Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File: Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier: FTWkg+K75iSMImMkfZjdie6bYOHLVQBwLmujEZfoHbo=
Subject key identifier: 11:C7:94:DC:CF:43:27:DE:E5:15:2F:6C:1B:79:EE:1A:D5:44:73:7F
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer: /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial: 01975DCB81D7A294EA8FB8785E54CF355E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number: 1583
Signing time: Wed 11 Jun 2025 07:01:47 +0000
Manifest this update: Wed 11 Jun 2025 07:01:47 +0000
Manifest next update: Thu 12 Jun 2025 07:01:47 +0000
Files and hashes: 1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: UbZoMweoxX7umWonGB2aOoDy3XonSuEqvGJyidCuN34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:81:d7:a2:94:ea:8f:b8:78:5e:54:cf:35:5e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Validity
Not Before: Jun 11 07:01:47 2025 GMT
Not After : Jun 12 07:01:47 2025 GMT
Subject: CN=11c794dccf4327dee5152f6c1b79ee1ad544737f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:a0:d0:e6:32:0e:e4:5a:b4:bf:bd:b8:ad:
2d:4e:c7:d9:f4:b4:14:e0:4d:8b:d2:2c:81:ba:37:
4b:cd:ae:7a:91:70:79:5e:5c:e3:68:0e:f8:2d:5d:
6e:0f:f1:ef:89:4f:91:9b:c9:6e:03:83:fc:7a:e2:
71:6d:98:98:87:49:6a:86:e8:0c:bc:80:55:93:16:
f9:a7:d4:b6:1f:ac:2a:0c:e3:25:f7:1c:49:11:3f:
f7:e8:11:76:e0:d8:a1:6d:c4:91:90:7a:04:69:a7:
bd:2c:c9:2b:29:d8:7e:9a:34:6c:71:4f:03:93:9a:
cb:fa:d7:f5:8f:80:6f:4d:55:04:08:77:67:e6:07:
5a:aa:07:e4:f5:60:b7:8e:ce:45:0a:33:ca:53:2b:
e9:53:c1:b9:b2:e0:8b:5a:4f:f9:ac:48:32:86:d4:
d4:fe:71:b0:c7:e4:d9:2c:9d:48:b6:38:74:42:0f:
1e:16:ae:b3:cd:d3:31:c8:40:2f:16:17:90:06:30:
4d:88:2a:64:1f:3a:d1:0d:c4:45:a3:ad:fb:53:0f:
1b:c1:0e:b1:08:ba:10:38:94:ae:69:82:9f:ef:14:
27:b8:ad:bf:5b:07:c9:e6:45:c8:2b:3d:47:8d:06:
ec:2a:f1:5b:08:01:c2:e4:db:3d:db:1d:57:6c:9a:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C7:94:DC:CF:43:27:DE:E5:15:2F:6C:1B:79:EE:1A:D5:44:73:7F
X509v3 Authority Key Identifier:
keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fa:75:70:95:56:c7:b2:7c:d7:52:9e:8e:1c:2b:d7:7a:0f:
44:ce:23:84:9c:a1:2e:41:1c:1c:4f:e0:88:e4:7e:4f:f3:a7:
2d:8a:6e:ae:e2:98:2b:b5:ea:8a:b3:cc:d0:80:0d:2d:4b:7a:
9b:bd:70:a7:bd:8d:b8:fc:c7:f9:2a:65:b0:0e:c3:52:a2:70:
23:7f:a2:17:fc:1f:9d:5e:b5:b9:59:fa:51:c9:51:96:ae:2d:
a9:25:61:7b:9f:c9:4f:08:42:88:5b:30:f4:58:38:6d:aa:d7:
8c:66:cc:10:9a:08:09:e8:e1:b0:73:be:9b:f9:81:20:6f:d7:
3f:53:a2:29:0b:f2:d4:01:7c:f6:1f:13:cf:ba:ef:77:32:33:
ad:7b:51:9f:13:af:a5:a0:f9:2e:f0:be:58:a6:74:31:58:85:
68:5a:7e:72:a0:c4:19:b5:e8:d8:4b:e6:69:d4:27:fc:3f:5a:
cf:09:e3:41:00:73:67:21:c4:1b:63:99:01:c5:1e:3c:b6:78:
58:e4:29:ff:79:a3:dc:cc:0a:60:be:e9:6d:b5:28:fc:77:6b:
a2:39:03:65:fb:8c:e2:b2:d3:e4:fb:b6:1b:e6:1d:75:a3:41:
26:58:bd:cd:b8:9b:0b:83:c1:97:eb:31:01:8b:77:cd:b9:e0:
44:08:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:37:36 2025 by rpki-client