Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
File: qoxALCO4BeCVMBFbvkREAg9PIDQ.mft (raw, json)
Hash identifier: k4+C4uFQ2Kw2bgEV9J9coctSw6UvqgrTowHB1PLaeGs=
Subject key identifier: 09:B1:C9:E9:11:7D:34:11:F6:C6:BC:93:48:A9:7E:57:57:89:75:24
Authority key identifier: AA:8C:40:2C:23:B8:05:E0:95:30:11:5B:BE:44:44:02:0F:4F:20:34
Certificate issuer: /CN=aa8c402c23b805e09530115bbe4444020f4f2034
Certificate serial: 01967BD72CC3130AEEFA2D2D1807D62878B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
Manifest number: 0610
Signing time: Mon 28 Apr 2025 10:00:21 +0000
Manifest this update: Mon 28 Apr 2025 10:00:21 +0000
Manifest next update: Tue 29 Apr 2025 10:00:21 +0000
Files and hashes: 1: qoxALCO4BeCVMBFbvkREAg9PIDQ.crl (hash: L1lCDtOmRexP5QFgNFZDZXJpzLL34yLOKAY9Jo1BhkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:2c:c3:13:0a:ee:fa:2d:2d:18:07:d6:28:78:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8c402c23b805e09530115bbe4444020f4f2034
Validity
Not Before: Apr 28 10:00:21 2025 GMT
Not After : Apr 29 10:00:21 2025 GMT
Subject: CN=09b1c9e9117d3411f6c6bc9348a97e5757897524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:7c:34:4c:31:09:d9:e6:e4:74:4e:9e:eb:
4c:08:1d:93:0c:ad:8e:e0:6e:9e:29:48:d4:a3:ef:
d0:bf:61:e5:1b:10:b6:b5:6a:2b:4e:da:9b:e3:80:
9d:3b:51:da:cf:03:75:c6:13:31:77:74:41:b1:f1:
76:24:3b:ce:dc:3e:4e:c9:6e:fb:50:ae:8c:c1:6e:
0a:63:ee:c0:1c:39:9b:db:6f:90:c1:53:61:34:84:
43:c1:c3:db:08:08:e0:76:e5:22:5e:66:e8:7e:3b:
4b:56:50:d9:77:4d:53:a7:15:19:11:73:6d:b4:db:
1a:eb:5d:1b:87:63:a8:ca:ed:23:d7:f0:5a:d0:d1:
62:d8:03:17:e0:05:15:0f:e2:b3:55:65:4b:f2:4a:
74:7f:ec:25:d4:57:32:43:bf:8f:8f:5c:0d:49:e2:
bd:a0:aa:e7:69:b5:70:a5:cf:c5:bb:ee:0c:de:2e:
5b:c1:90:18:90:e9:90:f6:65:e4:71:dd:75:32:04:
50:a3:9d:33:f4:28:08:14:eb:dc:23:81:60:cd:37:
47:ae:54:67:0b:6f:d6:94:28:b8:8c:c9:8d:e9:ab:
3b:fb:14:3e:1d:49:1f:1c:0b:d6:e6:5f:14:a0:94:
c1:ac:f7:15:47:07:af:da:7a:69:ac:77:23:4e:a7:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B1:C9:E9:11:7D:34:11:F6:C6:BC:93:48:A9:7E:57:57:89:75:24
X509v3 Authority Key Identifier:
keyid:AA:8C:40:2C:23:B8:05:E0:95:30:11:5B:BE:44:44:02:0F:4F:20:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:13:39:7a:bd:e4:4d:21:c8:d2:2a:b1:dc:ca:bc:a3:6c:b6:
77:19:12:5f:2c:94:32:5c:1d:23:29:29:af:51:1b:20:bd:34:
fd:4a:6b:9a:e0:5a:a8:49:4d:66:75:19:e7:64:40:d2:4c:99:
81:dd:89:90:bc:ef:19:0f:cf:4e:0d:d2:02:73:05:e6:97:90:
4c:b0:99:c5:5b:fe:47:31:2c:d1:13:60:af:ee:54:95:74:fb:
08:1f:ce:2f:44:5c:15:8c:26:ad:d7:4e:58:80:d4:05:e9:6d:
72:e1:1b:8c:d4:db:95:52:49:2d:1c:6d:bc:27:00:99:10:ff:
d6:e5:10:94:7a:d0:31:67:c7:8a:1d:69:86:49:62:88:49:91:
d6:21:44:0d:70:74:06:59:d6:8e:34:c7:ad:42:5e:f3:fc:b3:
35:7c:57:15:a0:59:93:ad:c3:60:a4:2b:4b:94:4b:ba:5d:ad:
d4:97:c0:73:65:00:3a:6f:fa:3a:96:20:6f:7a:46:e7:4a:01:
66:b3:ff:b1:78:bd:26:6a:f7:ae:d0:d8:e4:a8:95:2d:b7:23:
45:f5:f4:34:d5:85:a2:5f:7b:2a:de:e8:93:03:85:64:f1:33:
bf:10:0b:ec:c0:2c:e5:77:10:9b:4d:d5:d6:1b:f6:ff:e7:60:
8a:14:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:23:24 2025 by rpki-client