Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: qJv8k9uDhNa3RDKOV+IlTUfGC4Qz9BbKMvvyH53Aty8=
Subject key identifier: BF:8D:DF:98:ED:5A:74:8A:95:DB:87:1D:A7:72:CC:5A:64:61:5F:B0
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 01965B02A15B6C8A23E4609A1713F36E98F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 0480
Signing time: Tue 22 Apr 2025 01:00:21 +0000
Manifest this update: Tue 22 Apr 2025 01:00:21 +0000
Manifest next update: Wed 23 Apr 2025 01:00:21 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: X7uqKhY/Q8anNviYcdXgpeJ/WgsJBWdxiNjq/WEDFTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:a1:5b:6c:8a:23:e4:60:9a:17:13:f3:6e:98:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: Apr 22 01:00:21 2025 GMT
Not After : Apr 23 01:00:21 2025 GMT
Subject: CN=bf8ddf98ed5a748a95db871da772cc5a64615fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:58:87:a1:80:a8:1e:0a:f6:bf:44:f5:32:
8f:87:9c:34:cf:b4:c2:60:41:5d:14:09:db:83:fa:
aa:dc:bc:eb:85:b0:c8:6d:67:e0:ce:aa:5f:61:3b:
02:18:bc:ea:c7:e5:20:a1:62:89:39:32:97:93:18:
5c:c1:1e:53:a1:e1:13:b4:9f:fc:8f:7c:71:07:13:
b0:ce:c6:c1:91:46:07:b1:de:95:2a:d9:80:ba:60:
b0:7a:7d:62:ac:7d:19:98:87:4a:4e:5d:b7:82:bc:
0b:fb:89:4a:b0:f4:6f:d3:08:4a:fc:d4:4b:e0:c4:
02:1c:3d:60:d5:d1:c2:95:12:dc:f6:be:3b:16:2d:
c6:ef:e8:9f:48:68:f2:62:91:6a:72:60:6a:ee:c8:
80:3f:12:c1:7a:85:f9:3e:37:4d:cd:83:a7:fe:ce:
b7:fd:68:3d:39:de:a0:50:89:fb:1e:3a:52:39:1c:
d4:34:27:cc:49:18:31:a0:6d:d0:92:49:e0:45:58:
db:3d:3b:18:74:77:19:3e:24:48:8d:cc:81:ec:43:
16:37:f1:61:85:dd:0c:2e:15:d7:92:06:d0:52:e1:
78:50:a6:ee:aa:4a:96:cf:72:dd:5d:8e:75:34:eb:
d1:f1:f2:99:ed:9d:4b:a7:4e:0b:e5:17:87:4b:80:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8D:DF:98:ED:5A:74:8A:95:DB:87:1D:A7:72:CC:5A:64:61:5F:B0
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5f:f6:1b:18:23:12:da:f2:ff:51:c4:1b:d8:37:d3:fd:fa:
32:57:16:ee:81:af:3e:9a:a7:25:85:fa:17:45:67:20:40:ea:
59:b8:9c:25:39:2a:b0:15:68:3d:d6:94:fa:76:2a:0d:34:fa:
26:1c:8e:ce:bc:78:e0:49:d9:ce:0a:c4:6d:8b:3c:a7:24:df:
87:27:90:d8:68:f6:a0:f8:b6:8a:cd:3a:45:ca:34:b0:c2:52:
0a:f9:f8:25:24:8c:b4:87:91:59:95:5a:bc:90:44:33:c4:98:
06:d4:5e:78:d1:38:91:08:e4:9c:5c:74:37:a6:80:2f:79:e4:
bd:83:6f:6c:14:c8:4d:b8:62:3b:7d:80:f1:92:fe:78:b6:5c:
10:f3:a4:19:08:f6:7c:8d:fb:ca:56:3a:a8:36:b7:41:d5:69:
9d:66:b6:50:19:10:9c:5d:af:21:f5:4a:a8:9d:d2:de:c0:d4:
5c:eb:4a:cc:62:cf:0a:f5:a7:34:3d:34:e2:82:b4:e9:ab:8c:
70:65:8b:d6:8b:a8:1c:89:35:d5:ef:ab:91:1e:70:17:bd:c2:
2a:20:db:86:02:b1:30:e5:08:83:d5:dd:5c:35:84:87:14:7d:
5e:e1:c4:c2:99:7b:ad:d5:97:5d:07:da:58:ed:57:cc:0c:e9:
6f:24:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:23:59 2025 by rpki-client