Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
File: QZ_Gk449XguSdHsy9tcP2vDlChU.mft (raw, json)
Hash identifier: YMDfPqSFkmzSzq1CNqb8UKB/qE1rB+edGhLGfZAK2ec=
Subject key identifier: B4:C7:44:78:DB:0D:82:09:D2:05:E3:1C:B1:D1:45:AC:C9:11:86:AA
Authority key identifier: 41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15
Certificate issuer: /CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
Certificate serial: 01974EC5196A914AEA0DD98CE2621C038C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
Manifest number: 157A
Signing time: Sun 08 Jun 2025 09:00:29 +0000
Manifest this update: Sun 08 Jun 2025 09:00:29 +0000
Manifest next update: Mon 09 Jun 2025 09:00:29 +0000
Files and hashes: 1: QZ_Gk449XguSdHsy9tcP2vDlChU.crl (hash: 0goRGpmtP5ldhK0eQRC2saY+mQvs2Gl5nPf5TtnVhDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:19:6a:91:4a:ea:0d:d9:8c:e2:62:1c:03:8c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
Validity
Not Before: Jun 8 09:00:29 2025 GMT
Not After : Jun 9 09:00:29 2025 GMT
Subject: CN=b4c74478db0d8209d205e31cb1d145acc91186aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:ce:c6:fb:b9:57:a6:a7:d5:88:75:52:e3:
d8:28:50:bc:e9:8b:f5:f3:98:c7:ea:8e:89:9d:d9:
2c:f1:31:e8:77:20:02:d8:bc:4b:f4:f2:6c:48:8c:
11:89:19:66:8f:b9:d2:5c:22:5a:36:1d:b6:c8:a0:
01:d4:d2:56:52:da:4f:d2:e4:22:0b:03:94:46:b2:
b2:26:f4:04:c7:5a:71:e9:87:f5:d5:9a:12:a5:ee:
29:01:e7:60:e3:58:37:7f:5b:88:73:a2:77:7a:71:
ea:6f:5b:c8:0c:bd:7c:3e:c7:78:23:22:a4:d0:4e:
4d:c3:82:79:8a:04:6a:9d:b1:0b:82:c4:ed:ea:97:
80:06:07:97:c3:ef:38:d6:03:d4:94:1a:cb:13:61:
39:e9:58:f6:3c:29:07:b2:37:2c:c3:bb:ff:12:93:
06:b6:24:e8:50:33:b9:e7:04:5a:94:a5:ea:10:60:
49:94:8d:39:08:03:10:16:90:f9:77:3e:58:d8:f9:
33:b6:0b:5e:af:d9:e8:05:73:b5:d6:66:67:00:75:
87:5c:3e:ec:07:22:6b:6b:00:99:1d:2e:9a:ff:3b:
c9:5b:98:96:10:a6:af:15:b1:3c:8d:f1:01:60:89:
c6:95:be:52:49:af:5f:de:44:4c:bd:95:a9:1d:51:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C7:44:78:DB:0D:82:09:D2:05:E3:1C:B1:D1:45:AC:C9:11:86:AA
X509v3 Authority Key Identifier:
keyid:41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:89:40:32:19:c6:26:cd:d9:96:9e:c5:26:e1:14:e3:df:83:
76:24:fc:b3:6a:26:bb:16:9c:00:24:30:19:77:12:ca:ce:9c:
dc:22:f5:a2:1c:4f:1b:ee:dc:b9:09:61:c2:87:10:46:1f:b5:
27:28:f5:28:ee:06:c0:c3:56:88:26:f1:0e:2e:fe:2d:92:43:
59:11:d4:b5:bf:80:1d:9e:d3:a6:53:4e:d0:e8:27:5f:3c:5e:
c8:7e:bf:74:22:07:08:20:96:e9:32:0d:cc:a7:96:b3:3f:c3:
fa:e0:3b:b1:36:a2:28:fa:5c:b5:62:49:b9:5e:3b:8d:f2:8c:
1e:f9:1e:1f:19:d8:df:1d:81:ba:c9:80:42:14:1e:4d:9a:54:
03:1e:10:f1:87:8d:f8:b0:0a:d5:b2:5e:b5:62:bc:f6:df:ac:
25:0d:3f:e2:1a:01:63:db:a3:91:58:f5:3e:4a:bd:3b:f6:b1:
06:b4:45:d1:9a:62:60:ee:cc:8b:14:bb:fe:b7:07:d0:4f:26:
22:20:51:c8:76:92:1d:cd:10:a8:c5:4c:36:80:7c:3d:59:68:
0c:ca:44:58:81:a9:0a:dc:d4:3c:85:bc:65:db:ef:0c:ff:75:
52:6b:ca:c2:55:cc:f0:96:0d:cb:12:2b:8b:9c:2d:0d:48:06:
f8:83:81:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:24:47 2025 by rpki-client