Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
File: QX7IKFpWXfUpSjs7YD_fkZTm760.mft (raw, json)
Hash identifier: ygaItCk+z1bhXfZ/d34IkI/z2hyctW49vaKIhuzL7fg=
Subject key identifier: 61:53:40:DC:49:6F:BA:B5:5A:5E:13:23:4C:D8:F9:C1:39:06:66:A6
Authority key identifier: 41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
Certificate issuer: /CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Certificate serial: 01965E71BE4D095F593B0916426E4A19C736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
Manifest number: 02E7
Signing time: Tue 22 Apr 2025 17:00:34 +0000
Manifest this update: Tue 22 Apr 2025 17:00:34 +0000
Manifest next update: Wed 23 Apr 2025 17:00:34 +0000
Files and hashes: 1: QX7IKFpWXfUpSjs7YD_fkZTm760.crl (hash: FkpbsbnBAvb2guurZtTvTHFJg+JSg7QYlwGaruAJIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:be:4d:09:5f:59:3b:09:16:42:6e:4a:19:c7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Validity
Not Before: Apr 22 17:00:34 2025 GMT
Not After : Apr 23 17:00:34 2025 GMT
Subject: CN=615340dc496fbab55a5e13234cd8f9c1390666a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:d6:6b:ee:f7:50:31:59:a2:a9:c9:b4:e4:
4d:63:39:b9:88:52:de:80:43:b4:ce:59:62:17:e1:
5d:a5:cd:45:d4:96:3b:ed:7a:8d:76:f1:81:16:88:
b3:11:7f:42:42:eb:74:3e:d1:4f:e6:d3:70:27:81:
d5:00:ee:9e:51:d9:71:f6:24:f7:25:07:59:8e:91:
91:49:04:4c:26:d8:a0:c7:93:2d:e9:3f:05:4e:6b:
4c:e4:2b:e0:d1:42:17:48:45:5e:a2:c0:d6:0e:3e:
73:4f:41:22:17:2d:e8:0c:d4:26:93:54:fe:e7:2b:
f2:b3:fc:48:61:ad:57:8a:af:d4:36:40:85:5c:43:
14:2d:70:7d:27:83:7e:2f:2b:bd:b5:e4:68:00:26:
b8:6a:b8:9f:4d:06:1c:7b:b0:68:ed:95:c0:f3:73:
f2:20:fc:62:39:7c:10:e1:69:4d:a3:bf:35:08:27:
24:ad:47:0c:38:7b:aa:b5:c5:8f:07:bf:08:dd:81:
b9:1c:87:5b:07:73:f0:6c:fe:20:d6:5c:a8:da:cf:
2c:17:b6:23:3c:fd:de:68:06:c8:b1:cf:50:d3:cf:
89:c1:69:02:f8:52:e7:9f:4c:e4:b9:9b:ac:f6:5a:
be:ab:f1:50:51:b1:5b:a3:36:50:e9:9c:93:b3:b1:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:40:DC:49:6F:BA:B5:5A:5E:13:23:4C:D8:F9:C1:39:06:66:A6
X509v3 Authority Key Identifier:
keyid:41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8c:40:21:c6:54:fa:74:19:50:0b:99:20:f3:c7:50:d6:0d:
34:02:07:e0:2e:27:98:06:83:b9:1e:58:4f:9f:45:5d:85:fc:
ea:8e:db:5c:a3:a3:f8:e0:de:a8:98:9c:07:2c:12:c9:f8:fe:
af:78:ff:cd:94:6f:86:58:32:3c:7c:c2:35:4c:d0:8f:48:4e:
0c:17:73:aa:a0:b2:78:22:fe:c9:83:80:89:ce:d3:31:d6:dd:
23:ab:7f:24:b0:5e:8b:36:88:f3:85:00:7f:66:ab:34:e1:8c:
26:be:03:13:6c:a4:36:3b:52:ff:2a:cb:38:31:73:dc:d1:34:
ea:ce:5d:1c:d6:0d:22:b3:0e:aa:5a:e1:f4:8d:6d:ae:e0:3d:
9f:9d:f0:2c:9b:77:72:2f:7d:35:fb:7f:d6:a8:14:31:ab:62:
6a:b5:6b:30:04:f6:2d:65:9a:9e:70:fd:cd:fb:d2:4e:71:c0:
e4:80:1d:f9:3d:19:e4:38:19:fd:25:ad:6d:db:f4:d8:1b:57:
9c:f5:ce:88:71:0a:68:bb:00:56:9a:1e:8c:b0:dc:97:b0:12:
1e:e7:cb:e0:15:f7:81:85:3f:7e:33:cf:58:0e:05:29:12:bb:
64:3d:81:a3:a1:21:5b:a2:fd:71:fe:dd:10:79:36:53:14:83:
dc:d0:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:16:51 2025 by rpki-client