Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File: Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier: OZVtNWOe5AsdsHJq9uT1sLZiQVBs/BeL9xGysA47m6Y=
Subject key identifier: 8D:E4:CB:A7:99:08:19:83:3E:40:31:BD:C6:6D:9D:FB:76:F1:C5:C3
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer: /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial: 01968F274FDE089FBB8316416B46918F270A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number: 1518
Signing time: Fri 02 May 2025 04:00:40 +0000
Manifest this update: Fri 02 May 2025 04:00:40 +0000
Manifest next update: Sat 03 May 2025 04:00:40 +0000
Files and hashes: 1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: JsOG1aMvQp17u0CqwDs63L9PaR53qP8EtMrMn00Wq5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:27:4f:de:08:9f:bb:83:16:41:6b:46:91:8f:27:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Validity
Not Before: May 2 04:00:40 2025 GMT
Not After : May 3 04:00:40 2025 GMT
Subject: CN=8de4cba7990819833e4031bdc66d9dfb76f1c5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:03:b7:20:81:43:26:52:16:98:a5:89:ff:
9c:8c:ce:ef:54:b3:87:5d:48:d0:7b:d0:5b:4c:be:
2f:d5:33:64:9b:25:28:8f:52:a2:86:0b:c1:3e:6c:
b0:8b:6e:22:53:5e:da:c1:e4:6d:20:73:91:bf:a4:
88:bd:3c:09:f3:9c:0e:ab:a1:89:dc:82:be:e6:04:
40:92:1a:ee:b3:d0:ff:ea:7b:d2:83:87:3c:ba:24:
6d:a0:ea:ae:d8:ee:72:09:91:f8:34:ee:68:14:3e:
c1:98:a7:46:cd:79:46:f1:e6:55:15:73:a1:34:f0:
f9:ab:4c:e7:c9:87:ee:55:78:58:5e:e9:99:cf:4d:
f2:7e:d1:8d:51:0e:bf:d3:20:00:59:88:66:78:34:
cd:90:d2:08:0c:91:e0:67:7b:3a:f2:4e:fa:e5:c3:
10:b4:36:de:6c:51:ae:3e:54:73:d4:9e:31:35:cf:
09:16:a4:ab:2d:76:ce:06:8e:07:bc:37:f9:50:aa:
2f:4b:7e:00:2f:00:76:b4:41:4a:6d:00:43:21:fc:
23:4f:00:03:f6:03:06:15:9e:59:d6:98:b9:f8:ca:
49:7a:8b:da:8b:c1:3e:2d:31:4a:1e:f5:b6:f7:83:
48:7e:6a:40:29:65:4a:03:d5:c5:83:68:59:69:b9:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E4:CB:A7:99:08:19:83:3E:40:31:BD:C6:6D:9D:FB:76:F1:C5:C3
X509v3 Authority Key Identifier:
keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:35:30:4e:9e:72:ab:65:3e:59:b7:92:48:34:d7:c1:43:bb:
d7:9c:4f:a9:bb:f9:aa:3f:83:a1:71:ca:9b:de:70:ab:c5:f0:
23:6f:1c:4e:7f:f0:fd:a9:9c:a2:f9:02:9f:eb:00:67:26:24:
6f:a9:1d:42:5d:5e:0f:c9:41:be:d5:dd:1e:1b:33:60:46:e3:
03:13:fb:70:0b:ec:2e:af:9b:71:a6:02:1e:bc:9e:b1:29:b4:
41:1e:ee:7e:99:5b:cc:24:36:af:fb:c7:23:d7:39:39:70:96:
f0:f6:b0:6b:e1:dc:c7:68:d7:83:49:74:41:97:17:c0:f2:ab:
62:81:b8:a3:96:9b:b7:42:3b:9c:f3:fa:f7:90:40:d2:0f:a7:
5e:e2:ad:fb:a4:6f:2e:8b:ed:d6:90:21:f6:5a:32:1f:d6:9c:
e0:39:0c:38:89:fb:0d:ca:e9:ab:8d:e8:81:18:c5:dd:bb:fa:
32:63:53:27:3c:ad:a7:89:a1:e7:cb:6f:3f:43:07:f7:bf:10:
15:55:dd:ce:3b:ea:48:29:27:cf:fd:86:31:7a:0f:af:5b:27:
34:cc:a2:6e:10:9a:22:86:68:14:9e:25:a7:db:2d:6e:46:7f:
47:47:98:e1:92:0c:e0:f8:75:56:3a:54:2a:97:8a:4b:93:63:
1d:48:3a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:53:09 2025 by rpki-client