Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: yVekypuYyfyZtAe8+EJzwqRvos2I9Rh1DVWnd75RURU=
Subject key identifier: FF:B2:EB:D0:E8:5E:81:48:1C:27:1F:1E:C9:B1:BD:20:B0:32:26:44
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 01965BDECA81E7FF165ABF879289AEBA27A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 0F98
Signing time: Tue 22 Apr 2025 05:00:49 +0000
Manifest this update: Tue 22 Apr 2025 05:00:49 +0000
Manifest next update: Wed 23 Apr 2025 05:00:49 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: 7uqrikd4rtxKMBQZLgO4sk8QtZ9wWX1pojj/nuI3Pkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:ca:81:e7:ff:16:5a:bf:87:92:89:ae:ba:27:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: Apr 22 05:00:49 2025 GMT
Not After : Apr 23 05:00:49 2025 GMT
Subject: CN=ffb2ebd0e85e81481c271f1ec9b1bd20b0322644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:45:df:ed:11:48:b8:79:a8:8a:12:87:e1:
b3:18:23:2c:90:4a:37:3d:be:1b:4f:32:91:6d:4d:
71:d8:59:a3:9e:aa:79:82:9d:b5:65:d6:fb:45:e2:
d4:f7:7d:e7:ab:f8:ef:e1:d8:8b:25:47:d7:c1:8a:
06:24:02:95:0e:fb:a3:80:46:96:01:ee:f9:21:da:
67:4a:3d:fe:42:21:38:44:f5:05:b0:91:b2:ca:c6:
18:83:09:15:12:8e:1f:c1:f4:31:2f:15:f0:2a:63:
8c:de:60:8f:79:7d:34:ff:16:85:a1:62:00:58:1e:
bf:40:99:eb:43:37:0c:e0:74:f0:b6:c2:1f:cf:52:
b0:86:e8:db:17:6e:85:18:3b:ae:ec:36:98:05:aa:
3a:94:41:ea:46:b0:6c:fb:91:16:a6:ba:81:ed:94:
22:6a:c1:31:7d:93:68:06:c3:fe:56:5b:1f:f7:f0:
27:0e:ca:56:78:17:10:d9:9b:e2:fa:a8:8c:d1:2a:
16:da:fd:1b:bf:8a:5b:68:3c:22:7e:33:48:e6:e2:
f0:a3:6f:f8:13:9a:bb:0f:64:63:b8:5f:f3:a6:88:
6c:68:fa:f5:c7:11:9c:58:25:b7:e2:d8:ce:5d:b9:
1f:54:8e:1c:d9:9c:ad:e3:c2:8a:88:d3:23:b4:11:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B2:EB:D0:E8:5E:81:48:1C:27:1F:1E:C9:B1:BD:20:B0:32:26:44
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:79:60:07:9b:39:e8:ee:63:d9:93:06:f3:4c:03:54:8b:8d:
1e:b7:f0:e5:9e:09:ea:98:89:da:9a:97:0b:da:30:68:d8:53:
c4:f3:49:ab:cd:30:84:68:0c:c9:31:8e:32:d7:c9:44:31:ae:
6f:4e:a6:4e:15:b4:cb:3e:3e:ef:7c:11:ac:a6:87:9f:07:5f:
a9:a5:70:f6:19:7b:9c:7f:46:27:6e:ac:49:9e:1a:27:eb:63:
a6:9b:f6:aa:18:fa:1f:6f:b7:ae:80:97:0b:39:7c:b1:4f:94:
40:0c:7c:c3:ce:8c:2a:ad:0d:56:fe:cb:8b:19:95:17:ef:e1:
c8:ec:f1:d9:82:3d:9c:ea:93:35:c6:55:c2:92:ff:da:52:33:
a9:1f:f4:8c:90:cf:55:9b:ec:59:a1:a9:25:23:64:5d:fe:5f:
e1:0c:28:e4:66:c5:6c:ea:1f:86:65:c9:de:30:c0:1e:da:d1:
94:43:7e:1e:21:21:43:dd:18:65:93:be:92:0f:5e:a1:c9:db:
35:58:01:21:e3:24:c7:07:52:96:21:e5:1d:a4:d6:bf:53:a0:
2a:71:8e:b1:8f:f7:84:c1:23:3f:89:71:ad:e3:b2:cb:e6:ee:
85:1e:04:c1:11:8b:12:83:4c:6f:c0:85:41:39:4b:87:33:04:
8c:71:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:38 2025 by rpki-client