Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
File: QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json)
Hash identifier: lTaV0rOEnSo8nrSKxeujLP36yugobsV8TWIUeisAGG8=
Subject key identifier: AF:DB:A3:81:C5:E6:9F:85:AD:9F:01:07:28:14:16:72:82:E3:AF:1B
Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
Certificate issuer: /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Certificate serial: 01965A5DE9D43F9F3285EE8A731885A9419D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
Manifest number: 0189
Signing time: Mon 21 Apr 2025 22:00:26 +0000
Manifest this update: Mon 21 Apr 2025 22:00:26 +0000
Manifest next update: Tue 22 Apr 2025 22:00:26 +0000
Files and hashes: 1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: nEWMH5RofwsZmKaUUV+lNk8lz80+14eH/3soEapTTWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:e9:d4:3f:9f:32:85:ee:8a:73:18:85:a9:41:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Validity
Not Before: Apr 21 22:00:26 2025 GMT
Not After : Apr 22 22:00:26 2025 GMT
Subject: CN=afdba381c5e69f85ad9f01072814167282e3af1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:59:ef:73:c8:e1:e0:a1:d2:cf:22:d9:19:
32:6d:9d:25:48:cb:d8:13:90:0a:8d:40:c4:86:6d:
ba:c5:e7:a1:81:83:8e:5f:8d:5a:67:94:31:ef:e7:
5e:ec:5d:f2:9d:83:59:73:32:c8:dd:96:ff:94:89:
ed:79:f2:45:46:ee:f3:c7:bc:36:2a:72:0f:bc:83:
96:24:62:5e:91:ad:bb:b1:06:f0:a1:e5:76:89:32:
ce:8b:65:1c:2c:ce:6f:25:74:14:ec:69:60:7e:b1:
98:7c:8c:33:c4:6f:56:6f:eb:6c:2c:2a:73:30:7e:
df:5f:62:04:d2:33:3e:24:70:b4:bf:c6:b3:51:1a:
ca:5b:ee:83:65:aa:2c:88:40:e3:19:86:c2:25:5a:
e2:43:39:c9:5a:55:0d:2d:37:fb:98:28:5d:e6:8b:
84:ae:24:96:08:79:a6:1a:6a:2c:50:fe:56:68:33:
cb:0a:c2:60:8c:8f:76:87:f9:c5:01:21:2d:dc:40:
6c:51:5d:02:e2:cc:a6:d6:42:0e:e6:48:9d:12:7b:
0c:a9:b7:e1:74:4c:18:00:3c:81:00:f6:e6:1b:43:
1a:1e:0a:54:59:f3:ef:08:52:bb:91:be:ca:28:08:
d7:14:03:0a:74:ae:89:a2:3b:a7:6a:c2:8d:7d:cb:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DB:A3:81:C5:E6:9F:85:AD:9F:01:07:28:14:16:72:82:E3:AF:1B
X509v3 Authority Key Identifier:
keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:65:35:e4:cb:4d:d9:fc:51:1f:79:08:29:03:c4:6c:d0:8a:
f5:23:b2:98:c0:5d:ac:63:96:9f:61:ed:96:e7:23:b5:5c:63:
7a:37:99:49:6a:75:65:56:b2:6e:5a:93:e6:17:14:0e:52:8d:
a6:5f:e0:e3:4f:52:a9:dc:8a:04:f3:3a:c5:c1:e5:7b:04:93:
fd:33:f4:ab:c8:75:56:95:49:76:d0:99:75:27:ab:7a:fc:7e:
2b:73:f8:79:66:48:89:a8:08:19:d3:14:cf:09:04:7b:82:56:
c3:83:d1:45:76:d3:49:51:9e:83:07:8b:d4:0f:50:f1:50:04:
f7:5e:8a:e4:c2:89:e2:95:07:22:99:39:bf:68:b6:29:4a:b9:
20:cd:65:21:99:84:fc:13:5b:bb:8a:7f:e3:0f:ce:b6:da:68:
23:c3:ac:65:e5:4f:bf:9c:5c:ff:22:45:af:44:36:fa:5a:8e:
d7:a3:4f:9d:06:a4:b0:9f:c4:ce:39:b2:44:a6:a3:7b:37:62:
7c:31:c2:e9:76:9e:d0:45:0b:6f:6c:70:7c:da:df:d6:e5:e8:
3e:3e:12:5f:92:8f:a6:55:59:30:93:8d:c7:91:b9:4a:3c:da:
89:47:b3:72:62:67:0f:82:44:f0:2d:35:49:09:38:d0:b0:29:
84:31:3a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:41 2025 by rpki-client