Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
File: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json)
Hash identifier: hWd2hAbLZxAlA9XdEBXtEfjExAK2e4axLibNULrVje4=
Subject key identifier: B0:2D:CC:67:68:8E:A5:D8:C7:51:29:1F:CA:F3:09:D2:0E:1E:A6:B6
Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
Certificate issuer: /CN=43a3517606989eb352f699976f219faec8e350e7
Certificate serial: 0196BF6E8CEFD3929C8A2262098E0C14EDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 13:00:15 +0000
Manifest this update: Sun 11 May 2025 13:00:15 +0000
Manifest next update: Mon 12 May 2025 13:00:15 +0000
Files and hashes: 1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: y4KGaop/d256fwsUITjCOhWch+qXK7AMu0hCve6MfR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:8c:ef:d3:92:9c:8a:22:62:09:8e:0c:14:ed:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a3517606989eb352f699976f219faec8e350e7
Validity
Not Before: May 11 13:00:15 2025 GMT
Not After : May 12 13:00:15 2025 GMT
Subject: CN=b02dcc67688ea5d8c751291fcaf309d20e1ea6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:a5:aa:79:39:a6:07:b7:d1:a3:07:d2:af:
fc:e6:21:5a:d7:dd:6d:f5:ca:50:4f:20:f6:5f:45:
51:51:ae:2c:34:71:d1:49:d5:49:8b:e5:de:7e:fd:
a6:dd:34:fd:69:9f:3e:9b:78:53:84:f5:26:b6:27:
33:19:53:49:f6:ba:d2:09:f1:fa:5f:0f:a6:5e:70:
11:85:33:b6:3e:89:dc:f7:84:96:13:03:1f:6e:c7:
5c:b5:4e:c9:e8:ac:5a:25:11:b1:fd:6a:9c:98:d0:
f4:65:11:92:cb:1d:4e:00:d1:0c:99:f6:3f:4c:e5:
9a:5c:39:58:23:56:82:98:95:fd:08:f9:9f:70:30:
c0:49:e7:19:7c:15:e6:a7:6e:f7:6b:be:33:13:07:
15:de:13:29:6d:51:a7:d5:36:57:85:16:db:48:ca:
33:f5:ad:83:41:00:39:9c:7b:64:73:8b:2b:00:32:
05:3d:b5:54:56:51:21:fc:c0:9f:01:06:30:19:93:
79:8b:8d:cf:12:2b:ae:bc:32:21:ae:8e:0d:9b:0f:
03:75:1e:f2:9f:5a:b9:09:bb:35:d7:b0:ae:2d:b6:
c3:5a:8b:47:c2:09:51:f1:40:33:f2:46:08:18:b6:
23:e3:8c:90:60:f6:e9:8a:73:38:4e:21:87:cd:f4:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2D:CC:67:68:8E:A5:D8:C7:51:29:1F:CA:F3:09:D2:0E:1E:A6:B6
X509v3 Authority Key Identifier:
keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5c:cb:1f:f4:5b:8b:13:de:65:86:c3:2a:eb:d3:04:36:91:
fe:8f:d1:ae:4b:44:48:2b:42:cc:a5:16:74:cc:b3:72:ab:00:
12:a7:f5:06:00:3a:e5:8c:4e:2a:27:0e:69:a9:41:15:b9:a7:
5f:de:31:6a:a6:5d:e2:32:46:03:53:cc:15:24:c8:fb:b2:39:
fa:9a:fb:6c:6a:f0:5a:30:de:08:5d:d4:0d:0e:80:96:07:7c:
74:54:22:c7:9d:e2:1f:17:4a:e7:00:1b:c2:9b:c8:c8:fa:96:
ae:f9:25:22:ae:0a:04:55:32:d3:8e:3a:17:72:19:6c:12:a1:
67:8c:02:07:6f:90:71:ac:78:5c:89:33:a3:f8:53:b2:64:16:
8a:50:e6:3b:ae:e1:f3:b1:70:b7:d4:aa:4b:75:ea:f2:01:11:
19:f3:ec:86:48:91:0e:ca:07:27:02:28:b5:da:da:70:e9:88:
d3:45:2d:0a:e2:2a:25:ea:cf:70:43:f1:38:37:4e:e3:8f:38:
92:dc:e5:71:be:be:1c:56:53:2d:d1:b2:8b:3c:e1:e9:7f:b8:
f8:2b:86:83:e2:b0:d6:a2:37:fc:53:43:2b:b9:90:be:85:32:
5a:11:33:4a:47:6c:72:30:1e:f2:1f:42:d0:15:24:eb:c4:31:
1d:c6:40:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:08:47 2025 by rpki-client