Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
File: QIS7AapYrpSxMg_UvkIT-TFOkFY.mft (raw, json)
Hash identifier: UCCfA3aVnZrEVD47PhcrhlqHGq+38JvMy7VpqeIBMfc=
Subject key identifier: B7:53:5B:B0:23:B2:5D:65:9C:6E:6A:8F:08:72:7C:25:00:7A:5D:08
Authority key identifier: 40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
Certificate issuer: /CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Certificate serial: 01969071302028174563FCE4FF7785E22B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
Manifest number: 050B
Signing time: Fri 02 May 2025 10:00:59 +0000
Manifest this update: Fri 02 May 2025 10:00:59 +0000
Manifest next update: Sat 03 May 2025 10:00:59 +0000
Files and hashes: 1: QIS7AapYrpSxMg_UvkIT-TFOkFY.crl (hash: wXxcQuIEMZ/zUCCW+Cvzklj5Cmm612LiwWK1cbyvNNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:71:30:20:28:17:45:63:fc:e4:ff:77:85:e2:2b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Validity
Not Before: May 2 10:00:59 2025 GMT
Not After : May 3 10:00:59 2025 GMT
Subject: CN=b7535bb023b25d659c6e6a8f08727c25007a5d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:42:a8:88:c7:1d:c4:83:2b:2d:6e:cf:92:
c9:15:af:88:38:11:9d:b2:e6:33:62:44:ae:bf:c7:
dc:9b:3c:88:57:0f:5f:c7:87:e4:bf:ed:c2:c8:9c:
ab:79:3a:32:00:75:0e:5a:5f:42:cd:00:70:ab:05:
f4:09:30:a3:7f:eb:c7:d7:1c:64:80:fa:f4:8d:a8:
a0:3b:b3:59:01:85:a5:48:c7:d8:39:64:6d:08:2e:
c7:ab:4d:13:da:74:49:ee:d4:90:d4:c9:a7:d4:04:
34:5e:9e:8f:9a:f4:e5:63:f8:ed:de:01:80:ec:f6:
81:26:c8:04:e2:5a:e2:e7:0c:7e:80:d4:25:93:d1:
f4:51:1c:19:13:e5:44:76:1f:26:72:e3:93:74:86:
ad:86:90:ba:77:43:1b:c2:eb:51:0f:be:83:38:10:
80:9f:7d:a0:4b:d9:32:ec:1e:ee:2b:4d:ac:83:f8:
f8:01:bb:e2:06:45:ff:da:e8:cd:97:0b:6c:71:b2:
93:6c:04:8d:e0:35:2f:37:11:aa:87:99:2b:de:68:
a4:e4:64:ff:eb:42:4d:1d:2a:d5:60:97:9a:58:fa:
9b:cb:8f:f4:dc:50:e4:4a:cd:32:84:fd:30:e3:a3:
2b:e1:fa:3d:0c:14:9a:78:66:17:69:39:89:b2:53:
1e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:53:5B:B0:23:B2:5D:65:9C:6E:6A:8F:08:72:7C:25:00:7A:5D:08
X509v3 Authority Key Identifier:
keyid:40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d7:9a:1b:69:60:95:82:4b:f9:e7:ce:08:79:4e:95:b6:d4:
a7:68:f5:36:39:d2:0f:db:11:59:cb:12:15:03:85:33:d9:d9:
7a:d0:e2:d1:f3:4c:c0:83:57:27:54:18:4a:63:b0:79:67:f8:
f8:9b:50:62:28:f2:1e:87:0e:a0:88:39:4f:c1:19:69:90:e3:
b1:c0:37:92:1c:22:6d:f4:9e:bb:27:54:53:d5:6b:cc:37:a3:
f5:8c:9b:6a:7e:6a:2f:e5:8a:77:21:c9:f2:7a:df:eb:3d:3d:
34:f3:88:bb:5a:21:19:61:8d:00:2f:54:0b:5c:2a:1d:35:7d:
18:fd:ae:7d:2c:d8:b4:32:5f:0f:ca:2a:cd:44:98:d6:ed:fe:
2c:25:c7:5c:4c:20:fe:6b:1e:13:21:84:31:3e:43:a8:4e:d1:
28:cc:e5:b5:7e:f4:5f:7e:7e:a4:46:03:89:1e:6b:3a:d1:4d:
fd:75:32:0d:69:e4:36:92:b9:bf:f7:de:ef:e0:8e:76:bb:95:
b1:3c:22:0f:1a:d2:df:ad:9f:ce:d8:ff:f3:c2:67:41:e0:f0:
f7:be:af:37:9c:d7:95:96:dc:bf:69:f5:a3:a9:60:22:83:ec:
ab:d4:37:cf:63:b4:4e:64:9a:46:2a:cc:c1:de:3b:59:bf:c3:
5f:48:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:14:48 2025 by rpki-client