Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
File: Qbib03Ns5PAIRzll_a5AdFZ82gM.mft (raw, json)
Hash identifier: sIq2Pgsk3YkERBz3+ZNaA9h2AgCZOaA526ZyTgILsks=
Subject key identifier: CD:BC:AC:58:59:25:CA:D8:11:99:F4:22:DB:FB:5A:39:B6:F3:C6:9A
Authority key identifier: 41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
Certificate issuer: /CN=41b89bd3736ce4f008473965fdae4074567cda03
Certificate serial: 01965349A3830848C9623221F9A2DEB0E785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
Manifest number: 0A74
Signing time: Sun 20 Apr 2025 13:00:56 +0000
Manifest this update: Sun 20 Apr 2025 13:00:56 +0000
Manifest next update: Mon 21 Apr 2025 13:00:56 +0000
Files and hashes: 1: Qbib03Ns5PAIRzll_a5AdFZ82gM.crl (hash: 1fLkhcjsimCcJztkOqzkMDy1x5oJb9Vg2NlgqMgNJkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:a3:83:08:48:c9:62:32:21:f9:a2:de:b0:e7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b89bd3736ce4f008473965fdae4074567cda03
Validity
Not Before: Apr 20 13:00:56 2025 GMT
Not After : Apr 21 13:00:56 2025 GMT
Subject: CN=cdbcac585925cad81199f422dbfb5a39b6f3c69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:b5:68:36:45:ee:b0:8f:1c:16:5c:0d:fb:
d1:9a:58:d7:c7:28:7b:f2:9c:2e:90:05:31:a6:23:
58:db:04:93:ef:0b:cd:9d:b8:17:29:8b:9c:03:b7:
da:4e:08:01:f5:8b:b8:8d:e7:33:1d:af:72:48:6e:
35:ae:2e:35:94:0e:a6:6d:62:d8:36:c7:bd:e3:23:
08:7a:b4:64:f6:7c:b9:9e:5f:8d:32:aa:8f:77:be:
49:2f:cc:5a:ac:5e:28:7f:1c:38:42:bd:bd:d7:8d:
85:4a:57:cb:6c:3f:48:74:ad:da:4b:0c:fb:fa:67:
82:0f:62:5d:0d:e2:ac:4f:57:4b:a8:1c:27:f3:d9:
e4:15:ea:46:2c:3d:5e:d3:48:81:92:86:51:45:20:
db:d5:8e:6f:e1:32:a2:02:2e:9a:7e:9c:82:5f:d7:
dc:02:47:26:f7:bb:87:c7:c8:15:88:0b:a3:de:36:
47:84:cb:7b:7b:8f:4d:52:eb:b3:75:c2:4d:9d:ed:
b4:42:e2:09:53:68:5c:72:57:19:b7:05:b3:56:dd:
6b:d7:56:53:f8:98:cc:05:cb:7a:79:1a:ad:a7:a2:
ce:4d:e0:f1:d0:5d:70:ef:eb:d8:9c:17:95:94:7a:
61:0e:fe:a3:72:c5:8f:ee:3e:88:b9:a5:c3:4b:69:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BC:AC:58:59:25:CA:D8:11:99:F4:22:DB:FB:5A:39:B6:F3:C6:9A
X509v3 Authority Key Identifier:
keyid:41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:48:3d:c1:8b:6c:46:e5:5b:40:d0:ec:59:f3:48:5c:55:b1:
21:4c:90:0f:d0:9d:94:fb:cb:a5:ca:42:c7:94:e3:22:82:59:
a0:20:59:0e:49:f1:f5:92:76:3d:80:71:6e:fc:90:52:9d:b7:
b9:e5:e1:e8:82:71:0e:e5:ab:e8:24:c1:e3:82:c4:9a:96:bc:
ed:ff:bd:08:a3:24:20:d5:e5:7a:ac:6b:e2:5b:a5:9f:39:7d:
bc:17:be:5a:24:4e:e6:43:8a:bd:2e:77:5f:68:ad:8d:0f:0f:
aa:ef:1e:d2:c8:dd:e1:8e:57:9b:69:3e:ff:95:08:9d:24:fb:
30:39:98:68:e6:0d:90:67:ce:f9:2a:37:06:c4:03:89:64:83:
ce:55:35:11:a8:07:ed:75:ab:bc:7a:0f:d2:e4:d3:7b:64:e1:
f9:51:d5:fa:4b:b6:71:24:05:51:c1:da:09:bb:87:f9:9a:0a:
f8:6f:73:14:3c:ce:5a:bf:12:cd:e3:73:2c:2b:c1:3b:1c:3f:
3e:d5:3e:f7:5c:73:04:f2:33:c9:5f:43:7d:b5:20:34:04:8c:
e5:ff:6d:85:61:83:81:e9:56:3d:29:70:4e:68:30:a7:0b:00:
f8:e9:0a:a9:1d:ed:e6:0c:3c:c7:ec:11:ec:9d:cf:64:54:19:
eb:dc:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:22:35 2025 by rpki-client