Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: m7mztWsA+yKxjn5GNSBRXTnsfGW5WvQmtLXlsBQ/yp8=
Subject key identifier: 59:F6:B5:63:66:0C:65:5D:B0:DC:AB:7E:15:0A:C7:E3:A8:71:16:0B
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 0196760C29A832217DE2967EFD5FC081906B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 07:00:30 +0000
Manifest this update: Sun 27 Apr 2025 07:00:30 +0000
Manifest next update: Mon 28 Apr 2025 07:00:30 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: orZtzujud9BrnfV8L0YiXSUQfBbcZeMnJgP1tqSTKzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:29:a8:32:21:7d:e2:96:7e:fd:5f:c0:81:90:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Apr 27 07:00:30 2025 GMT
Not After : Apr 28 07:00:30 2025 GMT
Subject: CN=59f6b563660c655db0dcab7e150ac7e3a871160b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b2:b1:82:9e:cb:c5:5e:b9:2e:2c:79:4e:cb:
8f:57:91:f1:5e:4c:fb:de:e7:c5:d8:30:be:af:62:
d8:35:b4:7e:36:cc:d1:28:c2:bc:e0:7b:9c:a2:22:
ab:0c:56:0e:42:1b:95:89:10:a7:21:61:70:c7:56:
1c:49:11:a1:6f:ab:fc:62:14:9c:df:e3:64:56:eb:
6d:89:49:e6:6c:6c:d4:8d:84:1e:12:c3:e8:cb:2b:
b4:6a:cf:55:8a:32:ea:68:97:7a:5c:d1:85:25:3d:
93:81:3c:9f:4d:56:3d:92:4d:84:cf:1a:18:0b:0a:
77:ec:6f:b4:21:37:a3:75:49:fe:5b:f7:77:29:e8:
a1:d5:84:79:b3:9c:81:0d:c8:bd:54:f7:97:69:5f:
b1:a8:32:d1:cb:26:62:a9:8f:f2:79:64:8d:da:be:
96:09:cf:38:09:bc:34:d3:95:7d:a5:cc:f3:09:41:
cc:b7:cf:1b:d3:72:18:f5:b2:18:44:4e:4b:8b:a5:
4b:75:ec:1a:44:b8:97:d2:64:8c:72:75:4c:26:3f:
ee:0c:01:0e:42:ac:95:68:44:6a:60:70:33:5a:6a:
22:2f:05:f3:6e:dd:c3:4e:22:92:d3:33:f2:ff:e4:
06:04:7b:40:11:de:df:f4:47:2e:14:c3:92:52:3c:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F6:B5:63:66:0C:65:5D:B0:DC:AB:7E:15:0A:C7:E3:A8:71:16:0B
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:32:bd:10:32:1c:db:20:9e:06:d4:e2:be:3f:75:71:a4:13:
0f:9b:eb:3c:2e:29:ae:c1:78:ef:b2:c5:c3:58:dc:58:28:5f:
e9:3e:41:56:71:90:60:39:64:66:a6:d7:c2:9b:bb:d3:bb:8d:
66:fe:a8:35:bc:3c:fd:12:e1:c1:9d:b6:58:cd:a5:2a:97:09:
a8:dd:47:c7:e3:8c:15:99:b7:1c:b9:c8:6a:3a:b8:eb:5a:2c:
ad:3e:5c:4a:da:0c:c3:5b:d7:55:0c:cc:f1:ba:f7:d8:e3:dc:
4b:95:24:7d:68:ee:ef:a0:2b:fd:26:bf:4f:58:30:01:04:08:
9f:da:84:44:3d:ec:53:a1:99:29:1e:4b:94:7c:67:02:76:ff:
88:0c:bb:3d:9a:5b:6b:cc:14:03:78:f7:16:2f:62:6f:12:15:
b5:ef:9f:af:74:0b:1c:28:7f:b0:c9:b3:16:ee:14:7a:1f:ff:
d2:e6:9b:47:38:cd:56:e5:23:7c:19:76:92:24:42:68:e3:1a:
82:af:fe:87:03:03:c2:65:9f:88:81:ba:08:c3:d0:8f:bc:aa:
3b:a1:bc:eb:2b:72:b1:c0:5b:2d:99:a3:8b:8d:de:1c:68:cf:
05:f8:09:7f:82:82:55:b4:c9:17:ca:57:79:7f:11:d0:a9:db:
79:71:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:00 2025 by rpki-client