Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
File: q1wa2N15IqRaLMdIHv4B3UMwBsI.mft (raw, json)
Hash identifier: QjjGvBLmLV6vJWK334noAGkeonqqbfkwO5mFP03Qvas=
Subject key identifier: A2:D9:F8:73:9C:A3:05:3C:55:E3:27:8E:73:9F:25:C2:39:76:CD:C0
Authority key identifier: AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
Certificate issuer: /CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Certificate serial: 0196C34BE0616CB242CA28256F3942D2CF99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
Manifest number: 07D3
Signing time: Mon 12 May 2025 07:00:51 +0000
Manifest this update: Mon 12 May 2025 07:00:51 +0000
Manifest next update: Tue 13 May 2025 07:00:51 +0000
Files and hashes: 1: q1wa2N15IqRaLMdIHv4B3UMwBsI.crl (hash: ozMLk9NfRswGkU+sdVM+QH+E2Q7DSGQWf81+jcCdDdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:e0:61:6c:b2:42:ca:28:25:6f:39:42:d2:cf:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Validity
Not Before: May 12 07:00:51 2025 GMT
Not After : May 13 07:00:51 2025 GMT
Subject: CN=a2d9f8739ca3053c55e3278e739f25c23976cdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:5e:a5:e6:0f:11:39:3f:87:86:0c:61:b5:
bd:35:c0:75:b4:f0:e7:d5:c7:bf:a3:b6:71:70:38:
23:cb:62:54:37:29:5e:fd:e0:f7:86:f2:de:ee:de:
91:12:52:1b:74:8c:da:2f:e8:fb:3a:02:a9:fd:f0:
ef:af:e0:4c:a4:4b:c8:d9:a8:c6:f7:70:8b:59:28:
06:36:73:d8:ac:0c:ed:b8:c4:7d:dd:a6:57:b1:26:
fc:8e:a8:44:1c:65:2c:d3:a3:ec:db:54:66:f9:f6:
4e:6a:8c:13:70:9c:10:5f:ef:92:8b:18:7c:68:ca:
b1:70:f1:0d:2b:e6:5c:84:f9:6c:b5:ce:43:33:6e:
fa:9b:e2:59:ab:b4:47:4e:58:b7:4b:ca:05:06:53:
d6:8b:f6:06:1c:ae:e7:b6:58:69:0b:8d:8b:27:e4:
81:40:43:68:7b:1d:11:a2:63:ba:93:41:b0:9f:45:
9d:98:ee:55:88:e3:e0:a6:2a:8f:e9:1a:e9:59:e5:
f3:c0:64:8e:59:9d:07:1a:69:4d:6e:46:60:a7:da:
a3:aa:02:34:77:a8:0f:e8:6a:66:cb:33:17:09:d8:
1c:54:81:28:5f:e5:c5:75:a6:07:74:ba:dd:ad:c0:
5f:1e:a1:f3:fa:0d:9b:d1:fb:21:c3:a2:13:9b:7b:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D9:F8:73:9C:A3:05:3C:55:E3:27:8E:73:9F:25:C2:39:76:CD:C0
X509v3 Authority Key Identifier:
keyid:AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f3:8b:fc:82:59:a7:c8:49:23:c7:9c:64:af:ae:19:49:dd:
cf:a1:bb:29:d6:4b:02:13:67:7c:0b:05:aa:f2:bb:3c:6e:7d:
c6:30:5c:b7:31:9a:e7:94:a9:86:eb:8b:42:af:ee:4a:20:28:
8d:e6:a3:4a:80:4f:9e:a4:a1:ca:63:3c:4e:4c:18:2c:74:4c:
99:ef:8a:35:46:6a:23:6e:97:ea:97:fa:20:ad:f7:a3:15:4b:
8b:f6:0a:e8:87:0e:b7:b2:c8:f4:f6:10:b8:d6:67:d7:cc:66:
e7:97:f3:27:b7:42:8a:cb:a7:94:bb:1a:d3:92:00:67:26:5a:
31:7f:67:32:14:ea:c9:d8:44:f5:00:af:68:70:8c:c9:69:dc:
e7:7c:42:29:8b:ac:cb:6c:de:f6:79:6c:c5:69:e2:db:6b:15:
04:7f:43:eb:b6:f1:1f:63:2a:b8:93:81:3b:99:98:84:32:d9:
68:e8:e7:f9:95:da:cb:3a:6d:82:88:b3:f5:38:55:1f:d3:d5:
4c:f8:f7:4f:ca:b2:cf:44:85:e7:45:26:ac:be:37:03:39:d5:
93:dc:31:29:df:bb:f3:25:67:3f:55:35:e2:4e:98:ba:7b:0e:
d9:db:5e:88:5e:5c:76:ed:8b:49:96:b6:9d:df:42:91:61:33:
9a:3c:a4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:26:26 2025 by rpki-client