Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File: Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier: gBSFATUVrZJXKo9Ny7AIXYZ8CT9B6lwbut7CR0Ivqwg=
Subject key identifier: B7:CA:9F:27:B6:FC:F4:01:BD:7C:C7:63:61:27:17:95:71:45:C4:D7
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer: /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial: 019767734E819891CEC9308BB9C9A7035E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number: 1588
Signing time: Fri 13 Jun 2025 04:01:39 +0000
Manifest this update: Fri 13 Jun 2025 04:01:39 +0000
Manifest next update: Sat 14 Jun 2025 04:01:39 +0000
Files and hashes: 1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: r1OXDyGqjYAd+OYHmR8BqjLeyVaAeXS8yh2CRiMrB/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:73:4e:81:98:91:ce:c9:30:8b:b9:c9:a7:03:5e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Validity
Not Before: Jun 13 04:01:39 2025 GMT
Not After : Jun 14 04:01:39 2025 GMT
Subject: CN=b7ca9f27b6fcf401bd7cc763612717957145c4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:12:8b:dd:21:9c:b5:33:54:a7:de:b6:10:
6b:3b:9c:89:45:57:00:16:53:d3:68:88:20:07:9f:
9a:d6:5a:23:d8:b2:15:e8:fa:de:9c:f5:a2:62:bc:
1c:68:d8:93:28:9e:b1:3d:52:6d:b4:f5:47:69:53:
17:e2:36:90:62:36:d8:18:45:70:81:13:12:27:90:
4b:1c:32:15:d8:15:31:09:4a:a6:46:86:dd:55:0b:
85:37:e6:58:cd:a0:a5:45:32:19:ff:65:fd:e2:b5:
98:a7:63:87:86:93:2e:ab:a6:ff:ca:15:14:3b:fa:
19:7a:3a:15:f6:91:01:2f:d3:d2:e4:c9:4c:0f:9a:
e1:f7:db:25:b4:d5:eb:e8:3d:1c:e9:0c:f8:aa:94:
4a:d6:c1:7a:24:f1:4c:ab:26:16:a0:03:af:b0:e2:
14:41:13:da:2f:e2:4b:9c:83:1d:11:40:f9:92:fd:
41:be:9c:4d:d0:3c:8b:38:f7:f1:41:d8:ff:f8:53:
09:58:77:4d:a8:6c:c6:80:31:3b:b2:8b:a5:89:24:
65:92:4c:c7:6b:4f:6c:eb:6c:07:0c:d8:65:d6:11:
05:b2:bd:35:c2:93:7c:43:f6:38:1d:bf:a2:aa:bb:
94:64:54:0e:14:42:a4:72:bf:63:c4:5c:24:2a:6c:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CA:9F:27:B6:FC:F4:01:BD:7C:C7:63:61:27:17:95:71:45:C4:D7
X509v3 Authority Key Identifier:
keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5a:8d:b7:94:cd:15:6b:e4:18:f3:5e:48:f0:a5:37:60:ae:
74:f3:63:3d:ba:1d:a9:2d:e9:5e:19:8f:06:77:92:3a:a3:21:
f0:43:59:dc:27:58:bf:ba:cc:fa:c9:df:e7:78:a8:23:91:6c:
29:3d:2d:2f:9c:bf:0e:ba:45:a4:60:77:5d:d2:f4:3e:74:19:
06:66:46:c9:47:e0:76:c5:db:a3:f0:4a:ee:7d:29:b4:fc:69:
33:05:d5:d0:a5:12:f7:a5:4b:ce:9d:eb:c8:a9:8b:27:cd:d2:
0a:e5:8f:9a:36:43:72:59:89:33:1b:b3:b4:c9:c7:04:15:6c:
7e:34:53:d0:ab:6d:0e:ae:83:8b:55:68:4e:b6:17:ad:5d:13:
01:40:ff:8a:74:a2:77:e7:9d:c3:1c:47:48:76:82:89:41:e6:
ee:64:8a:11:04:12:b8:b5:c0:e7:89:aa:4d:3d:94:91:df:45:
7b:31:93:17:e4:9a:a5:82:46:ed:8e:8c:a6:b9:2b:70:31:7e:
63:03:16:80:b2:0c:ff:7b:15:29:ee:e8:d7:7c:1d:c3:13:85:
e2:bc:8a:0c:aa:cd:14:c8:68:d8:3f:6e:9f:29:55:21:fa:b0:
61:67:f8:5d:c7:5b:26:81:fa:90:d3:25:f9:bd:87:08:5b:41:
d2:19:1e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:19:09 2025 by rpki-client