d7:72:87:b6:39:0f:cd:
2a:20:e3:68:64:67:b2:37:8c:0b:58:2c:9b:e9:1c:99:b7:18:
1a:76:ce:85:ee:b1:1e:f4:7d:e0:06:b8:35:38:a1:eb:db:d0:
7a:64:27:10:2a:ff:63:fb:6d:7f:a6:79:dc:1b:d8:54:d0:7f:
ab:52:78:e0:98:14:03:eb:0b:aa:b0:b4:90:72:cd:f4:66:77:
a1:b9:fa:ce:8d:b8:d4:ec:a4:58:e7:88:bc:d8:a7:a8:2e:d5:
cf:89:27:ea:8f:3c:ab:78:07:89:2e:6f:6e:e7:6a:1b:fc:2d:
6f:eb:76:76:00:98:6a:ea:e2:95:a1:b8:65:7d:55:fd:ed:7a:
40:fe:39:da:1c:1f:d7:e2:86:b2:73:bf:99:c4:87:42:bc:38:
e3:2f:37:90:4d:54:ba:0a:3c:55:b7:a1:a6:3f:20:3b:6f:49:
c9:01:df:38:a1:80:88:0e:18:0f:c2:d8:f4:eb:2b:f7:89:00:
88:18:27:22:37:d1:51:9c:6e:e9:44:56:21:a8:eb:f6:d1:2f:
58:b4:1a:82:e8:ce:bd:9b:66:1a:f7:07:38:98:01:b0:b8:33:
29:36:7c:56:eb:99:70:b5:0d:2c:51:81:96:8b:49:40:11:1a:
17:22:b5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:35:28 2025 by rpki-client