Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
File: QTJyL2byeskHL9x-kx9uGoUTz8Y.mft (raw, json)
Hash identifier: rUN8wuDMlNYBhmQZzjic1U/KLMf7osw96THmREeW28I=
Subject key identifier: 6C:94:E1:40:3B:BB:DE:54:C6:9B:AD:1A:9E:FF:5C:02:C3:1F:D2:EF
Authority key identifier: 41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6
Certificate issuer: /CN=4132722f66f27ac9072fdc7e931f6e1a8513cfc6
Certificate serial: 01965538C0BDFFA2D6ADF74E390CD5708753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
Manifest number: 17
Signing time: Sun 20 Apr 2025 22:01:44 +0000
Manifest this update: Sun 20 Apr 2025 22:01:44 +0000
Manifest next update: Mon 21 Apr 2025 22:01:44 +0000
Files and hashes: 1: QTJyL2byeskHL9x-kx9uGoUTz8Y.crl (hash: OhlBO+FfV3oXlu55r7byOY8AS+uShRSFB6mLNXJpGW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:c0:bd:ff:a2:d6:ad:f7:4e:39:0c:d5:70:87:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4132722f66f27ac9072fdc7e931f6e1a8513cfc6
Validity
Not Before: Apr 20 22:01:44 2025 GMT
Not After : Apr 21 22:01:44 2025 GMT
Subject: CN=6c94e1403bbbde54c69bad1a9eff5c02c31fd2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:8e:c2:4e:75:d0:69:05:21:b2:fa:db:84:
c7:1e:76:a4:e2:1e:8b:cb:eb:d7:87:ff:e7:92:89:
c2:de:72:eb:6b:1a:50:2d:7c:d6:49:cb:77:2e:62:
14:19:e5:58:7e:2b:8a:8b:b5:91:77:af:07:13:a5:
e8:4b:8c:9d:ca:2c:1e:14:dc:13:69:2b:41:4d:f7:
2d:82:bc:16:b1:e0:08:97:e7:6d:3a:54:53:ea:33:
22:16:11:ad:27:0a:bb:7f:a9:be:45:35:6e:28:50:
65:23:07:af:fc:cf:25:e7:72:ea:bb:ab:0d:45:48:
f8:6a:a7:48:59:09:b0:d9:0f:a4:4a:9c:54:71:b8:
7f:fa:e7:33:42:33:e8:3a:f0:d5:38:4d:41:a7:e5:
1f:bf:9c:d8:0e:eb:4d:6a:d8:c9:d9:ee:55:49:5b:
d1:54:61:ab:86:bb:b1:77:8f:01:71:6b:b9:31:a5:
b4:99:07:34:c0:50:30:25:39:70:75:cb:fe:53:ce:
fe:eb:0e:38:3d:31:3a:e7:9f:3b:c3:79:32:ab:e4:
03:35:2f:9b:d3:95:36:92:e7:c3:76:65:c7:8d:84:
20:27:f7:d4:36:02:37:ac:3f:bf:56:62:f7:04:de:
09:dc:e4:77:34:05:32:9e:a4:90:11:46:23:33:47:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:94:E1:40:3B:BB:DE:54:C6:9B:AD:1A:9E:FF:5C:02:C3:1F:D2:EF
X509v3 Authority Key Identifier:
keyid:41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3b:43:c7:d0:e9:41:9f:d2:da:b1:1b:67:e7:78:9b:5f:d8:
5b:c0:7a:f7:10:c0:8e:d5:1b:05:52:85:ed:24:1b:01:27:a8:
c9:5d:cc:ee:b4:0c:76:4c:40:48:a0:57:67:97:76:db:ab:c9:
f8:42:68:c4:6b:24:f1:2d:68:9b:7c:50:9c:f3:3d:ed:6d:9a:
3c:d2:b5:e8:71:89:14:f6:60:60:05:6c:58:6e:14:c3:91:9c:
0e:f6:c4:6c:fb:0e:5d:03:be:7e:a5:6f:44:39:0a:db:c5:9c:
12:c3:dc:ad:36:7a:59:0b:b8:9f:8e:01:86:9b:38:aa:84:7c:
cf:b6:23:31:6a:c5:41:50:69:d3:e6:e0:f5:69:56:df:3b:8a:
e4:f8:30:6c:ed:fc:c2:fe:05:11:7b:a0:a6:02:e1:41:43:a2:
36:f7:9c:a1:f6:fe:f1:7a:3b:82:06:22:f5:a1:c8:44:0c:16:
47:5b:e2:45:99:08:db:23:f3:83:2d:a1:e5:84:db:f7:15:fb:
1e:11:c1:0f:07:94:8b:6b:75:5a:84:11:d8:87:ac:92:cd:b1:
9e:c6:47:93:d3:13:27:04:c9:e0:71:02:e5:96:49:0a:06:a6:
05:32:d0:24:fd:71:2b:ed:2c:f0:cb:d4:b1:cf:86:6f:d8:4c:
e6:29:c6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:51:00 2025 by rpki-client