Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: TlZZlN3MX590V/ipm51oFqamaLdeigIleNGYVihGZpc=
Subject key identifier: 4F:4E:6C:6B:FC:57:56:8E:70:6B:08:C5:7A:86:15:70:3C:AA:ED:67
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 01965FBBC82BA190A4D792F5560CBBFB66B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 1505
Signing time: Tue 22 Apr 2025 23:01:04 +0000
Manifest this update: Tue 22 Apr 2025 23:01:04 +0000
Manifest next update: Wed 23 Apr 2025 23:01:04 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: uo+WRoJXdw615/3hu2LA61sN8THks4MhlMrr/iftzrk=)
2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:bb:c8:2b:a1:90:a4:d7:92:f5:56:0c:bb:fb:66:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Apr 22 23:01:04 2025 GMT
Not After : Apr 23 23:01:04 2025 GMT
Subject: CN=4f4e6c6bfc57568e706b08c57a8615703caaed67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:12:b1:61:9b:b9:98:65:41:95:87:e4:1b:
88:db:09:e8:bf:43:ca:65:f0:3a:d1:61:5e:8f:0a:
c4:91:54:00:c4:09:ec:1d:27:9a:53:0b:b6:68:14:
6a:4f:4f:8a:0c:a9:95:83:9b:23:9d:54:54:1f:18:
3f:26:91:f9:db:59:f9:ff:e0:15:e5:91:44:f2:bc:
78:65:93:7f:cc:4a:10:ac:5c:33:0d:c2:06:48:01:
0d:32:e3:56:9f:df:21:c1:6c:53:71:08:64:06:64:
20:62:24:c3:2c:7d:30:91:7a:1a:c2:c7:a5:b1:4f:
49:74:b0:cd:b8:09:ed:31:c4:79:91:65:8c:66:1f:
07:5e:67:bf:d5:48:4d:f6:63:25:2c:47:45:db:54:
a7:c4:6e:0c:3d:d8:15:85:29:6b:db:17:eb:bf:c0:
01:39:41:2a:27:fd:a3:bd:b5:70:16:75:e7:7b:eb:
d0:fe:e6:f0:a4:80:c4:3a:0c:22:98:9a:9e:14:25:
45:9a:37:1f:f3:9f:86:37:67:e7:cc:52:b3:9c:32:
7c:c2:ad:28:60:58:b7:f9:01:ac:8e:81:6b:58:ff:
e8:62:66:b8:0f:9e:67:f9:56:08:48:65:41:39:3c:
37:a3:7b:bb:e7:83:87:b2:64:9c:06:92:7c:de:b1:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4E:6C:6B:FC:57:56:8E:70:6B:08:C5:7A:86:15:70:3C:AA:ED:67
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ad:43:d3:fb:66:04:68:39:e5:69:72:76:ea:9c:55:d6:b1:
20:09:99:ad:b8:ba:9e:f0:1e:14:4a:fd:c1:e6:d6:7a:2f:55:
9f:c0:46:02:1a:ec:7b:2c:87:75:05:ae:73:72:51:e9:c7:85:
38:3c:43:c1:51:78:a8:0a:38:29:84:55:81:1b:9b:cd:81:dd:
9a:d7:60:b9:56:40:3d:9d:00:97:28:22:c5:00:fe:c2:ef:3d:
06:53:be:99:90:1c:97:ce:cc:94:94:67:0c:53:e9:8b:66:ed:
00:22:31:3a:40:02:43:9c:1c:2c:44:d1:1b:b7:dd:0f:73:61:
eb:ca:83:d0:1a:01:3b:7d:2d:6c:ec:ec:a5:b6:f0:70:cf:02:
df:3c:e4:06:8d:87:cf:2a:c8:7e:af:bc:4c:14:92:84:f5:ef:
c4:4b:77:42:0a:db:60:74:c7:67:47:c6:eb:ec:d3:6c:74:55:
2d:8b:3c:b8:0e:5e:0d:8b:66:87:8c:35:29:07:bc:f4:f6:5d:
ec:fd:9d:51:f8:a3:95:82:1e:48:76:87:04:be:b2:93:76:32:
5d:06:82:2b:e6:a2:74:61:fe:64:29:dc:15:38:77:2f:43:96:
d0:c0:ce:2c:18:85:8c:90:40:e2:34:c8:d5:85:02:05:f9:0b:
2c:cf:d2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:39:04 2025 by rpki-client