Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
File: QX7IKFpWXfUpSjs7YD_fkZTm760.mft (raw, json)
Hash identifier: DOBYzGQnzafe9TO1GPJfRFbTLv83pIndWKI5bf+IRvg=
Subject key identifier: 56:6A:07:64:B3:83:5C:A5:A9:27:D0:DF:F6:24:33:0D:F2:30:BC:0E
Authority key identifier: 41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
Certificate issuer: /CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Certificate serial: 01969A4F92AB97421924666E61097B057BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
Manifest number: 0306
Signing time: Sun 04 May 2025 08:00:28 +0000
Manifest this update: Sun 04 May 2025 08:00:28 +0000
Manifest next update: Mon 05 May 2025 08:00:28 +0000
Files and hashes: 1: QX7IKFpWXfUpSjs7YD_fkZTm760.crl (hash: Jt7kYHR4u7tHayUM6S3vJe4EuZB26hklmrErpbDEMnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:4f:92:ab:97:42:19:24:66:6e:61:09:7b:05:7b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Validity
Not Before: May 4 08:00:28 2025 GMT
Not After : May 5 08:00:28 2025 GMT
Subject: CN=566a0764b3835ca5a927d0dff624330df230bc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6f:70:d7:60:74:cc:00:a7:2b:fa:5a:09:f0:
69:54:42:c3:54:7d:81:46:5e:65:40:a3:1e:17:51:
a5:73:c7:8a:07:05:7f:64:69:df:a3:b1:cb:08:3a:
2a:02:3d:f8:a8:99:e7:69:9e:43:56:ab:28:84:02:
a8:06:16:75:93:45:5a:33:21:17:7e:db:e4:41:5b:
3d:be:33:f8:dc:0a:0d:55:a2:b6:d3:e9:05:9b:3f:
8b:29:ba:e0:c7:d0:cc:60:13:19:77:76:be:09:dd:
f4:85:e3:fc:56:aa:73:bf:01:06:f8:00:41:d7:b8:
76:10:6e:ea:a8:83:c2:74:17:c3:b1:e6:80:81:8e:
d1:af:2d:72:0d:05:c3:21:1f:13:a0:24:0c:93:c0:
45:80:44:b4:27:6c:da:2d:36:68:c5:18:dc:2c:35:
a9:a5:2c:d2:e8:2d:ef:3c:b0:33:45:41:b9:4d:de:
28:34:1e:ed:50:98:e9:78:ac:8e:64:e2:db:46:1d:
f2:11:fe:12:e4:fd:3d:dc:98:de:d6:6c:0a:20:2e:
bf:cc:84:47:3a:d0:da:f3:a8:da:a8:20:46:19:de:
27:18:9c:1a:b9:e5:59:38:6b:de:4f:a2:d8:e3:b7:
81:56:16:e6:ee:bb:8d:be:3e:c0:eb:84:9c:8a:0a:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6A:07:64:B3:83:5C:A5:A9:27:D0:DF:F6:24:33:0D:F2:30:BC:0E
X509v3 Authority Key Identifier:
keyid:41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:d1:aa:99:20:76:0a:19:f4:84:51:3e:02:a6:7f:fb:5c:
29:fb:40:7c:ea:42:5d:6b:61:54:0d:de:bd:50:31:ae:ec:00:
9b:87:d2:ed:e8:35:71:b5:29:cf:0b:55:37:82:78:5d:bf:76:
17:c7:b0:4b:98:0f:a2:35:bc:3f:ef:b9:fe:3a:1d:83:33:82:
2b:fc:fa:50:fb:dd:34:b8:c6:cd:d3:02:0f:5c:e0:1b:bf:13:
09:12:6b:f5:7d:c7:83:a5:c9:9b:d9:d8:eb:f6:76:05:43:0e:
4c:b7:e1:36:82:3c:e1:5b:23:e9:70:32:0a:fd:6a:58:44:f4:
6a:3d:40:e2:88:27:e6:8e:54:1d:d6:3a:aa:4b:53:c9:f5:52:
8d:29:f3:64:26:f1:c7:24:a6:bf:18:49:a6:34:3e:32:32:e4:
4f:f2:12:4f:1c:03:91:9b:48:e6:79:71:4d:00:2e:0b:6b:51:
e8:05:90:fa:3e:66:e4:c0:6e:a1:e5:44:6b:b6:dd:50:a0:c6:
79:bd:5b:61:a9:fe:df:f6:fd:5f:86:e3:81:c7:06:89:bb:87:
f6:bb:b4:14:c3:b1:bd:77:c1:eb:36:a2:92:ba:96:25:2d:83:
58:cc:07:50:79:98:64:94:f7:75:f7:5f:de:e2:60:c4:b4:b3:
b2:75:7a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:37:55 2025 by rpki-client