Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
File: QIS7AapYrpSxMg_UvkIT-TFOkFY.mft (raw, json)
Hash identifier: dq8hHxpzCRJbzhZ+yud1vkOLyzfDzHYgGryHXbYY+J8=
Subject key identifier: 03:CE:B1:BB:16:01:EA:F3:4B:51:C3:01:BE:E6:0F:67:20:EA:17:BD
Authority key identifier: 40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
Certificate issuer: /CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Certificate serial: 01958BBBD8F23FD915F5DCE57401407BA501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
Manifest number: 0484
Signing time: Wed 12 Mar 2025 19:01:38 +0000
Manifest this update: Wed 12 Mar 2025 19:01:38 +0000
Manifest next update: Thu 13 Mar 2025 19:01:38 +0000
Files and hashes: 1: QIS7AapYrpSxMg_UvkIT-TFOkFY.crl (hash: dsqC6WKxbPv4NimEftQ54jfUqPNtM4gGv6EkWQUHTHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:d8:f2:3f:d9:15:f5:dc:e5:74:01:40:7b:a5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Validity
Not Before: Mar 12 19:01:38 2025 GMT
Not After : Mar 13 19:01:38 2025 GMT
Subject: CN=03ceb1bb1601eaf34b51c301bee60f6720ea17bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:aa:f8:56:6f:cd:3d:7d:20:10:67:9a:dd:
eb:00:d8:a0:9b:52:ad:46:e8:2a:90:de:6f:0a:52:
11:77:ed:fe:6f:88:b5:bf:12:63:3d:d7:a4:28:53:
31:61:be:97:5c:f8:69:db:04:64:c4:b6:93:8b:40:
64:92:60:79:93:e4:80:d6:c0:71:37:30:e9:40:cd:
36:d5:c2:59:ab:50:a0:a9:6c:6a:f3:ee:18:60:77:
3e:ef:ca:a7:8b:7e:d8:54:90:27:91:c1:7b:77:b5:
19:9c:26:a7:6c:53:c1:3d:f5:be:1b:3c:50:53:9a:
bd:30:d0:0c:0d:4f:50:9c:df:83:21:58:b3:37:82:
35:f5:95:1c:48:6d:6d:da:9d:29:d4:a4:21:4e:8a:
87:e6:72:6d:2a:e7:38:b2:ea:35:66:88:a0:81:0d:
a0:a8:36:5d:03:9b:53:a6:87:f2:c8:bd:31:6d:77:
ed:23:9e:14:cc:90:8e:9f:36:86:82:fb:18:c0:61:
1c:b6:27:e6:46:fd:7a:f1:76:55:ad:bd:09:89:cf:
c1:99:d2:a2:88:37:a0:93:4c:ab:3c:ef:0f:25:22:
e4:17:75:d7:21:a5:f5:49:5e:1b:66:d9:99:75:0b:
db:64:49:2f:fb:14:d6:a2:98:a3:d0:f3:6b:bd:d9:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CE:B1:BB:16:01:EA:F3:4B:51:C3:01:BE:E6:0F:67:20:EA:17:BD
X509v3 Authority Key Identifier:
keyid:40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:54:18:5a:86:cb:4f:41:cc:1f:fb:17:0b:b8:e6:7f:0e:92:
cd:46:48:47:66:8c:51:27:08:39:c5:f3:16:20:40:30:f1:3f:
e7:f6:5e:30:cb:7c:6c:54:8a:18:9f:b9:04:b7:e5:c0:08:8e:
fd:30:6f:1b:48:05:e7:06:33:18:21:6a:97:1b:73:96:85:8f:
3f:85:57:40:3e:f4:ca:6a:1d:83:fb:3f:a3:7c:6b:97:9a:1e:
08:dc:bf:f8:d5:6a:71:50:79:8b:55:e3:89:74:b1:71:b0:44:
66:66:32:06:dd:ad:95:0f:5b:ed:01:2d:a5:be:e9:7d:11:0b:
c2:3a:91:62:77:27:26:41:07:24:ae:99:98:fe:82:a8:11:08:
0f:fe:78:ec:4b:85:35:c7:f7:71:47:1b:d9:da:46:b8:a9:09:
da:56:b0:5d:fe:d7:22:07:e7:6f:2a:d1:86:4e:66:5d:82:0f:
be:39:a7:2a:98:20:a9:dd:fb:f0:d6:51:90:8a:97:b0:81:f4:
ee:06:c9:6e:44:78:40:0a:c5:55:5f:3f:2c:61:b1:08:0f:d8:
1d:6e:2d:7a:75:ed:83:de:89:71:5b:93:d5:e1:13:ba:08:7c:
8e:94:a7:3b:7a:b4:9f:5b:b7:4d:38:33:ae:b5:df:63:55:30:
87:30:4b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:46 2025 by rpki-client