Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
File: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft (raw, json)
Hash identifier: HJNQJ66nHI2eOir3/KOW2QkqJ5Kr17oimBA6y+t7w50=
Subject key identifier: 42:8E:71:E1:0E:3F:C4:A3:48:29:7F:3F:4C:7C:EA:F6:69:1C:4A:A0
Authority key identifier: 41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
Certificate issuer: /CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Certificate serial: 01968A380AB16817499C198D9C3059FFA4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
Manifest number: 03B9
Signing time: Thu 01 May 2025 05:00:50 +0000
Manifest this update: Thu 01 May 2025 05:00:50 +0000
Manifest next update: Fri 02 May 2025 05:00:50 +0000
Files and hashes: 1: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl (hash: OBBv6AVqaLY/E+2WSz+O6ZW0rkvVebfhI9ciUc0Pix4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:38:0a:b1:68:17:49:9c:19:8d:9c:30:59:ff:a4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Validity
Not Before: May 1 05:00:50 2025 GMT
Not After : May 2 05:00:50 2025 GMT
Subject: CN=428e71e10e3fc4a348297f3f4c7ceaf6691c4aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:aa:bd:7a:00:5d:f6:53:34:63:a7:9d:d1:
fc:a9:47:6b:18:b5:01:85:87:fe:67:d9:88:45:7b:
48:5d:95:25:41:29:b3:3b:69:78:00:b9:d6:27:83:
15:fa:c5:72:94:d5:2d:89:07:6c:9f:3b:8d:af:7f:
df:6a:3a:93:2e:01:3c:0f:45:05:2a:2a:21:bb:bb:
ce:db:6e:d5:af:75:be:74:e9:1b:86:28:4f:95:20:
c4:3a:5a:67:68:11:cd:c9:f9:d5:bc:d4:ed:d5:b0:
1e:bf:5f:f2:7f:20:37:d1:29:b3:21:59:a4:f7:bf:
51:69:5d:15:97:a7:55:e8:2d:b9:b8:40:de:a2:80:
c6:50:04:17:99:d6:26:d5:40:55:85:aa:52:a3:c2:
de:44:ec:81:98:d7:5b:ce:1b:de:26:0b:fb:a2:bd:
b1:44:a4:ea:2d:79:ae:f4:77:14:c8:e9:46:53:77:
8d:89:4c:a4:1f:d1:01:af:28:1d:dd:ac:40:a6:7d:
73:00:f6:0d:56:06:9e:3b:52:ea:23:e9:58:67:8c:
d7:c0:93:e4:65:75:19:24:39:a5:c8:01:3f:0a:10:
7b:3d:9b:56:49:9e:23:43:22:be:4c:ba:e1:84:bb:
bf:72:f4:2a:a0:ad:bd:b7:19:9c:f0:96:42:09:67:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:71:E1:0E:3F:C4:A3:48:29:7F:3F:4C:7C:EA:F6:69:1C:4A:A0
X509v3 Authority Key Identifier:
keyid:41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a9:a8:9f:75:4f:b7:44:73:cd:3d:9f:87:8d:eb:4e:ae:c6:
5e:c8:2c:47:47:5d:80:45:10:e0:7e:9f:47:eb:14:56:53:b8:
c6:81:21:ee:8d:63:f4:f8:9e:07:43:eb:67:ab:e1:ab:30:46:
05:b8:6a:16:f3:be:9b:2d:b8:54:08:79:ab:c4:a4:fc:fd:22:
f4:20:e5:dd:67:36:76:3a:51:29:31:ad:29:3f:01:e7:0b:5b:
db:19:3a:49:09:1f:a9:f2:6d:41:8f:1d:96:75:c8:9a:a2:87:
3e:72:43:9e:ab:32:39:d9:e8:ac:0f:a6:de:7c:2a:97:33:f2:
e0:fd:bc:c4:88:aa:5e:a1:29:26:ac:87:9f:81:da:1d:d0:b1:
b9:fd:a5:ed:4d:f0:80:69:19:02:cd:e8:6a:f9:59:dd:93:2f:
5e:4f:1c:47:be:7c:ad:cb:87:11:72:81:52:26:31:99:fc:24:
1e:64:c6:17:b0:54:97:a6:ee:8d:65:53:bc:f2:76:78:9c:e9:
e3:4c:91:e8:63:d7:45:bc:1d:98:ac:a5:99:d9:f9:d1:6e:40:
a3:68:be:ad:14:71:63:80:a3:59:ec:0f:1b:64:62:78:23:b8:
36:8f:bb:b4:c9:62:ef:10:63:03:5c:31:58:d0:20:51:47:cc:
b6:2f:0c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:00:33 2025 by rpki-client