Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
File: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft (raw, json)
Hash identifier: EaaeUiDDJJtW7EtjRyOI4GtdL/bGILn/c9pyt2YQS44=
Subject key identifier: 2A:65:02:40:F3:23:4F:AB:80:EF:F1:E1:DA:E9:25:B4:D9:54:F1:60
Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
Certificate issuer: /CN=4309599380c5c59dc06684920b694c3ea6d308a6
Certificate serial: 01964FDA2A7EB8DC57FB3650AEF535BC44C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
Manifest number: 047C
Signing time: Sat 19 Apr 2025 21:00:19 +0000
Manifest this update: Sat 19 Apr 2025 21:00:19 +0000
Manifest next update: Sun 20 Apr 2025 21:00:19 +0000
Files and hashes: 1: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl (hash: yrUvH2rLrcTslaE0zsk3nOekqAqrT6y3K1YDbfEnsVg=)
2: Xk73csD_xLVUcYgv4YpJ9At08iI.roa (hash: cX+hicqcoCtr+jhHeUumSC0JdyUUV0oM4tv+MAaRrss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:2a:7e:b8:dc:57:fb:36:50:ae:f5:35:bc:44:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6
Validity
Not Before: Apr 19 21:00:19 2025 GMT
Not After : Apr 20 21:00:19 2025 GMT
Subject: CN=2a650240f3234fab80eff1e1dae925b4d954f160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:6c:a7:18:0f:ec:57:6c:d3:57:29:86:37:
4c:02:fe:72:ce:50:65:57:82:b2:0b:eb:e2:94:bb:
26:f0:d3:97:7f:97:fc:80:9a:0a:19:4f:21:06:5b:
49:7b:d9:c3:11:cb:53:0d:c2:34:29:f1:9a:e2:d3:
09:ce:4d:76:b1:7f:77:88:77:3c:b9:17:2c:0b:e8:
e8:18:18:56:ae:55:d9:c3:8b:49:02:48:28:f3:67:
e6:7c:64:da:0f:6c:60:80:90:fc:a0:b4:29:7b:84:
bc:bb:54:13:8c:8f:40:07:1b:55:2c:27:f5:af:dc:
53:43:eb:5b:6a:45:5e:47:ef:f0:9c:34:49:f0:6f:
56:de:c3:19:da:4e:77:b8:03:21:da:e9:12:31:86:
b6:42:6a:10:fb:22:4c:7c:b2:00:8b:9d:4f:33:4f:
38:40:6a:73:3c:6f:cc:e1:33:18:0b:2a:44:a8:2a:
58:98:29:b5:45:e2:fc:43:0c:65:96:47:27:ea:aa:
5d:16:87:e7:23:27:85:88:65:eb:0b:71:40:40:51:
fd:b2:5d:2b:1d:8a:4e:ac:a3:0c:da:60:a9:ac:f2:
c2:4e:fd:c3:30:7d:49:01:5b:89:5f:a4:25:2c:c8:
20:27:5a:e0:a9:5a:b3:4d:e9:97:e6:e7:2d:2c:c4:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:65:02:40:F3:23:4F:AB:80:EF:F1:E1:DA:E9:25:B4:D9:54:F1:60
X509v3 Authority Key Identifier:
keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fe:cc:f0:e7:04:ab:1e:43:8f:38:eb:eb:c0:64:74:e3:7f:
13:dc:8a:4c:fa:e8:61:3e:0a:fc:e5:3f:96:18:94:fa:8a:b4:
54:0d:96:f3:f6:bd:31:e6:21:c9:b5:2d:cb:5a:b9:27:10:ce:
e9:76:0f:64:a7:e9:c8:8c:43:82:e3:64:49:7a:e8:91:4d:ba:
e9:31:d6:d2:04:b4:a7:c4:42:d3:ae:ef:dc:13:bc:c2:fa:02:
c1:b3:b3:16:d8:99:6e:97:18:33:a7:ba:3c:cc:f6:17:c1:bd:
84:66:58:d6:8a:6e:23:c5:5b:ba:16:38:47:77:94:ef:24:b3:
0b:77:7e:82:19:8f:82:3b:de:e3:5b:ac:f5:e7:6f:a0:2d:10:
f9:cf:36:e7:05:54:d3:de:58:92:01:53:8a:51:8c:7e:8c:e3:
fd:25:19:af:05:f3:3c:30:15:f9:44:00:56:74:06:80:05:cd:
bf:e6:d5:7b:50:28:bf:1a:49:ad:e5:8b:25:17:2c:f1:1a:77:
5d:e7:a6:d5:0e:c7:14:17:64:21:50:fb:bc:4d:7a:22:6c:f8:
b4:c7:d3:2b:a2:70:96:82:07:ac:ad:4e:22:85:d6:1e:66:07:
4b:6e:b6:11:fb:19:fd:76:a6:91:1a:b6:12:9a:b4:5b:5a:62:
ae:35:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:26 2025 by rpki-client