Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
File: QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft (raw, json)
Hash identifier: ldD1xRGp23/gReQPd4VmG87/ZsKSwc3y4SQS0mPCdtM=
Subject key identifier: 9D:D4:6F:62:C9:2E:E1:68:70:EB:82:40:C3:6F:D7:05:57:91:26:1E
Authority key identifier: 41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
Certificate issuer: /CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Certificate serial: 019685ED611E049EE2EBD7E4A42F56E6B120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
Manifest number: 1513
Signing time: Wed 30 Apr 2025 09:00:48 +0000
Manifest this update: Wed 30 Apr 2025 09:00:48 +0000
Manifest next update: Thu 01 May 2025 09:00:48 +0000
Files and hashes: 1: QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl (hash: tj/pVJvFrxELSDi/patbwJeM6kCeSG4GB3nGafyepU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:61:1e:04:9e:e2:eb:d7:e4:a4:2f:56:e6:b1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Validity
Not Before: Apr 30 09:00:48 2025 GMT
Not After : May 1 09:00:48 2025 GMT
Subject: CN=9dd46f62c92ee16870eb8240c36fd7055791261e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0d:9d:07:2a:97:59:81:3e:e2:48:41:9f:01:
3a:5e:72:9b:39:ba:7a:24:e4:cd:cf:7e:db:14:0d:
b5:5e:18:50:12:34:24:95:e9:ab:de:f3:cc:b5:fa:
65:48:91:08:a3:99:4d:cb:e4:78:8c:7c:66:2c:5e:
ea:cc:e6:97:de:41:6b:b4:33:28:2e:7a:9c:13:30:
ed:8f:e5:9b:06:60:87:17:29:5e:2e:09:73:96:08:
00:e9:3f:a5:d9:24:f2:ea:e8:58:f6:ae:b3:3e:8d:
2d:81:cd:4d:27:f8:bc:4a:28:73:5c:23:cc:63:9a:
94:1b:9a:fc:6f:09:cb:1f:c4:c5:ca:94:c8:8c:95:
19:5e:fc:d9:6f:b6:b1:d7:e6:b6:c1:37:ec:e8:a2:
67:9c:ba:b7:8e:8f:b4:e9:50:23:eb:23:ed:8e:c3:
21:ae:56:04:b4:95:f1:66:b2:3a:cb:77:89:87:8d:
ef:54:de:0c:24:67:76:bb:06:8d:65:ee:55:52:66:
6f:61:25:39:7b:89:b0:20:de:bf:ab:14:7e:ad:b6:
6e:ad:e0:e7:58:f2:7a:fb:72:c1:bf:f0:7d:cb:4a:
b0:df:63:5a:f0:3e:2d:26:49:69:8e:61:36:0d:ca:
bc:98:6f:fa:88:87:85:19:24:5d:d6:ec:7c:09:f9:
22:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D4:6F:62:C9:2E:E1:68:70:EB:82:40:C3:6F:D7:05:57:91:26:1E
X509v3 Authority Key Identifier:
keyid:41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:35:9a:d3:fd:4e:84:a2:c5:ab:9d:a0:da:47:ac:64:7f:18:
43:68:2b:5c:3a:bb:ce:79:e0:40:c7:83:af:f0:31:4c:bf:bb:
4c:a8:07:3b:01:93:89:6d:17:ea:2b:2c:7b:f8:63:45:4a:fe:
84:e1:82:72:9b:65:01:e0:53:7b:f9:9b:b1:74:ab:2a:6e:8c:
05:6c:ce:c3:98:a9:a2:46:86:a5:fe:1d:f9:6e:9c:44:3d:af:
c5:dd:c0:2f:18:5d:dc:b8:67:48:36:25:22:50:36:ca:9f:85:
98:3f:bc:b1:90:6e:37:bd:3d:1c:1f:dc:31:d0:3a:01:da:af:
58:18:0a:96:13:55:77:02:5c:bd:05:65:10:2a:97:81:91:46:
be:62:99:26:95:b7:2c:d8:5c:20:8f:42:2a:fd:a7:69:e8:cd:
36:fb:0e:19:80:0c:d7:f5:d3:4e:ab:a9:04:cf:82:0d:97:1d:
88:17:bc:5f:6b:0a:7b:50:c6:95:af:44:29:39:7d:50:97:9f:
e7:8d:8c:b5:43:2e:9c:2b:f3:b4:6a:b1:8a:54:28:ae:f4:7e:
21:4e:3b:9f:f7:c8:f7:61:6f:3c:15:3f:f0:35:62:17:b3:64:
c9:65:8c:71:83:dc:15:79:1d:ef:63:cc:d0:4d:84:5d:9b:50:
64:01:57:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:14:48 2025 by rpki-client