Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: vKst+AUDOrq9g3d0ZYPVBMa4WG19TIlgbtW4RaSk2tM=
Subject key identifier: 24:95:2C:AF:F4:03:30:C2:ED:C8:0E:BD:D2:A6:5A:E3:CE:23:8D:25
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 01963F8BC2A7B8DBD05E287DB74F1F890962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 1147
Signing time: Wed 16 Apr 2025 17:00:45 +0000
Manifest this update: Wed 16 Apr 2025 17:00:45 +0000
Manifest next update: Thu 17 Apr 2025 17:00:45 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: LnZ7B/OEPtvWaRaljNkCpVCJQM3kkNtIwCCeQVffSDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:c2:a7:b8:db:d0:5e:28:7d:b7:4f:1f:89:09:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Apr 16 17:00:45 2025 GMT
Not After : Apr 17 17:00:45 2025 GMT
Subject: CN=24952caff40330c2edc80ebdd2a65ae3ce238d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:30:42:15:fa:31:62:d2:d9:9b:b8:36:63:89:
29:f3:f7:21:a2:3b:be:ab:78:d4:4c:99:27:af:b0:
8f:f1:49:48:94:45:b5:b4:d8:5c:2a:7e:d6:56:4c:
80:7b:79:e9:7b:e3:12:2b:5f:06:b4:74:7a:ec:33:
3d:ac:3a:fa:db:65:f9:7c:d8:05:fe:c2:5c:f8:1a:
6e:83:f5:e0:63:8e:38:2b:e4:64:5d:bd:3a:e6:bd:
4c:de:e5:af:a0:e2:64:d3:ed:3b:ec:a3:6f:08:e4:
d2:8a:10:95:ee:56:79:c5:ab:f2:79:e7:cc:83:8b:
99:ee:f9:9a:17:b8:f7:ac:a6:56:dd:42:15:0f:60:
fa:98:f8:c8:58:35:01:ab:c6:98:48:0b:00:49:57:
89:ba:29:d7:9a:f7:88:bf:f0:ab:91:32:63:50:71:
a5:6c:17:47:2c:eb:14:e6:4f:54:59:3e:df:f1:0f:
36:e0:17:16:69:dc:07:38:01:f9:5f:12:97:e1:3f:
06:45:60:de:44:2a:c1:07:a4:b3:ed:17:c7:00:28:
59:10:3f:58:04:b5:3d:94:22:52:0f:9c:75:3a:2a:
10:2b:fa:5d:44:d0:94:78:02:5f:33:d0:e6:2b:f4:
11:07:03:e6:6e:ce:1c:43:89:af:fd:bd:e7:f2:9e:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:95:2C:AF:F4:03:30:C2:ED:C8:0E:BD:D2:A6:5A:E3:CE:23:8D:25
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d6:90:40:ce:ca:2c:ae:e9:9c:a9:4a:bc:64:04:46:40:a9:
05:f0:cc:50:de:5c:72:4d:21:bd:ff:72:21:c1:25:36:e9:e2:
09:cb:3c:1c:83:33:e7:45:df:91:3c:59:0f:88:a2:91:81:1f:
02:87:8d:97:b8:e5:45:97:60:91:ce:12:d4:37:fe:f7:e1:67:
84:a0:43:c6:21:f9:cc:34:48:e3:a4:d1:b8:eb:00:0a:56:ca:
f5:f8:ed:52:da:cf:44:85:06:88:17:31:59:c2:1a:25:a3:2a:
57:45:c7:9e:4e:9d:35:bd:b0:52:30:c4:6b:46:15:6e:7a:69:
a6:3f:bf:57:49:fb:fa:d3:d5:13:9e:d4:a1:70:1a:53:df:c7:
a7:4b:19:f4:24:7f:24:ac:ed:7e:26:6e:49:e5:c7:0e:5f:b2:
45:6b:9f:bf:bf:b5:7e:73:86:48:37:94:87:f6:fd:b2:4e:a3:
c4:8a:fc:f3:ab:73:ef:56:d4:46:07:88:cb:2e:8a:10:60:2e:
57:22:86:df:70:9a:7a:7b:5e:3e:df:b0:24:ae:59:22:00:10:
12:e8:e0:8f:47:f8:c5:ce:7e:d6:0f:18:20:1f:f7:b0:11:cf:
be:4a:b9:b0:b6:45:ac:21:75:db:75:60:fe:bc:2d:2e:a5:3b:
f2:38:27:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:19:11 2025 by rpki-client