Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json)
Hash identifier: IsgF4RbSsftxkM1dvHh6fPOsugBcJkkNjg80EiTjWyE=
Subject key identifier: C4:F1:93:35:75:6C:86:D1:93:44:BC:17:45:86:F3:A4:33:E7:46:E6
Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45
Certificate serial: 01958B4DBFA3A056B83FE1012F5AC406A6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
Manifest number: 08F0
Signing time: Wed 12 Mar 2025 17:01:22 +0000
Manifest this update: Wed 12 Mar 2025 17:01:22 +0000
Manifest next update: Thu 13 Mar 2025 17:01:22 +0000
Files and hashes: 1: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: OgAyfBiSPVwHMKkoPcLbxIKM3KjUAqWecaRtfvJ44/c=)
2: i1vQfq5K6A-H06YMbg-F_fjtfl4.roa (hash: +8kYxsIrdCv4MUOM8YLp4u35KK9tvU6LHvc0dzsNKRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:bf:a3:a0:56:b8:3f:e1:01:2f:5a:c4:06:a6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45
Validity
Not Before: Mar 12 17:01:22 2025 GMT
Not After : Mar 13 17:01:22 2025 GMT
Subject: CN=c4f19335756c86d19344bc174586f3a433e746e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:70:b6:95:7b:49:13:bf:a2:35:b7:53:a8:66:
b2:34:99:bb:24:fd:61:f4:96:38:ed:cb:c6:47:c0:
46:43:b1:ae:e1:6e:ac:c4:8d:07:5d:f3:ff:2d:eb:
77:ad:86:e5:ab:86:73:63:ab:8c:24:e6:35:b8:f3:
7d:17:1c:26:f9:3f:3c:b4:94:2a:45:80:92:4a:ee:
54:24:ef:d5:5d:10:b9:0d:d5:9a:ff:af:bd:b1:97:
09:2e:51:cf:6e:95:a1:fb:4d:54:c1:b3:bc:db:94:
29:ef:ee:02:0f:8b:de:62:c6:7b:0e:5c:38:1c:42:
bf:19:12:c2:44:fe:54:d3:66:cf:aa:21:72:60:b9:
57:6b:82:79:f7:f0:80:a8:02:b9:4b:ab:56:a8:84:
0d:d9:d1:2d:27:55:79:94:05:4a:14:b1:4a:a4:a9:
6b:32:d1:92:2b:ef:91:66:7e:5b:ab:bb:5e:0c:d8:
ec:0a:b3:15:09:49:5b:b9:1c:91:c0:c1:c8:fa:ba:
e7:46:90:bf:8f:87:b9:01:84:1e:d6:37:39:27:af:
4b:08:80:43:57:03:03:a4:6f:22:bd:d9:d5:6e:54:
e4:73:cf:f8:10:6b:c5:f8:c9:e7:22:24:8b:43:e4:
68:85:8e:a1:9b:01:d6:7b:68:96:81:6c:23:d6:36:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F1:93:35:75:6C:86:D1:93:44:BC:17:45:86:F3:A4:33:E7:46:E6
X509v3 Authority Key Identifier:
keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:13:c8:c7:f4:02:bf:30:a0:30:78:5b:22:c5:47:ba:db:f5:
75:e2:82:ff:1b:65:6b:eb:4c:2a:02:56:64:5c:a2:7d:cd:c5:
3f:8b:ea:17:9f:d1:ba:b0:ef:cf:e2:8d:bf:08:2b:50:b0:d1:
36:40:02:26:c1:4c:0d:7e:a3:78:27:41:40:30:3c:54:16:b6:
56:51:da:37:d5:a7:7a:29:01:5c:69:39:58:3b:bc:36:5f:21:
19:89:a0:08:0d:93:6e:f0:20:cf:12:59:ca:1b:22:a0:71:89:
b5:bc:25:52:4a:46:82:9f:b7:ac:41:cd:80:d8:3a:6f:b2:9c:
42:8e:19:69:32:d9:92:c5:5a:20:e9:ed:88:ba:66:25:66:c5:
c3:77:d6:30:13:e4:2d:be:f0:33:44:c1:98:d2:11:e6:0d:74:
1d:d6:70:72:b7:57:97:43:80:e3:aa:1a:42:1d:78:ca:40:0d:
a3:cc:21:ad:90:9c:3c:ba:eb:eb:65:6a:ad:bc:83:4a:54:97:
01:b6:c8:ef:f1:a0:fc:c6:7e:1e:d0:28:12:15:01:b8:8f:71:
65:ab:5b:f3:8d:40:b3:06:7f:8b:23:3f:cc:26:8a:e7:ff:27:
a3:e0:4c:0d:4f:fa:5d:3a:57:72:9b:ec:28:97:f2:65:10:c4:
e6:d8:15:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:52 2025 by rpki-client