Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
File: Q5_i1RcHd00tDCv50SrQercmQqI.mft (raw, json)
Hash identifier: 9G6Fm4e25D2VTcib2K/pgoZeuHnVFDQxOhlS2fhBEeM=
Subject key identifier: F4:DD:96:88:ED:12:BD:3D:51:CC:7C:F1:0B:31:AA:73:CD:B8:C0:58
Authority key identifier: 43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
Certificate issuer: /CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Certificate serial: 01969DF5FC9BCC5506943D9C9DE070F9CCBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
Manifest number: 0D88
Signing time: Mon 05 May 2025 01:01:05 +0000
Manifest this update: Mon 05 May 2025 01:01:05 +0000
Manifest next update: Tue 06 May 2025 01:01:05 +0000
Files and hashes: 1: Q5_i1RcHd00tDCv50SrQercmQqI.crl (hash: qEc5Mcf1N+3aJH6Wai9dhWZOIUdAo5oBwgMXAXhUySQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:fc:9b:cc:55:06:94:3d:9c:9d:e0:70:f9:cc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Validity
Not Before: May 5 01:01:05 2025 GMT
Not After : May 6 01:01:05 2025 GMT
Subject: CN=f4dd9688ed12bd3d51cc7cf10b31aa73cdb8c058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:c3:9e:ee:55:fe:48:41:7f:c9:0b:e8:7e:
34:1c:92:54:74:3c:c8:a7:7f:ff:8a:8b:12:ba:dd:
0c:cf:ba:c4:fd:7b:1a:64:ca:7a:e5:8a:2e:21:8a:
c9:96:4f:63:ba:b7:3a:09:44:36:37:47:74:97:21:
33:ab:8d:ed:0a:57:e6:66:5e:d1:6a:3d:38:53:37:
ea:7b:ac:ea:d4:3a:9a:dc:fb:04:f8:08:d7:99:c7:
6f:a0:42:2a:21:c2:c9:22:ec:bd:b6:b4:ba:ee:5f:
50:7e:98:6a:87:17:fa:5c:5b:4d:34:4d:4c:2e:11:
c6:58:37:f8:f9:43:f7:64:88:92:4c:98:92:da:26:
09:ba:85:89:43:10:34:3c:1b:7b:16:eb:fe:f9:ca:
1b:c1:c2:a0:c9:d1:95:52:3c:65:f2:56:96:c9:76:
09:22:66:b2:18:b7:6c:a1:51:bd:81:a8:86:04:80:
1f:2d:cd:ac:8b:bf:50:5e:6b:01:0e:86:36:cd:57:
ad:ec:95:af:bb:4c:81:f0:21:b9:ea:73:7a:97:10:
16:28:b8:61:92:5b:0e:42:40:78:79:f2:96:f3:85:
3c:8b:f3:c5:2c:53:fb:ea:a5:fb:ff:77:62:0b:b0:
07:f4:f7:58:2b:f3:c9:ba:d5:3a:06:30:ca:0c:d0:
0f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DD:96:88:ED:12:BD:3D:51:CC:7C:F1:0B:31:AA:73:CD:B8:C0:58
X509v3 Authority Key Identifier:
keyid:43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:11:dd:a7:49:e4:b0:46:e8:de:03:5a:45:f7:22:b2:46:76:
82:e8:2a:b6:10:00:0a:0c:e2:fd:5b:71:31:6d:56:bf:e6:73:
0c:51:6d:c5:70:11:ba:21:11:56:ce:ef:32:2c:ee:88:46:54:
7d:24:63:00:ac:5e:55:df:7b:f0:f3:b4:26:15:eb:c2:8f:c7:
6d:aa:88:aa:12:f4:40:dc:2a:be:ea:34:eb:a1:86:87:90:39:
c9:30:91:bf:62:36:75:af:09:a2:d9:1a:1e:02:5f:35:d5:d0:
d0:d3:be:a3:06:89:b4:5f:28:2b:15:9c:83:04:46:27:04:4f:
98:9f:34:d2:76:f7:e5:0e:a6:1a:36:43:22:a8:1e:54:9f:7b:
c3:39:a7:a9:dd:50:3c:22:72:ac:76:68:71:17:27:24:8a:2d:
be:b3:7c:79:f3:75:89:7e:dc:cf:db:6d:07:4d:2e:c3:14:8b:
35:50:ea:e6:12:d8:d4:60:f1:d4:c6:7c:7d:48:17:3f:aa:60:
f8:b2:5f:e6:3c:29:18:c5:c8:a2:77:43:b4:a9:2c:c7:2f:36:
0e:89:e5:03:62:f9:7e:d8:a3:7d:c8:17:b8:67:cd:1c:f3:ac:
b6:9c:1b:b6:37:e9:ff:bb:92:ff:e9:99:1b:52:94:11:75:c1:
a1:8b:0d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:14 2025 by rpki-client