Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File: Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier: bkW1LAcS0oDNVAGduYd62mp9rzJDosnPk3ff56R7d6c=
Subject key identifier: 29:0A:4A:11:B4:5B:16:99:44:91:0E:E1:44:B0:AC:F9:79:FA:56:37
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer: /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial: 019759EDD41CA1D8C60F1ABCAE812363388F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number: 1581
Signing time: Tue 10 Jun 2025 13:00:47 +0000
Manifest this update: Tue 10 Jun 2025 13:00:47 +0000
Manifest next update: Wed 11 Jun 2025 13:00:47 +0000
Files and hashes: 1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: CtStuXcOf/olRAzfWbsI0U2e3sFDuLOpM/Mp9ThDcNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ed:d4:1c:a1:d8:c6:0f:1a:bc:ae:81:23:63:38:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Validity
Not Before: Jun 10 13:00:47 2025 GMT
Not After : Jun 11 13:00:47 2025 GMT
Subject: CN=290a4a11b45b169944910ee144b0acf979fa5637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:6e:7d:6f:4f:fd:fb:b3:12:3e:52:af:c8:
3b:b4:22:4f:00:34:81:f9:6a:a7:80:f1:61:4d:e8:
12:f5:e4:13:59:7e:72:3c:1e:17:b4:d2:3e:6a:c5:
82:8e:bc:7c:06:cf:e7:91:1f:b1:aa:75:e7:1e:04:
bc:a9:f7:f3:39:3a:bc:19:c2:40:37:dd:6b:d1:88:
d7:04:c0:e4:cd:ef:58:57:b0:e0:c7:a2:ff:f2:ad:
47:f7:2a:79:e2:e9:e9:af:39:07:a8:1e:85:68:6d:
10:1f:76:0d:70:9f:30:1e:3b:2c:89:e3:c9:2f:b8:
f3:c9:60:41:9b:15:e8:63:be:ce:b4:90:62:36:ff:
cc:26:8c:d7:7b:6e:09:e5:45:7f:e4:b7:09:72:ec:
85:7a:d6:cd:17:17:9c:62:77:c9:84:ec:b4:36:8c:
7c:17:f7:7c:e8:f4:64:6e:1c:47:ce:3d:ec:0e:c6:
b0:4b:8b:3a:1f:6e:ea:fd:2d:aa:97:69:1e:a8:01:
ed:55:80:bc:88:6b:fd:0c:4f:85:4d:e9:38:54:6f:
ad:9c:81:b6:75:be:91:22:c1:37:4a:fd:27:85:3c:
32:0e:81:4c:7c:11:5d:25:93:69:2e:2c:ae:08:34:
ea:74:c1:11:e0:9b:eb:58:3d:ac:05:b3:41:86:6a:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0A:4A:11:B4:5B:16:99:44:91:0E:E1:44:B0:AC:F9:79:FA:56:37
X509v3 Authority Key Identifier:
keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:61:7a:4c:b8:70:70:2b:1d:b7:92:31:2c:4c:3f:5b:af:61:
72:6a:24:92:cb:e3:2b:87:f8:3d:f5:cb:37:d3:a9:96:ce:25:
39:fa:cb:9a:d6:c6:e3:54:0e:b3:63:f6:c0:e8:b3:54:87:e7:
ee:00:1f:84:66:e4:7f:9b:11:a2:33:c8:00:b9:54:c2:7b:f0:
61:eb:ff:bb:21:c1:5d:60:d5:6f:5d:3c:58:52:fa:fd:ea:81:
86:ce:22:4b:5a:af:22:20:6e:6e:00:3f:80:a7:33:f8:a4:bb:
0d:4d:65:bb:85:9e:c5:4b:c4:89:47:d7:5f:49:17:d6:a6:7a:
8e:f0:4e:41:a7:08:9c:5d:b8:62:a7:8f:24:bd:44:a7:4e:30:
aa:b6:6c:1e:3f:9e:9c:db:6c:cb:94:fc:1c:37:74:fb:d2:37:
10:f4:f3:5e:c7:3b:cb:18:76:17:04:12:e4:50:91:e0:81:2a:
8a:9e:05:dc:8d:d8:79:a0:44:dd:5c:76:80:ab:27:3e:46:97:
2a:d9:9e:24:65:80:08:41:b7:6d:1d:00:82:a1:a4:c8:ad:db:
cc:1b:36:bc:3b:a0:8d:b7:ff:6d:7b:27:e4:f0:e1:9a:7b:72:
2f:ef:79:e6:32:db:be:65:c3:0c:69:25:ab:b3:e8:80:cd:a9:
67:5e:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:00:07 2025 by rpki-client