Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
File: QIS7AapYrpSxMg_UvkIT-TFOkFY.mft (raw, json)
Hash identifier: iiAysM24RB1ExOhsUa52bPtIrsvxCReI5JTqZ+OhyGM=
Subject key identifier: 1A:80:68:AF:D9:58:34:18:AC:67:B4:45:D6:4F:65:61:11:35:C0:C8
Authority key identifier: 40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
Certificate issuer: /CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Certificate serial: 019745F8FEA7EEAE9425EE188804E9ABA01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
Manifest number: 0569
Signing time: Fri 06 Jun 2025 16:00:35 +0000
Manifest this update: Fri 06 Jun 2025 16:00:35 +0000
Manifest next update: Sat 07 Jun 2025 16:00:35 +0000
Files and hashes: 1: QIS7AapYrpSxMg_UvkIT-TFOkFY.crl (hash: KAEsaaqAsdYmOVEnqh4vXV/0a+3oLhP/x0+Yq7B3tSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:fe:a7:ee:ae:94:25:ee:18:88:04:e9:ab:a0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Validity
Not Before: Jun 6 16:00:35 2025 GMT
Not After : Jun 7 16:00:35 2025 GMT
Subject: CN=1a8068afd9583418ac67b445d64f65611135c0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:b6:89:ac:79:eb:76:d3:db:52:38:0b:5b:
3f:38:fc:44:4d:f8:eb:95:4d:82:b7:5f:5b:73:14:
1d:13:53:e2:a6:83:10:89:6a:a1:a6:17:c9:ac:30:
e8:5a:c6:ce:26:96:68:a4:0a:04:09:d3:5a:19:43:
93:35:7b:07:ea:8e:a7:1a:d0:5f:65:9f:ad:52:c3:
63:d7:f1:02:54:7e:8b:7b:63:01:ce:91:fc:cd:bf:
2f:83:5f:44:5d:25:cd:25:c7:b4:31:46:c3:58:1f:
eb:14:5c:c7:07:e7:b4:1b:35:49:f6:a6:3c:3b:09:
49:1e:b2:4e:30:31:8f:b8:dd:10:82:32:ca:f3:cb:
cb:57:24:82:38:72:65:66:bd:84:4e:11:9d:c4:c3:
fc:f6:89:1f:b8:9d:8f:05:65:6d:00:6e:76:d9:81:
8c:e0:b5:33:c9:e7:b3:0a:39:40:db:61:66:82:82:
05:fc:e0:c3:48:13:7e:74:19:86:0e:80:b2:c2:88:
50:57:69:1a:00:b8:d3:d9:8a:6c:fe:4f:df:a9:90:
32:60:e1:97:12:f0:30:6b:45:a8:74:b8:e3:69:ec:
e2:53:8f:fb:12:35:92:3c:8f:a3:39:39:94:6c:c0:
50:80:44:ac:16:8a:46:b2:76:73:62:8f:2f:fb:c8:
fb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:80:68:AF:D9:58:34:18:AC:67:B4:45:D6:4F:65:61:11:35:C0:C8
X509v3 Authority Key Identifier:
keyid:40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e8:e1:b1:0b:92:ce:f1:38:0f:30:00:eb:53:ff:b3:7b:97:
1d:6e:1a:32:ac:17:fa:0a:da:f9:4c:60:b8:92:17:c6:28:d0:
08:f2:b9:91:f6:fc:29:38:25:8f:ca:c5:86:14:98:99:d3:5c:
b8:b5:bb:70:d7:48:91:2b:cb:1f:9a:17:6e:8f:af:38:a0:ea:
1f:d0:17:7c:e5:60:22:49:bb:eb:f1:b1:c7:09:48:7b:80:7e:
e3:bf:ff:79:59:bd:66:f9:13:5d:90:ab:90:3d:0f:1f:38:51:
2b:6b:70:49:e5:db:15:5c:5a:ff:f3:8e:6e:93:3e:f5:2a:b4:
4c:ca:32:ed:14:23:b6:b5:4b:70:04:d8:c3:70:a0:38:ba:dc:
1e:11:e6:58:ab:8c:b5:a8:a0:21:be:61:28:48:b6:13:bf:bf:
9b:ff:74:3e:0a:22:c8:be:76:ac:5c:b2:42:3f:04:d5:ba:15:
60:51:c6:22:05:5d:11:68:51:1e:fe:9c:20:3a:84:36:a3:56:
1c:13:97:94:94:18:fb:24:45:39:b9:92:c8:b1:1a:34:ca:19:
e8:42:36:83:de:d7:b2:aa:75:e6:95:3f:af:3a:43:a7:8f:65:
48:9e:2d:4b:73:02:e9:9b:83:61:a6:1e:3a:07:d4:67:94:4d:
f9:9d:67:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:59:02 2025 by rpki-client