Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
File: qxSu-APVDXALuYUq6LsrtAkmFqU.mft (raw, json)
Hash identifier: m1jZdhskSbecYMRn0n1MxvZxqGk8QHhSG7KkduScLvA=
Subject key identifier: 39:E4:98:92:4D:A7:8A:25:08:99:01:42:25:F6:07:7C:75:14:23:8B
Authority key identifier: AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
Certificate issuer: /CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Certificate serial: 01976F9A57E691EC3352ED42B09106F54BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
Manifest number: 0CA8
Signing time: Sat 14 Jun 2025 18:01:15 +0000
Manifest this update: Sat 14 Jun 2025 18:01:15 +0000
Manifest next update: Sun 15 Jun 2025 18:01:15 +0000
Files and hashes: 1: qxSu-APVDXALuYUq6LsrtAkmFqU.crl (hash: Y0vxey2frQ0Trs3SaoSX+kuGwbIDxj3N+/f+TsxO0MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:57:e6:91:ec:33:52:ed:42:b0:91:06:f5:4b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Validity
Not Before: Jun 14 18:01:15 2025 GMT
Not After : Jun 15 18:01:15 2025 GMT
Subject: CN=39e498924da78a250899014225f6077c7514238b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:42:05:09:31:b1:b5:96:a5:29:14:d7:5b:
a4:49:ab:7f:7a:53:13:66:7a:f4:f2:3b:09:c4:3a:
93:34:82:4f:ae:93:1d:e9:aa:e7:58:a3:78:46:f5:
ae:ac:5b:df:75:7a:a8:99:e3:a3:87:1e:51:06:8f:
8c:06:ce:1b:83:1b:c7:50:ad:83:b8:c2:a8:dc:fa:
63:14:8c:0d:ce:07:cd:7b:bf:60:99:2c:f5:3f:62:
2e:0f:e1:39:9c:26:eb:66:9f:1e:9b:f5:5f:d8:8b:
71:d7:82:86:dc:b3:ca:c2:86:48:a2:f3:6c:a2:1a:
a7:32:35:22:e1:c2:00:a8:55:b2:05:55:a9:7a:11:
3c:f5:6a:b7:0d:87:aa:a2:8e:c2:51:df:58:9d:bb:
ac:24:b0:84:80:98:6b:64:18:a3:ee:09:4b:88:39:
66:1d:0e:a3:33:23:2e:bc:b3:63:49:71:f8:62:91:
83:2d:91:bc:7b:07:45:29:38:34:6a:2e:d5:12:a3:
37:e6:6d:39:d6:00:0f:f5:aa:f9:7f:52:7d:73:ef:
0f:ad:51:bb:8e:fa:88:f6:c6:9a:5b:38:7a:10:12:
c2:18:74:c1:e7:e3:a0:e0:89:f6:46:fa:3a:c4:0d:
ea:1d:17:03:93:a0:2f:93:a8:67:d5:de:c2:10:d8:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E4:98:92:4D:A7:8A:25:08:99:01:42:25:F6:07:7C:75:14:23:8B
X509v3 Authority Key Identifier:
keyid:AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bb:20:f7:29:42:28:5a:67:83:14:51:b7:ef:fc:f4:94:39:
fb:cd:9e:f2:7a:8c:72:e9:9d:c7:9d:9b:09:d6:c3:e6:a9:ef:
71:7d:a3:d2:99:5f:fb:67:64:96:d3:5e:0b:35:dc:b0:ed:e0:
36:d5:e5:af:ba:5e:dd:bb:51:5f:79:b7:1b:b2:11:69:14:3e:
b1:2d:42:c2:3c:b1:d8:66:a6:66:59:31:7d:16:1f:c5:ba:09:
f3:1c:a1:3d:3e:6a:e2:7b:df:49:b8:41:1a:22:f5:05:61:e3:
07:e0:86:91:3b:19:f3:2b:2a:5b:25:b4:6a:68:ee:7a:37:63:
4d:7d:f6:a6:85:93:af:42:b9:8d:e8:ed:8a:91:08:c2:16:92:
94:24:0f:83:f1:69:b6:d8:58:89:a1:48:c4:93:7d:f4:c9:71:
40:79:51:fd:3b:a6:5d:3a:0b:d5:aa:5f:76:8d:4e:af:55:dc:
17:68:98:6f:6a:d6:48:4f:a0:77:14:4c:ea:76:46:f6:cf:7b:
7c:2d:fc:d0:aa:e9:22:d8:ff:27:86:4c:1b:da:56:f2:6b:35:
b0:a5:51:39:de:a7:66:bc:a4:3e:4a:0e:52:39:36:6b:ff:cf:
1e:33:bb:59:18:7a:75:a4:55:85:85:fd:fc:f0:92:a6:ec:e4:
81:09:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:22:22 2025 by rpki-client