Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
File: qXJG_EMZM_Cyggztllx4URgLFe4.mft (raw, json)
Hash identifier: p1kJvi2pPEhJDEXNw0R25P4XYlgAbUYX7Zx6Z/kpyjw=
Subject key identifier: C2:0B:14:29:29:0F:4F:C4:3C:9F:4F:4D:D2:0A:83:61:78:86:22:72
Authority key identifier: A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE
Certificate issuer: /CN=a97246fc431933f0b2820ced965c7851180b15ee
Certificate serial: 0196C871B008905641BB7F31E0FD67C13828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
Manifest number: 08E2
Signing time: Tue 13 May 2025 07:00:15 +0000
Manifest this update: Tue 13 May 2025 07:00:15 +0000
Manifest next update: Wed 14 May 2025 07:00:15 +0000
Files and hashes: 1: qXJG_EMZM_Cyggztllx4URgLFe4.crl (hash: iZ6IDQ0hFlZaaGJmGGANudxqiCA5IRpNWmBDyini74A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:b0:08:90:56:41:bb:7f:31:e0:fd:67:c1:38:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97246fc431933f0b2820ced965c7851180b15ee
Validity
Not Before: May 13 07:00:15 2025 GMT
Not After : May 14 07:00:15 2025 GMT
Subject: CN=c20b1429290f4fc43c9f4f4dd20a836178862272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:d5:c9:9d:82:ce:3f:5b:b7:63:63:5c:65:
e0:96:e3:15:54:7f:2b:41:26:fd:42:43:2c:99:c6:
7a:11:46:f3:7b:a2:1d:3f:1b:28:4b:dd:e3:40:ea:
be:73:bf:ed:42:8a:a6:b5:80:19:8e:25:03:a8:1a:
63:a4:b9:14:b0:aa:64:fc:ce:ae:7d:aa:95:fa:6e:
93:e9:86:92:15:fd:48:f8:45:ed:7d:bf:a1:95:a1:
49:d9:4c:84:c6:3a:2f:0d:11:5b:5a:74:c3:16:15:
81:56:f6:4c:ab:22:06:53:e3:46:90:c6:15:9a:fc:
21:9b:ee:b0:45:c8:ef:96:6e:e9:9c:86:a7:e3:ab:
21:19:4f:b8:c9:ec:d2:4b:86:51:fd:bd:5d:3a:2a:
7e:82:ab:50:9e:bc:61:e5:91:41:6f:06:99:c7:08:
9e:0f:61:f5:5b:7e:73:45:44:3f:c5:3e:c8:df:50:
9a:14:fc:f7:1b:b7:77:10:25:28:e1:98:da:9f:95:
31:51:e3:94:e6:52:69:6f:c9:76:f4:fd:81:3b:ab:
f9:36:80:02:d1:9a:56:7c:e6:2b:f8:1b:f4:a9:0f:
22:c4:6f:cd:a0:89:62:f9:a4:53:75:5a:a2:9b:fc:
69:37:6d:d7:e2:e7:74:e8:39:4d:c5:65:60:85:85:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0B:14:29:29:0F:4F:C4:3C:9F:4F:4D:D2:0A:83:61:78:86:22:72
X509v3 Authority Key Identifier:
keyid:A9:72:46:FC:43:19:33:F0:B2:82:0C:ED:96:5C:78:51:18:0B:15:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXJG_EMZM_Cyggztllx4URgLFe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/786319-ff5f-412f-aa74-caad51694e97/1/qXJG_EMZM_Cyggztllx4URgLFe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:58:32:48:1e:db:53:df:dd:e5:20:58:ca:f6:a6:62:c9:7d:
fb:4d:af:fe:f9:52:58:d0:06:7f:2d:44:24:24:8c:b2:ed:2b:
5c:6c:45:ea:b4:b9:df:7c:47:ea:69:3d:b0:6a:3c:62:18:db:
78:b0:fc:fe:2f:3c:58:e4:9e:c2:c3:51:c9:4a:80:74:cf:6e:
3a:4e:77:fe:ab:84:e2:a3:10:f9:37:82:e0:d1:6e:32:ec:9d:
25:da:41:e2:a6:96:22:8b:f7:5d:7f:26:03:7c:9f:81:e2:c5:
95:1e:31:67:46:ec:72:07:00:05:56:7d:be:d2:5b:a9:34:da:
84:ec:61:06:fa:99:65:1b:eb:f8:e9:b7:9a:b7:9c:6d:3d:0c:
4e:3c:80:d2:92:ec:f2:e7:28:7c:c9:68:0f:81:a4:66:b0:d2:
b3:a7:9d:7a:2c:ba:69:68:08:e3:33:87:6c:0f:b6:79:c1:22:
74:75:ac:9f:51:d4:1e:74:b7:ff:9c:51:bb:17:a6:7b:0d:c2:
a7:5f:ef:8f:4a:40:ce:d7:87:69:3d:9d:4e:98:d1:6c:10:1e:
be:0e:5b:db:e9:c0:20:2a:c9:05:34:bc:9b:68:40:52:cf:b2:
da:e4:af:50:36:db:75:18:a0:38:c0:40:93:d1:cf:f5:4d:87:
5e:a8:4a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:20:52 2025 by rpki-client