Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
File: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft (raw, json)
Hash identifier: rlD/JEYIjNJ99CO9t/Rqd55ZAMEMLP41DcGYV1ja03E=
Subject key identifier: A5:6F:F1:A1:D9:5B:11:E4:BC:8D:06:CF:0E:4B:75:55:12:ED:5F:09
Authority key identifier: 41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
Certificate issuer: /CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Certificate serial: 01965424F95296D4F981573A1D4FB4795178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
Manifest number: 039D
Signing time: Sun 20 Apr 2025 17:00:31 +0000
Manifest this update: Sun 20 Apr 2025 17:00:31 +0000
Manifest next update: Mon 21 Apr 2025 17:00:31 +0000
Files and hashes: 1: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl (hash: CiP/2A/9qfiFZRN04U/0zz78McSfY2UsoI0ULTQQ1vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:f9:52:96:d4:f9:81:57:3a:1d:4f:b4:79:51:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Validity
Not Before: Apr 20 17:00:31 2025 GMT
Not After : Apr 21 17:00:31 2025 GMT
Subject: CN=a56ff1a1d95b11e4bc8d06cf0e4b755512ed5f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:2f:c7:e3:78:bb:a9:45:63:08:65:d4:8b:
d4:4e:fe:93:1f:1b:dd:87:1a:6d:58:6e:38:c3:af:
d7:45:e8:5c:e5:13:3a:0a:1e:d5:e4:ff:5b:91:f6:
59:ee:cd:21:57:9a:84:c9:82:e5:51:c0:3c:ac:d6:
1a:82:eb:fe:86:d6:a6:a0:ea:e7:84:d7:eb:0c:ed:
24:bd:dd:6a:0e:b8:9e:8b:68:a9:a3:90:05:4a:fc:
78:86:02:c0:2e:23:a6:a8:53:ff:c9:ca:49:79:f9:
6e:33:84:75:cf:59:df:ba:85:f9:f7:e0:4f:f4:c5:
97:47:c2:ad:8e:48:b4:3b:5a:9d:1d:ee:21:18:d8:
ae:53:17:55:87:04:b4:a7:69:cf:8b:2b:ab:e5:3e:
86:05:54:e7:fa:7d:e5:af:3e:b9:3d:08:d5:37:da:
4c:87:5f:27:a2:3f:b4:46:4b:4a:79:bb:c9:2a:cf:
a5:38:e1:b0:7a:82:1b:32:d6:77:07:e5:55:da:5e:
7d:7c:8e:ba:ff:1f:0f:52:cc:42:c5:88:f3:51:95:
60:84:33:cc:f9:d8:06:59:53:e1:6b:03:50:e4:43:
e6:17:99:6a:45:96:d6:88:22:20:99:00:75:a8:71:
da:1c:4b:5b:ed:e1:0d:06:32:dd:09:68:6d:cf:ea:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6F:F1:A1:D9:5B:11:E4:BC:8D:06:CF:0E:4B:75:55:12:ED:5F:09
X509v3 Authority Key Identifier:
keyid:41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3d:28:c4:e0:a2:85:fc:18:c1:30:51:b4:6b:3e:33:e6:96:
aa:3d:21:be:c1:6b:98:62:16:f8:42:62:b6:89:f4:ce:57:9e:
f6:a6:6c:7f:a8:cf:98:7e:5d:9e:d4:f3:bf:22:6a:1e:c8:9c:
e1:af:32:42:f7:a2:73:1b:d2:59:00:60:ad:d9:5d:1d:c6:95:
ab:2f:66:e7:02:8c:95:2c:5b:65:5e:66:f6:5c:02:ab:b8:f1:
cc:7e:90:c1:84:5c:68:be:19:2f:82:77:0e:79:24:9b:52:6e:
ea:9b:c0:ae:40:55:5f:fb:4a:93:4d:22:38:57:c1:c8:15:04:
c1:da:33:e4:e8:cc:ed:ac:ca:40:d3:97:cb:27:6b:1b:ac:31:
47:f7:8f:67:fc:23:85:95:62:87:0d:b7:10:ca:89:9b:31:14:
4c:d1:6f:5a:23:71:c5:2f:db:48:bc:a1:07:e8:49:8d:40:f7:
ee:ff:eb:52:57:b3:e2:a9:63:74:9a:0e:df:f3:61:93:ae:cc:
65:30:f8:b6:73:0d:83:a0:3c:ca:a1:47:b9:9c:42:60:da:51:
a2:b3:34:65:e1:98:f7:66:ae:5f:52:b8:c7:fb:a9:58:e7:c8:
74:69:b8:d8:12:30:1c:71:1f:f7:1e:fa:cb:5c:32:25:8c:1a:
c2:89:d7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:19 2025 by rpki-client