Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
File: QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft (raw, json)
Hash identifier: naArqdf/564VSmZ17lOMnZiL1VfuWoTMPqv+/aU+TLE=
Subject key identifier: CF:22:09:B8:12:9E:D2:37:15:26:A5:F0:A4:A4:88:5A:99:51:B3:A1
Authority key identifier: 42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57
Certificate issuer: /CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
Certificate serial: 0196789F1AE52B14B7A5AD2A95B76BCB609C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
Manifest number: 0434
Signing time: Sun 27 Apr 2025 19:00:14 +0000
Manifest this update: Sun 27 Apr 2025 19:00:14 +0000
Manifest next update: Mon 28 Apr 2025 19:00:14 +0000
Files and hashes: 1: QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl (hash: EIBR2yIZek3SKLdfNqQ49D6mMKs8+jELkh9f6Y5/FiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:1a:e5:2b:14:b7:a5:ad:2a:95:b7:6b:cb:60:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
Validity
Not Before: Apr 27 19:00:14 2025 GMT
Not After : Apr 28 19:00:14 2025 GMT
Subject: CN=cf2209b8129ed2371526a5f0a4a4885a9951b3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:93:74:20:d6:2e:a2:04:18:73:1b:6a:5b:
c1:34:65:36:72:3e:2a:f1:df:34:d0:fe:03:b2:a3:
71:b8:90:f7:40:77:17:c0:01:12:a2:e4:d0:48:a9:
b7:92:0b:de:bf:a0:2f:46:8b:5a:10:ab:1f:51:a5:
03:51:f0:57:5f:50:f8:4a:27:9c:e0:a6:45:db:b7:
38:c9:ac:66:bb:71:0b:34:f8:fc:31:6a:b0:05:19:
45:aa:7c:96:7e:24:4b:7c:56:99:34:1a:9e:8c:1b:
22:d8:24:86:05:d0:b7:28:b8:25:9e:ff:86:a5:1f:
ac:b9:dc:1b:c3:27:fe:43:d2:80:80:3b:ac:4c:2d:
c4:62:06:55:53:25:13:fa:31:05:cd:73:71:75:07:
23:03:90:04:51:10:48:9e:60:f0:9a:b0:08:26:f5:
f0:f9:6c:42:7a:77:c5:0a:be:2c:23:e8:1c:d2:d0:
cc:cf:0d:59:4e:62:81:c9:bf:77:0a:96:f1:03:de:
2c:83:f7:55:e0:5a:ce:df:03:59:52:79:6c:16:8d:
bd:80:f0:b9:47:38:12:fb:d1:db:8d:4d:08:60:93:
b3:38:c2:25:c9:b9:a1:b9:84:2e:34:90:71:f7:f7:
6a:cb:62:0e:36:09:fc:d6:5b:ca:bb:81:11:3b:08:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:09:B8:12:9E:D2:37:15:26:A5:F0:A4:A4:88:5A:99:51:B3:A1
X509v3 Authority Key Identifier:
keyid:42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:61:cb:56:ac:d3:06:16:a7:34:d2:4d:50:22:e9:6f:ef:21:
e4:36:5b:1a:eb:c6:92:65:0c:00:a8:38:51:92:7b:b0:24:6d:
50:a8:c4:22:1c:91:a3:05:d1:c9:ce:f2:f1:99:77:38:29:09:
01:88:21:bb:1b:02:2f:0d:3b:fb:c6:8a:4e:3a:0e:3f:50:7d:
09:45:59:c1:49:8d:b6:8e:b4:8c:92:e0:4b:7f:33:28:c7:04:
66:89:93:63:ff:14:66:89:b7:94:8d:ca:d9:db:df:53:03:69:
1b:8a:8a:34:6e:a4:56:3c:34:48:9c:9e:d6:f9:18:3e:ac:85:
e9:08:05:e5:10:46:99:da:d4:6b:16:3f:08:ed:e0:dc:b5:ef:
17:0c:fd:05:a3:15:a6:51:0e:e5:ed:bd:6b:21:4e:72:4a:22:
dd:74:35:ca:3c:c5:a0:62:34:9b:86:d1:b2:12:fa:8d:a1:3a:
a8:25:5e:c7:1d:d3:74:3d:e3:9a:32:2b:4a:46:58:65:33:92:
27:5e:90:08:7f:22:a4:46:84:1b:bc:9a:09:71:c7:ff:f6:aa:
c5:d5:d1:41:d3:2d:04:5a:07:b7:5e:aa:64:a3:79:78:82:80:
e2:2a:96:73:f3:e0:6c:cf:2b:e5:26:89:93:9b:83:46:16:13:
e8:28:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:07:54 2025 by rpki-client