Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File: Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier: R+jA08hkiMLYg7jfuhg6KvXcdDMOUhVEv7n43rtcnEQ=
Subject key identifier: 47:B9:89:ED:F7:F4:6D:55:D2:39:84:FF:47:F3:90:77:13:FC:60:C6
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer: /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial: 019647B3D5CDC8E0E9FCCF3BF859AAA9978E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number: 14F3
Signing time: Fri 18 Apr 2025 07:01:30 +0000
Manifest this update: Fri 18 Apr 2025 07:01:30 +0000
Manifest next update: Sat 19 Apr 2025 07:01:30 +0000
Files and hashes: 1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: cEIaka82Mfnuq0F+bZvv4RihWmJ7lfZR2gtot3TvN8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:b3:d5:cd:c8:e0:e9:fc:cf:3b:f8:59:aa:a9:97:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Validity
Not Before: Apr 18 07:01:30 2025 GMT
Not After : Apr 19 07:01:30 2025 GMT
Subject: CN=47b989edf7f46d55d23984ff47f3907713fc60c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9d:c0:7f:13:81:2d:62:6e:2e:88:1e:4e:b4:
66:f3:11:58:44:01:f2:e7:5b:6d:5b:93:08:eb:2d:
a3:67:79:8a:39:8b:05:e4:d7:2c:84:c0:47:2e:94:
e4:93:9f:21:1d:db:20:77:16:90:c4:d3:fd:b4:6d:
2d:51:0f:d1:77:86:0c:1c:7e:62:1d:fd:3e:aa:bf:
3d:19:5e:96:94:4b:10:df:a5:43:be:2e:f6:35:c7:
34:03:64:cf:f5:81:75:cf:8e:e0:e2:1a:ba:a0:8e:
87:54:08:88:e8:d3:95:cb:18:ba:d4:a1:39:e4:a1:
43:56:2c:45:92:93:0a:4f:74:65:07:82:3d:8f:c7:
1b:97:84:39:4a:49:e0:72:be:9f:11:10:8d:f9:a8:
be:6c:04:55:b7:3c:f3:95:e7:86:6b:28:43:8e:6d:
b8:ca:3a:2e:00:16:a9:7d:f1:c6:4b:20:19:31:53:
a9:c7:8b:48:7b:f7:23:e9:2e:d1:8f:9b:aa:7d:35:
ab:42:84:cd:32:a1:e4:7e:0c:e8:5a:8a:89:f8:c4:
3f:99:23:92:f9:f9:e6:13:d8:4b:45:1c:32:b3:18:
38:77:a8:06:0e:d9:64:73:76:93:53:ca:8b:d2:72:
9d:9d:b3:74:fa:9f:7f:a1:6e:1e:fe:2a:8a:5f:ef:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B9:89:ED:F7:F4:6D:55:D2:39:84:FF:47:F3:90:77:13:FC:60:C6
X509v3 Authority Key Identifier:
keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:97:d4:9c:67:6d:d7:2f:f1:62:cc:e8:d3:e9:b8:00:e4:6d:
51:20:b0:88:dc:16:68:ce:c9:d2:9d:45:08:ef:4a:a7:7c:ca:
ac:d0:f6:14:94:8d:8a:c4:06:b3:cc:0e:d7:c4:05:d4:41:73:
07:1b:d4:9a:ef:92:40:49:2b:66:d0:ce:e8:de:b2:e3:f8:04:
8a:b0:cc:27:32:b4:ba:c7:be:97:e4:34:6d:95:be:8e:85:c8:
22:32:e9:47:2c:e2:cb:03:fa:64:71:b8:0f:c5:22:9a:2e:9e:
2b:b3:44:7f:24:57:0b:53:c4:f1:25:76:6e:90:d3:92:2d:89:
78:b4:64:84:be:fc:89:e0:d4:b0:26:c5:b8:2f:af:e4:a3:99:
5d:9c:20:95:48:aa:a5:ce:eb:e9:d2:56:70:21:f7:10:f9:68:
7b:83:45:8c:bd:99:89:10:e3:6c:07:ee:c1:b5:cc:32:cf:96:
d0:3b:40:8b:68:c2:a5:ba:1f:9b:fa:5a:49:21:88:93:43:f3:
02:fb:3a:d8:ee:35:75:2f:df:51:e2:1a:8a:40:50:79:a2:2f:
40:8a:99:3d:e9:78:7d:c0:90:a3:89:73:f4:08:1a:58:bf:ae:
20:1d:ac:33:fb:98:0a:f1:d3:9d:51:7e:88:e7:16:53:7d:f6:
51:98:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:19:06 2025 by rpki-client