Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
File: Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft (raw, json)
Hash identifier: ORpE9eoAYcjNyYHVaeI5mRvfJU6OELwCFAKnvR/SsZY=
Subject key identifier: FA:01:BB:23:7E:96:1C:99:5F:AB:87:C0:47:73:A1:BD:C2:50:5A:C9
Authority key identifier: 42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14
Certificate issuer: /CN=42afd560d513077e339fabfe0ccda90940bdd814
Certificate serial: 01965236490304781ACD9B89892CB3993D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 08:00:11 +0000
Manifest this update: Sun 20 Apr 2025 08:00:11 +0000
Manifest next update: Mon 21 Apr 2025 08:00:11 +0000
Files and hashes: 1: Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl (hash: 4zydyib8hhRjBWx1BGbc0MeTGDrLsm9371Ch7kU1UJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:49:03:04:78:1a:cd:9b:89:89:2c:b3:99:3d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42afd560d513077e339fabfe0ccda90940bdd814
Validity
Not Before: Apr 20 08:00:11 2025 GMT
Not After : Apr 21 08:00:11 2025 GMT
Subject: CN=fa01bb237e961c995fab87c04773a1bdc2505ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:31:0b:30:e4:f0:86:d1:dd:48:20:6f:5b:
eb:48:eb:ec:a4:33:59:32:66:23:cd:ad:10:2d:1d:
7b:79:fa:cf:75:ee:f5:7d:07:7a:c2:2d:56:d7:e0:
9b:ba:d0:72:a5:4f:54:76:22:ae:2a:c3:7f:e9:9a:
1d:c6:8f:2a:8b:f7:56:da:8d:2c:c9:cd:af:da:f6:
22:77:2f:22:bb:21:e5:0f:ab:f7:5f:5b:a7:c2:fd:
51:f8:1a:9c:e6:21:dd:73:be:2a:e9:c8:88:1e:96:
f3:f5:77:cb:75:8a:ce:e8:7d:b0:10:00:d0:d6:41:
ae:d7:1b:48:e9:63:31:7c:78:d7:a5:c7:3a:dc:8b:
e5:16:f1:05:00:b6:3f:fa:3b:11:0f:61:aa:f7:af:
5e:fe:07:63:d6:1c:cf:65:ed:0d:67:03:33:c0:bd:
1f:50:be:cd:2f:5e:8a:fc:98:e3:99:ec:c1:6e:a9:
82:1e:30:a7:0a:bd:58:42:41:89:ac:59:e5:d5:32:
93:34:6d:bf:46:55:fb:64:0f:d8:8b:10:09:de:af:
0f:74:95:37:ea:53:fb:02:22:00:90:1d:36:24:54:
67:e3:2a:12:ea:96:61:22:b6:4e:77:d0:02:fb:57:
2e:c8:89:aa:14:06:ce:53:aa:a5:2a:00:9a:3b:74:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:BB:23:7E:96:1C:99:5F:AB:87:C0:47:73:A1:BD:C2:50:5A:C9
X509v3 Authority Key Identifier:
keyid:42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dd:1b:61:ea:25:e7:7e:fe:4d:70:2f:8f:5b:54:69:d7:b2:
6d:ba:02:fc:0f:10:57:f1:33:4f:95:c8:df:a8:c1:72:64:b5:
e8:66:f9:73:d1:88:5e:3f:81:43:6c:5a:c0:c5:96:f7:0c:3c:
9c:f1:3e:c4:25:d2:6a:c8:ff:b1:29:24:46:68:55:94:fb:e6:
4a:c0:3e:e6:1b:58:c1:40:6a:7f:33:1e:45:77:6b:69:9b:1f:
92:f0:ea:ea:13:03:7d:95:66:3a:0a:aa:a2:fb:b3:b2:ac:59:
50:40:e6:c2:4c:3d:f7:ee:ee:9f:2b:73:b5:3a:d2:28:93:dd:
9f:f7:b9:61:17:c8:1e:6b:f4:2b:07:42:5b:15:ea:4a:80:2e:
8d:38:17:d2:30:44:14:76:7e:77:4a:08:d7:ec:ee:40:08:49:
d5:2a:90:d7:2a:7d:4a:eb:ae:e8:52:cf:23:fd:d7:31:85:ce:
99:6e:b5:29:1c:15:a3:ff:82:94:53:3d:b5:84:70:e5:f3:5c:
e8:e7:09:2d:c5:d7:9d:39:f9:77:66:19:ae:ca:3b:a9:97:aa:
ed:aa:51:c1:f0:d2:00:c0:0e:44:96:66:3b:00:07:ee:8f:90:
be:36:fc:40:5a:82:62:53:fd:b8:51:2e:1f:6b:67:c7:05:a4:
72:7a:a9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:18 2025 by rpki-client