Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
File: qoxALCO4BeCVMBFbvkREAg9PIDQ.mft (raw, json)
Hash identifier: HDkvIt/7+krIr3M2n5ZbW00FwGbaGi/wapUbQYQv4DQ=
Subject key identifier: 70:84:13:9E:3A:D0:7F:67:17:93:BC:F5:B0:C3:89:72:2A:C4:8A:E5
Authority key identifier: AA:8C:40:2C:23:B8:05:E0:95:30:11:5B:BE:44:44:02:0F:4F:20:34
Certificate issuer: /CN=aa8c402c23b805e09530115bbe4444020f4f2034
Certificate serial: 01976D3D77A99161528C5D41D00DD3F018B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
Manifest number: 068D
Signing time: Sat 14 Jun 2025 07:00:34 +0000
Manifest this update: Sat 14 Jun 2025 07:00:34 +0000
Manifest next update: Sun 15 Jun 2025 07:00:34 +0000
Files and hashes: 1: qoxALCO4BeCVMBFbvkREAg9PIDQ.crl (hash: Pk9jdqKokMLMd0+PWCrEvzUUqrpIsl693qG2dZLOVHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:77:a9:91:61:52:8c:5d:41:d0:0d:d3:f0:18:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8c402c23b805e09530115bbe4444020f4f2034
Validity
Not Before: Jun 14 07:00:34 2025 GMT
Not After : Jun 15 07:00:34 2025 GMT
Subject: CN=7084139e3ad07f671793bcf5b0c389722ac48ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:82:f4:35:7b:13:31:06:36:27:d2:50:1c:1f:
e9:ee:ea:db:a9:5b:1d:a7:56:5b:44:02:f8:60:0e:
f8:a9:89:d7:28:3d:f5:df:16:46:25:b0:8d:d2:a3:
d5:c3:c4:e3:15:d0:4f:5a:cc:0a:f1:83:d1:bd:92:
2a:a1:d3:05:a9:02:0d:e5:5e:f7:f3:92:1e:e7:af:
2e:08:bc:f1:87:5c:02:b1:32:0c:51:f7:b8:33:09:
35:84:3a:1a:8b:7f:62:80:bf:79:08:0e:22:7f:dc:
48:c9:03:dc:b5:86:72:38:41:4f:99:f5:c8:65:96:
8c:98:67:e9:56:45:f0:62:3b:c4:33:3a:e7:e4:1c:
98:5e:fb:78:4e:73:f9:01:a0:0a:26:3a:ac:f7:04:
0d:48:2c:06:8b:a6:91:34:e1:20:ec:da:25:4c:3d:
26:7b:ed:ca:ba:38:d3:79:18:8a:90:bf:c7:ef:76:
45:cb:f0:b6:c3:51:c1:e3:0e:f6:d8:ad:d7:5d:2c:
ff:17:66:b6:0f:b0:0e:03:84:9f:26:e9:5a:ba:33:
04:15:c6:a0:bb:f9:5d:a8:21:86:54:80:bf:4a:23:
68:ce:4f:aa:52:58:e0:b8:7b:7a:ce:de:2b:43:0b:
30:4e:be:b3:f4:ee:fb:0f:d5:34:e0:52:d1:0a:ec:
66:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:84:13:9E:3A:D0:7F:67:17:93:BC:F5:B0:C3:89:72:2A:C4:8A:E5
X509v3 Authority Key Identifier:
keyid:AA:8C:40:2C:23:B8:05:E0:95:30:11:5B:BE:44:44:02:0F:4F:20:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ff:ed:fe:9b:c3:94:9f:91:06:b0:e6:cf:a1:23:0c:97:6c:
e1:2b:3d:b3:8b:12:85:fe:56:76:31:9a:44:48:e0:74:f6:60:
e7:14:88:ec:a2:d5:31:12:68:81:4d:ed:21:1c:d7:26:f1:39:
83:cd:eb:15:6b:f1:6a:05:a3:e1:29:0f:73:aa:8d:ca:fb:74:
e7:1a:fd:bc:e0:ef:21:af:95:9f:ab:be:82:ad:50:ba:ec:7c:
61:77:95:4a:78:a9:b6:9c:14:a0:dc:6b:35:52:a8:e8:f0:71:
b1:e0:f7:28:db:29:8d:9c:46:ff:3d:b2:7b:8d:46:b5:ae:a3:
c4:d3:da:2b:aa:3c:34:c5:24:b9:3d:ac:cc:56:f7:24:8d:fc:
4d:0b:31:22:a1:95:83:0c:ea:3e:e3:bb:73:97:32:d8:82:cb:
9d:09:e4:15:c8:5f:2d:f4:7e:33:48:d8:d6:20:82:31:a3:7e:
ad:93:df:c9:af:f4:80:8a:f3:c6:aa:aa:06:72:fc:c1:03:1f:
aa:85:db:5f:8a:32:9e:14:f9:92:b0:b5:3e:86:09:1f:3d:be:
02:e2:02:74:46:a5:1b:9c:67:25:b9:88:5a:80:7e:a3:ed:cb:
4f:3c:42:81:82:fb:60:b6:48:bd:1e:ac:95:29:c6:9a:25:af:
8f:b4:3c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:43:43 2025 by rpki-client