Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
File: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft (raw, json)
Hash identifier: mN6FgwYVtqoPq+hm9t1656dM2SepUKLn79cJVi0uPJY=
Subject key identifier: E0:50:83:D7:0A:0E:A7:0F:1A:94:1A:0E:12:1A:B0:39:3D:70:E9:5B
Authority key identifier: 43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
Certificate issuer: /CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Certificate serial: 019655DC9FECB4F80EA9569394606BE98042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
Manifest number: 14FA
Signing time: Mon 21 Apr 2025 01:00:44 +0000
Manifest this update: Mon 21 Apr 2025 01:00:44 +0000
Manifest next update: Tue 22 Apr 2025 01:00:44 +0000
Files and hashes: 1: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl (hash: 98ntrBJLtT0674xhdzAsZTFyySdSo/fhy1cdo0E/w+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:9f:ec:b4:f8:0e:a9:56:93:94:60:6b:e9:80:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Validity
Not Before: Apr 21 01:00:44 2025 GMT
Not After : Apr 22 01:00:44 2025 GMT
Subject: CN=e05083d70a0ea70f1a941a0e121ab0393d70e95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:2a:b3:9e:71:a2:f8:63:51:59:72:68:ce:
bb:c6:8c:a6:88:a8:f6:9a:ca:7c:9a:b8:19:5b:9c:
47:ce:7f:30:49:b2:aa:49:47:c3:1f:ed:13:68:42:
44:3c:83:9d:a3:bd:32:ab:42:a4:a3:1a:7f:14:bb:
e9:21:2d:7f:94:63:5d:21:48:f3:d2:2c:b7:7b:9c:
b9:61:b3:38:81:b2:19:aa:d1:c5:29:7f:cf:0b:5e:
81:cf:cd:89:02:84:2e:98:ed:13:06:34:64:9b:ad:
74:ff:09:d9:a5:cd:ff:0f:57:84:0e:92:e1:fa:e8:
2b:99:c5:cf:89:fb:e6:4b:48:c3:30:72:d3:f1:b2:
b3:c7:e0:fa:c5:ad:b7:c6:a4:a9:f5:f1:ab:57:c7:
00:06:c1:1f:8f:e5:32:9b:e6:3d:f4:54:6a:da:6f:
c0:ae:5d:ae:5f:99:76:67:32:24:f7:16:7c:a6:38:
38:b7:7a:02:d6:3b:3f:8e:77:c7:c6:62:f8:b1:84:
a1:38:4f:1a:2e:e5:4f:e5:c7:c3:70:ab:2d:23:82:
65:a4:14:62:2b:7a:d3:c0:10:43:64:6b:25:42:f8:
15:8a:6e:61:dd:29:e3:c1:93:58:9f:fe:61:2b:ce:
a7:1d:8d:26:78:16:49:7c:95:15:5d:20:34:7f:cf:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:50:83:D7:0A:0E:A7:0F:1A:94:1A:0E:12:1A:B0:39:3D:70:E9:5B
X509v3 Authority Key Identifier:
keyid:43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f0:64:d6:67:27:10:3b:c1:fd:f5:a2:11:1a:0f:13:ad:19:
68:71:aa:be:3f:4e:47:09:f9:31:3a:71:20:ab:d3:d8:95:03:
1c:95:06:86:6d:43:18:11:e7:c9:df:13:7e:45:52:85:47:72:
c9:b2:e3:12:dd:40:a0:fb:f3:0e:da:24:d1:6a:16:11:d4:7e:
e1:3c:76:ac:e5:5a:fe:63:f8:f6:90:66:b4:c7:77:e4:94:2b:
72:99:65:7b:de:71:56:e3:a1:8d:d4:f3:bb:9e:2e:92:2c:47:
18:3b:cc:a8:87:f8:7e:5e:3f:b3:e6:09:7c:8f:c0:2a:53:60:
f8:71:66:d5:2b:bd:b8:c2:2b:e1:7e:62:4b:d6:81:74:0a:bf:
46:f1:57:a4:40:35:12:a0:21:6b:3d:d4:2c:b1:8b:db:f1:77:
fd:cd:24:50:b9:06:b1:c3:fe:a8:61:6a:20:36:ab:3a:78:94:
e7:d5:7c:73:e2:34:1a:7a:f8:aa:3c:26:80:bc:e1:7c:b1:ed:
ee:2a:3f:ad:7f:ee:34:2f:04:2e:19:1d:c8:4a:73:c6:50:50:
fb:0d:a7:6f:ad:7f:8d:fc:c3:6a:3c:7b:eb:a8:1c:1d:f9:4f:
de:82:3f:ce:3c:04:50:48:85:7c:0a:68:e2:1f:86:08:97:03:
cd:f4:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:01:25 2025 by rpki-client