Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
File: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft (raw, json)
Hash identifier: OzthA8tIIjoUYqy/V20fOqlfXIUNndfiB8yVwANb0hg=
Subject key identifier: 21:D5:AD:A7:77:85:43:05:94:5B:B8:D4:33:6D:86:BC:42:6D:60:4B
Authority key identifier: B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
Certificate issuer: /CN=b50edfc96d2b61788689533142969e65566512aa
Certificate serial: 0196C5DEFBDACBB86037CB92321547BA3268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
Manifest number: 14B6
Signing time: Mon 12 May 2025 19:00:47 +0000
Manifest this update: Mon 12 May 2025 19:00:47 +0000
Manifest next update: Tue 13 May 2025 19:00:47 +0000
Files and hashes: 1: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl (hash: 4/wGNFXeAPfmsVACGzrHknfqtZbcXS4wfJPaXOfPetM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:fb:da:cb:b8:60:37:cb:92:32:15:47:ba:32:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50edfc96d2b61788689533142969e65566512aa
Validity
Not Before: May 12 19:00:47 2025 GMT
Not After : May 13 19:00:47 2025 GMT
Subject: CN=21d5ada777854305945bb8d4336d86bc426d604b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:5e:12:f1:cc:14:25:8e:18:c6:25:65:51:
2c:55:a3:0d:03:68:3a:ce:e5:ee:b4:9f:ac:0f:c3:
0f:b4:5c:93:90:b4:d5:4c:38:6d:fa:2f:5a:6a:ee:
f2:aa:34:35:b1:8d:fc:69:42:ea:a8:77:8c:99:9f:
6f:10:7e:bd:1b:db:c4:ca:a5:04:39:80:84:4e:a1:
36:57:ed:e8:11:d1:c3:08:af:96:22:14:a0:01:fe:
1c:f8:f8:ea:3f:a0:4a:d8:eb:64:9e:63:84:05:9c:
ab:5e:9f:b8:8f:2f:c8:fc:4e:df:fe:7d:e3:7e:be:
d4:3d:b0:d8:e7:29:4c:86:7d:49:2b:b0:cf:c8:a1:
2a:aa:32:cc:cb:d0:e5:3d:de:53:4f:9e:9b:4a:19:
56:49:bd:f2:14:20:72:a6:b7:d5:e9:ed:69:99:1b:
dd:2d:a2:21:9c:2f:ed:3a:bc:04:f9:b1:11:ae:d7:
c4:a3:2b:38:49:ab:41:9f:ad:72:75:36:25:f0:44:
78:e7:86:c4:d3:15:c6:05:fa:41:22:2d:e9:73:42:
95:27:56:f1:6e:42:da:b5:73:f1:58:c2:80:d9:9a:
04:5f:61:b9:f0:61:51:0a:8c:fe:b8:36:cd:f5:83:
e1:90:98:b0:cc:06:39:9c:5e:a9:6e:f9:2a:aa:ff:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D5:AD:A7:77:85:43:05:94:5B:B8:D4:33:6D:86:BC:42:6D:60:4B
X509v3 Authority Key Identifier:
keyid:B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ca:09:0e:cf:c1:f4:f7:0c:f2:85:11:8d:f3:a4:86:37:95:
46:9e:40:69:c8:3e:e2:0b:8a:13:67:de:68:e8:f6:79:fd:e3:
18:1d:1d:8f:27:2b:87:73:65:5c:27:3f:85:38:04:53:1e:80:
de:ab:a0:fa:06:19:df:85:cc:7e:5b:89:03:36:b6:1c:21:b4:
2c:1c:77:9b:2b:f3:a4:cb:94:2b:fe:3b:21:67:3f:c5:ee:7f:
73:a9:d9:71:2f:3f:d8:08:ee:4f:b2:93:90:37:a8:c2:31:38:
a0:68:9c:88:2c:6b:23:29:a2:45:e2:e0:2f:c6:46:b9:e0:20:
e1:11:e8:7e:05:7e:be:f0:7b:55:09:37:2f:39:26:c1:4b:a1:
8e:90:49:46:54:4a:8b:24:e9:67:e2:2f:2a:17:6f:cd:70:a3:
c6:44:48:c6:09:20:2a:d2:6d:6d:35:2b:f6:6e:c8:50:41:5e:
f8:cf:aa:13:97:e2:bb:5e:95:ca:61:77:06:5f:3a:98:77:61:
5b:7f:5a:bb:4e:77:84:c5:16:eb:b7:6b:5e:2f:51:97:b5:19:
1a:55:7a:e6:8f:51:c6:bb:9f:b2:8a:65:99:54:53:a6:d6:cb:
01:b0:0a:a8:38:d4:6a:ae:b5:4f:9d:11:1a:13:47:e9:de:6d:
5c:a2:b5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:07:46 2025 by rpki-client