Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: 2W4OMnXn6yWTW8QOh1CsgPuFouhKE2QxLyq5nU4o3H8=
Subject key identifier: D8:F1:66:67:30:E0:F6:B3:F5:1E:4F:9A:12:0F:A1:AF:E7:B6:AD:3D
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 0196553855F071656B03CC7384803DD98A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 22:01:17 +0000
Manifest this update: Sun 20 Apr 2025 22:01:17 +0000
Manifest next update: Mon 21 Apr 2025 22:01:17 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: H8AO0DaKZSpNUKnHfSU1xtS6IANjORzwCTfByppgsCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:55:f0:71:65:6b:03:cc:73:84:80:3d:d9:8a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Apr 20 22:01:17 2025 GMT
Not After : Apr 21 22:01:17 2025 GMT
Subject: CN=d8f1666730e0f6b3f51e4f9a120fa1afe7b6ad3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:ab:06:bd:d5:4a:d4:5e:62:34:4b:e5:56:
6c:fd:1f:11:a9:38:7c:8f:f7:e7:a8:41:30:45:f2:
31:e3:0f:14:2b:06:88:3f:fe:81:7a:5f:e9:45:38:
76:b2:82:e8:f7:8c:5c:50:bb:8c:9a:b3:c0:e8:35:
12:bb:b6:62:44:33:38:53:4b:63:ed:ba:a8:e5:bc:
15:e6:bf:5f:22:cf:67:75:36:85:23:99:b2:a3:cc:
89:e0:da:40:39:43:06:51:a1:ea:ff:ce:5f:d7:b8:
75:e0:9a:b4:f8:a5:b6:a9:5b:e7:3b:b2:14:02:d9:
54:36:c9:4d:55:a8:49:f1:7d:9c:a5:24:e7:09:21:
ec:17:fd:5e:5e:98:dd:24:2c:f0:b4:65:7c:5d:0f:
76:6a:ab:7b:8c:a4:e4:04:f5:4f:03:b6:2b:30:a3:
a2:d8:51:16:87:7e:11:82:6f:17:90:87:25:af:a7:
1c:f5:91:6a:90:e8:99:cd:67:a6:83:62:e5:57:14:
ca:7f:b6:5f:bd:cf:f0:6d:ee:ff:a3:9e:3e:3a:a3:
60:9e:c7:4b:8d:36:98:bd:ba:9f:5a:a5:af:56:63:
4f:ef:4e:85:80:99:65:73:85:16:38:7c:20:9f:54:
13:a5:cd:92:81:18:28:1f:29:e0:bf:a6:53:b8:4d:
22:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F1:66:67:30:E0:F6:B3:F5:1E:4F:9A:12:0F:A1:AF:E7:B6:AD:3D
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:83:7b:0d:af:4a:16:ec:9b:2e:0c:85:5b:9f:a9:44:40:28:
88:90:e9:c4:b2:0f:4c:7f:f3:be:af:21:65:03:27:2f:24:05:
ff:d1:13:e2:af:8d:ca:33:e9:d8:dd:5a:46:ab:d8:e7:85:04:
2c:e2:64:0c:12:ba:20:c5:0e:d5:cd:e0:56:c7:d6:f6:c2:56:
1e:51:5a:33:07:55:de:ad:16:cc:4f:a8:c0:58:cd:bb:63:82:
fa:43:46:90:3c:9c:31:dc:f0:8a:73:e0:0d:67:2c:4b:1c:1d:
bd:64:81:89:67:4f:68:b4:77:92:2c:fa:79:f3:f7:54:f3:ce:
49:1c:10:24:4d:e1:58:23:1e:12:ea:55:62:10:05:5b:6f:64:
a8:f9:20:b1:ea:a2:f4:cf:01:ea:a2:d3:a5:48:2c:bd:c8:bf:
21:25:a5:1d:48:65:26:8a:e8:cb:ce:92:0e:f9:8c:ca:ab:5b:
8f:e5:5f:a6:6c:ef:ed:7e:dc:f9:6e:42:e2:f7:89:f5:eb:d2:
23:ad:63:38:97:f9:a5:0e:1e:78:83:ae:84:e8:55:49:89:2d:
c9:e1:ac:15:74:03:76:d3:52:96:ec:ee:0e:01:39:fb:b6:fb:
c4:b5:0a:7e:7d:af:c6:03:d4:5f:e1:a6:a8:d0:b3:3f:62:48:
be:9b:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:10 2025 by rpki-client