Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
File: QZV-DXwo4yonWu2yD4AjYbRb_1E.mft (raw, json)
Hash identifier: Pf4egAIeJbKYD4Cfdv6WHMFxe9zdfYBEk1+O0jeOgrk=
Subject key identifier: F9:AC:2C:30:3D:E0:51:5B:EF:F9:61:F8:FF:82:FF:FA:BC:2C:64:EB
Authority key identifier: 41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51
Certificate issuer: /CN=41957e0d7c28e32a275aedb20f802361b45bff51
Certificate serial: 01965726B263D548C361504C91531FB96573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
Manifest number: 1191
Signing time: Mon 21 Apr 2025 07:01:15 +0000
Manifest this update: Mon 21 Apr 2025 07:01:15 +0000
Manifest next update: Tue 22 Apr 2025 07:01:15 +0000
Files and hashes: 1: QZV-DXwo4yonWu2yD4AjYbRb_1E.crl (hash: HnBKHnlMTbi3Z13bEGvn0nWsLag0IngUR/4nScMuD3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:b2:63:d5:48:c3:61:50:4c:91:53:1f:b9:65:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41957e0d7c28e32a275aedb20f802361b45bff51
Validity
Not Before: Apr 21 07:01:15 2025 GMT
Not After : Apr 22 07:01:15 2025 GMT
Subject: CN=f9ac2c303de0515beff961f8ff82fffabc2c64eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:d8:e8:ce:a4:b1:e6:bd:47:f9:72:d6:f0:
7c:ab:22:fa:a4:95:aa:bc:eb:b0:52:c3:6e:45:7a:
f3:73:35:84:58:da:99:92:ad:75:7b:eb:24:60:06:
bb:28:1c:2c:81:c2:fd:8a:a3:c0:9b:a8:60:b2:02:
d4:e2:69:a7:6d:9c:cd:9e:d3:00:13:ed:19:d4:d8:
2f:af:45:b0:58:30:21:75:b0:12:8a:c5:69:ea:ac:
b0:65:9b:40:80:5f:20:e8:8d:a5:4f:fd:a2:9c:d9:
c0:0a:1c:35:15:4a:a2:92:86:83:ee:af:5f:a6:db:
63:00:29:40:87:15:69:19:38:b0:e1:aa:11:e8:1e:
85:fd:e0:84:10:0d:bc:f7:e1:52:81:a1:93:a0:cf:
cf:f3:1b:5f:d4:fb:9f:40:fb:16:34:89:ab:48:2c:
af:ba:fe:11:04:66:58:70:e8:2b:63:f2:ef:d6:e7:
ba:9a:a0:b5:14:00:93:05:69:01:d9:3f:ce:de:54:
e3:41:6e:ed:5b:d8:f1:23:09:2f:57:ca:78:5f:62:
e1:f3:a6:fc:9d:be:50:88:84:02:ef:7b:1e:a7:d2:
24:87:6c:34:86:c8:2c:d9:f2:91:fd:63:cd:de:86:
93:6c:0e:d1:90:fe:e4:95:b2:4d:1b:8a:0c:4b:c1:
97:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AC:2C:30:3D:E0:51:5B:EF:F9:61:F8:FF:82:FF:FA:BC:2C:64:EB
X509v3 Authority Key Identifier:
keyid:41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:45:f4:54:38:29:00:78:93:f7:26:f7:f1:e0:7d:e7:cd:e9:
5a:03:59:51:66:34:c1:a5:72:7c:cc:50:a0:06:45:de:5d:42:
31:cf:a0:8a:b1:3e:f5:2a:54:f9:05:37:fa:a7:9e:a8:b2:0f:
1e:1e:b4:b8:37:b3:03:f1:c0:80:b6:c4:7a:07:27:d9:15:11:
ec:50:ba:16:a7:1e:25:fd:75:92:a3:70:2d:18:36:4d:ea:4d:
d7:11:a3:d4:30:5b:ec:a4:73:67:a2:9e:43:7d:95:b2:2f:29:
07:6b:a0:a7:79:c6:29:18:b7:11:f1:65:4d:6a:d6:1a:a1:99:
c2:80:ba:2a:0b:ba:64:15:6d:69:f0:9e:4a:1a:2f:28:e1:96:
b8:02:55:37:34:0a:1c:a3:e9:79:86:ae:bf:9b:d0:45:a3:0b:
27:03:56:85:af:9c:d7:ff:ea:25:94:9f:7c:2b:ec:11:59:39:
07:b0:ca:06:33:41:2e:70:54:e4:81:ec:45:37:b0:53:fe:3d:
dc:89:18:ab:dc:57:98:79:c4:aa:c4:9a:4c:44:9b:15:30:ca:
05:8c:99:e3:25:25:40:db:9b:1a:9a:4c:1a:2d:2f:a0:d1:e2:
19:c5:4e:31:5d:45:d4:cc:55:8f:7e:49:df:ca:f0:b7:74:6b:
cf:bb:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:40:35 2025 by rpki-client