Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File: Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier: s1i7W8kRKILqRcJ5125NLPJ3zE7fqhStzzZfp8J5aBc=
Subject key identifier: 91:C1:6B:44:20:90:9F:BD:F0:7F:58:46:56:75:A0:0C:B4:E7:59:06
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer: /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial: 01976D3E9F3B24F45266851C4B7C49B72F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 07:01:49 +0000
Manifest this update: Sat 14 Jun 2025 07:01:49 +0000
Manifest next update: Sun 15 Jun 2025 07:01:49 +0000
Files and hashes: 1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: mXsjF/4dNej7PLyjfRACT0T3ht3NL2xpgc08HgvUPJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:9f:3b:24:f4:52:66:85:1c:4b:7c:49:b7:2f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Validity
Not Before: Jun 14 07:01:49 2025 GMT
Not After : Jun 15 07:01:49 2025 GMT
Subject: CN=91c16b4420909fbdf07f58465675a00cb4e75906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:1c:fd:9a:d2:05:8b:99:56:68:e6:76:67:
7e:b0:24:67:2b:cd:34:0a:9e:7d:cb:d8:90:d8:ed:
71:07:fa:66:0a:77:f1:8a:10:0e:83:07:bf:63:94:
11:50:41:9e:52:92:2e:0e:6f:67:09:03:a9:57:0b:
de:aa:55:7c:2b:ce:6d:91:3a:09:b0:2b:5e:75:aa:
e9:a5:38:80:d6:3d:a7:3f:35:28:e7:a9:c9:96:bf:
2d:d2:c5:ba:d8:f1:68:33:2c:d5:06:f1:40:de:55:
a2:04:8f:75:2c:48:f1:cc:15:3f:2c:f3:03:a2:a2:
97:3c:c8:53:ef:d3:52:fa:e3:8c:0a:c4:ca:a7:1d:
bf:23:54:44:02:15:a6:b0:2d:64:99:68:7c:76:30:
3e:03:55:03:00:01:7e:7a:7f:6d:8b:b0:61:d7:86:
9d:2a:de:aa:37:df:96:d8:17:88:d8:4e:2a:bc:ae:
8b:ee:7c:bc:43:0d:e3:57:7b:60:eb:93:40:96:44:
08:ab:cc:45:b4:2d:b5:aa:91:c7:4b:f4:f2:91:77:
13:ac:fe:c5:9b:16:c3:59:26:d9:c1:83:f3:fe:0f:
db:c2:23:f8:cc:ff:5a:57:da:5a:f5:6e:de:d8:25:
7b:13:5e:37:45:2d:13:dd:3e:25:ef:e8:f7:0a:33:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C1:6B:44:20:90:9F:BD:F0:7F:58:46:56:75:A0:0C:B4:E7:59:06
X509v3 Authority Key Identifier:
keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:74:3c:41:94:56:b2:cf:32:0f:1b:1c:2d:d2:18:97:29:17:
81:9c:0a:8b:04:c0:ea:92:fa:32:a5:00:73:6d:51:5c:e6:01:
14:13:bf:51:29:fc:75:3d:6f:cc:10:84:72:09:74:21:07:53:
28:38:eb:47:72:30:a5:42:89:27:74:af:cb:ec:e3:de:d8:f6:
a7:f6:87:80:da:e9:ae:d0:4b:b1:a5:ca:64:a1:97:60:75:8c:
f8:03:c9:76:97:49:e2:34:a7:fd:4a:70:7b:a1:36:19:b8:fe:
ee:aa:46:01:52:a1:0f:35:0d:6f:b0:7b:f7:d0:61:c7:4e:92:
93:fc:40:4b:20:ce:85:68:89:05:81:ae:de:a8:14:bf:54:8b:
e5:52:0a:e4:fd:00:f8:54:c5:2c:23:4a:b4:5a:3c:49:e5:18:
67:7a:3a:d2:87:11:49:a9:f4:6d:9f:38:f1:5c:fc:1f:3c:4b:
9c:36:1c:47:8a:04:4d:0d:aa:e1:f0:5b:aa:07:72:b7:8b:bd:
31:97:1c:e1:2d:58:81:0c:c3:09:01:10:7d:f5:57:4b:bb:6d:
0b:6b:ba:63:b1:01:5a:20:11:6e:b5:5c:74:87:d2:4e:39:cc:
57:60:1a:e3:3a:7a:4e:c2:3c:b4:5c:65:63:18:7d:1c:7b:64:
5e:c3:22:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:14:14 2025 by rpki-client