Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
File: qfCQLHsw_sPg3PXyO_7fUBgjQps.mft (raw, json)
Hash identifier: z/LdcLcHn0UIshJnTUn5IjRCfVwMXPdJV80kaMHYOHQ=
Subject key identifier: 1D:50:34:B5:9A:2A:E1:E6:07:70:F2:C0:28:8A:3F:4A:41:D4:3C:ED
Authority key identifier: A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
Certificate issuer: /CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Certificate serial: 019653EE9255DF1C7DBB28E6013A908CC4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
Manifest number: 038C
Signing time: Sun 20 Apr 2025 16:01:06 +0000
Manifest this update: Sun 20 Apr 2025 16:01:06 +0000
Manifest next update: Mon 21 Apr 2025 16:01:06 +0000
Files and hashes: 1: qfCQLHsw_sPg3PXyO_7fUBgjQps.crl (hash: CmuZmOX0IqXl+FFxFG54IUiNW6uXK8tI41ros811Hm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:92:55:df:1c:7d:bb:28:e6:01:3a:90:8c:c4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Validity
Not Before: Apr 20 16:01:06 2025 GMT
Not After : Apr 21 16:01:06 2025 GMT
Subject: CN=1d5034b59a2ae1e60770f2c0288a3f4a41d43ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:2c:7d:f8:86:51:bc:ab:f8:64:e9:af:af:
c3:43:61:f4:21:9d:4d:d5:05:14:70:44:86:c3:5b:
c5:ca:b3:cf:e2:20:e4:95:52:70:79:3c:cc:af:1d:
47:9c:11:7f:70:38:9a:15:b6:de:ef:45:be:9a:5b:
6f:1e:d9:5e:47:48:ce:dd:60:33:18:37:ce:95:38:
e4:d7:4a:c9:58:63:19:07:5a:f7:01:db:c0:df:ac:
fd:e7:ea:85:9e:15:b3:68:11:85:55:8b:7d:6b:6b:
9a:8f:7f:1d:ed:58:1c:c7:ea:94:82:e8:a5:93:6c:
8f:ba:e9:92:45:b8:ab:02:00:10:44:f4:19:db:20:
dc:e4:67:79:b1:52:89:c8:e8:8b:cf:2f:33:93:f2:
9e:86:6c:55:7b:df:dc:20:51:cb:1c:93:23:3e:21:
73:2b:02:84:81:96:e7:ce:10:20:07:13:d2:3f:b6:
1c:44:17:47:e4:38:87:33:ac:68:58:93:ee:13:eb:
0d:48:b9:79:eb:df:55:91:b2:7e:7c:f7:d8:84:37:
47:da:7e:c0:65:dd:0e:a4:f5:f4:4b:c0:56:17:40:
9c:1a:1d:18:93:b1:96:6f:92:e3:21:54:68:1d:c3:
e5:52:2d:53:c9:d7:2d:4e:cf:39:03:b2:c4:2c:88:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:50:34:B5:9A:2A:E1:E6:07:70:F2:C0:28:8A:3F:4A:41:D4:3C:ED
X509v3 Authority Key Identifier:
keyid:A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:58:8d:23:1d:aa:f4:21:dc:cc:50:a0:49:ca:39:d8:4f:08:
13:e0:3b:23:8f:91:47:cc:c2:72:ac:02:20:c2:75:3b:d5:6e:
da:84:20:60:c5:c1:c1:bc:a6:6e:c4:50:29:17:ad:3e:ce:02:
85:ae:dc:48:02:85:c4:6b:af:59:01:68:c3:3c:e2:74:6a:97:
68:8d:89:d0:0b:20:ee:41:f8:cd:d2:3e:9f:b7:6f:3a:b7:19:
bf:4f:f4:e6:e0:16:e4:84:0f:d9:ef:84:f7:4b:08:7b:c0:d3:
95:e0:fb:4a:70:b1:94:2e:6f:63:68:8b:e6:c4:6f:9c:8a:bd:
0f:68:78:69:90:20:90:2c:23:70:63:aa:69:9f:5e:61:3a:43:
50:df:9b:d8:ca:bb:c6:94:b4:f6:a4:d1:13:a6:84:84:18:07:
b1:23:be:82:bd:d6:8d:d3:b7:e9:4d:cf:e9:e9:54:72:44:37:
8a:de:bc:50:5e:d1:12:cc:51:70:16:c5:4f:73:68:bd:c7:48:
95:a9:2b:60:f4:9e:6d:8c:63:f3:63:75:f0:ab:b6:a4:5b:09:
38:e0:fa:15:ba:f5:db:25:5c:d8:6f:d0:6c:9f:4a:fc:c7:a1:
c3:e7:56:66:3f:b5:1b:32:bd:fc:cb:e2:85:9f:f8:3b:70:ea:
ce:0e:29:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:11 2025 by rpki-client