Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: FNJs+3rx4GMMGen2hcDOj4FBoI6CuoQtk47oJ9QXXJQ=
Subject key identifier: 7A:8B:D5:A2:1C:8B:E8:3D:CE:C0:33:D9:CD:5B:75:93:DA:F5:5B:4D
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 01964BFDB9C30A5442D60B0E69AB52EA3FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 0592
Signing time: Sat 19 Apr 2025 03:00:41 +0000
Manifest this update: Sat 19 Apr 2025 03:00:41 +0000
Manifest next update: Sun 20 Apr 2025 03:00:41 +0000
Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: xVEtJuSXrCaD+dElg4RGeEhjf6v08VZ5NLWGVGLLG6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:b9:c3:0a:54:42:d6:0b:0e:69:ab:52:ea:3f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Apr 19 03:00:41 2025 GMT
Not After : Apr 20 03:00:41 2025 GMT
Subject: CN=7a8bd5a21c8be83dcec033d9cd5b7593daf55b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:a1:22:3c:28:6d:81:7c:e2:91:d3:d7:93:
8b:d1:19:51:e5:9c:81:f1:d8:90:a8:1c:64:d5:c9:
75:7e:4c:7e:19:bf:59:cb:c3:94:a1:c1:05:a8:72:
1a:ef:27:7f:c3:25:15:c5:0a:d6:41:ed:21:21:97:
88:c2:e1:bb:9d:73:c7:ae:fc:3e:6e:f3:52:0a:db:
62:75:7f:b8:97:21:8e:51:6b:74:b9:20:c3:22:61:
50:41:6f:36:47:cb:c6:a5:7c:9f:ad:fe:3d:ff:61:
21:61:dd:8b:a5:30:7d:2f:9b:f2:24:3f:0f:78:2b:
3a:1c:67:24:cd:d5:ea:3d:3e:05:7a:57:01:56:63:
72:eb:96:20:4f:81:ab:00:6f:10:b4:19:58:c5:03:
60:da:5d:95:31:74:db:85:e9:4a:95:7e:04:11:9e:
f1:0d:06:a7:00:05:f8:97:a1:88:c8:ba:85:45:f0:
7e:3b:72:45:b1:6e:a2:b0:9e:b4:70:b9:e5:5c:e1:
48:ae:64:f0:f5:17:22:c7:bc:c4:29:61:0a:e1:37:
ed:e0:1a:f0:42:ad:72:1a:98:4c:60:74:d4:bc:28:
a4:65:9b:4a:7d:0e:96:68:20:f4:9e:b9:cc:7a:6b:
f0:e1:b8:43:96:24:38:d1:cb:5b:52:e6:ac:e2:d7:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:D5:A2:1C:8B:E8:3D:CE:C0:33:D9:CD:5B:75:93:DA:F5:5B:4D
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8c:8c:a5:61:4c:b5:d7:62:80:3a:c7:df:08:03:57:a7:64:
c2:d8:17:2f:ac:98:c0:3c:8e:d7:a9:00:36:c8:05:01:d5:ff:
bb:b9:4b:a8:e8:92:75:bb:f1:59:14:87:dd:67:7c:09:a3:3d:
f7:9e:07:96:c2:d4:11:e1:7d:63:aa:f2:13:60:87:21:ca:b3:
a7:5f:4b:59:3e:f7:c0:3d:18:0c:e2:1b:12:e4:ee:c0:c4:25:
69:3f:ca:34:e2:46:58:43:86:f1:9b:3e:ce:5d:e2:9e:47:64:
6c:d4:d9:0b:87:70:d9:a2:b9:06:00:cb:60:06:74:83:c4:27:
f9:9b:0c:48:42:bd:c0:17:84:da:c8:7f:6f:aa:c9:96:67:0c:
a1:02:54:7c:1b:18:d9:ea:52:e0:98:2c:c7:17:c7:09:fb:6e:
91:75:f0:b5:26:4d:16:f1:46:2c:4a:92:57:c1:1b:55:19:1b:
1e:31:58:0d:bb:24:b8:9e:b7:1f:99:6b:a4:e5:17:4f:23:76:
3f:c4:01:c9:1c:64:6f:ec:82:f2:56:d8:b6:d1:b8:1f:18:89:
1b:de:bc:f5:8d:a7:5b:45:0e:b3:50:33:5b:ce:9a:18:06:c1:
f3:16:31:4e:2a:68:28:ab:3a:9d:6c:4b:ff:00:3c:9e:55:33:
c8:10:b7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:26:03 2025 by rpki-client