Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
File: QZV-DXwo4yonWu2yD4AjYbRb_1E.mft (raw, json)
Hash identifier: Hx2rDQ3m1heLMY46aMcXCSzwj22id0ezgJXRpyXBLGU=
Subject key identifier: F4:6D:ED:69:8C:E6:AC:08:AF:87:50:76:52:FE:C6:CC:17:51:35:81
Authority key identifier: 41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51
Certificate issuer: /CN=41957e0d7c28e32a275aedb20f802361b45bff51
Certificate serial: 01977119FF1CFA005089CAFDE9367D31D17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
Manifest number: 1223
Signing time: Sun 15 Jun 2025 01:00:18 +0000
Manifest this update: Sun 15 Jun 2025 01:00:18 +0000
Manifest next update: Mon 16 Jun 2025 01:00:18 +0000
Files and hashes: 1: QZV-DXwo4yonWu2yD4AjYbRb_1E.crl (hash: K+8ORnvLNXrsKYz6VH0I1yhExUP042KLpC36kb12E0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:19:ff:1c:fa:00:50:89:ca:fd:e9:36:7d:31:d1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41957e0d7c28e32a275aedb20f802361b45bff51
Validity
Not Before: Jun 15 01:00:18 2025 GMT
Not After : Jun 16 01:00:18 2025 GMT
Subject: CN=f46ded698ce6ac08af87507652fec6cc17513581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:13:70:a2:f0:74:13:b5:6d:d5:4f:a6:fa:
4a:59:0e:cc:d2:95:1c:17:ed:cb:19:a8:17:86:16:
8d:e8:32:21:91:31:fa:3e:5d:52:8b:55:a1:cf:1d:
37:df:28:b9:61:b1:8f:f0:8b:27:06:bd:b3:1f:26:
0b:a2:74:3b:20:b9:b5:eb:45:8d:99:0a:50:0f:f1:
f7:d7:4f:ed:af:a7:a0:9f:b3:08:78:ab:8a:c9:88:
07:76:96:c3:d0:f0:84:39:e6:fc:95:03:fb:b7:ea:
5b:d3:ac:52:90:57:76:05:2c:60:66:8c:21:c6:92:
09:5b:b6:94:51:cb:cc:8c:a5:5f:f8:54:f3:1f:0e:
87:80:30:54:50:b9:c6:07:1d:56:e4:87:37:a9:c0:
8d:ab:6b:8a:5e:e6:8d:4c:7f:9b:df:00:fb:af:2a:
0c:7f:c6:96:81:c1:3c:96:91:9c:d5:f4:e3:d7:aa:
27:2c:6c:35:eb:5f:63:68:53:cc:c0:96:75:a5:5f:
33:66:9d:f2:a7:51:be:8e:4a:1d:6a:4e:70:95:fe:
2c:6d:9c:05:f3:a1:34:da:c7:75:ac:fe:6b:f4:f0:
ac:1e:67:4b:e8:a6:dd:3f:e6:86:34:7d:1b:2c:a1:
4f:14:d1:48:24:d8:4e:4d:99:87:d4:91:42:75:1a:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6D:ED:69:8C:E6:AC:08:AF:87:50:76:52:FE:C6:CC:17:51:35:81
X509v3 Authority Key Identifier:
keyid:41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:60:a1:68:00:90:e2:22:f7:a7:cc:d5:9a:90:77:31:5d:bb:
3c:33:6c:c8:f3:88:87:8d:20:12:7d:36:f2:c7:68:a9:83:f5:
28:b2:14:2d:37:d3:8f:e0:e5:55:6c:76:72:91:c6:4f:74:aa:
0e:33:4b:c7:ec:98:53:00:47:c0:0d:71:77:08:68:43:25:0e:
4a:45:13:66:99:dc:6f:45:15:7e:01:2a:6f:1a:15:66:81:b7:
8f:db:cf:34:dd:bd:96:3e:32:53:c9:48:22:d8:2c:89:15:80:
a1:e2:1b:32:a7:c3:f5:07:2c:7d:74:4f:3a:6a:27:b3:ef:53:
4d:28:60:e9:3a:91:20:13:2d:e4:2e:8d:f6:af:3e:e4:7b:32:
69:8f:0d:e1:9f:9e:ac:e3:6f:4a:96:f6:03:21:34:17:4e:ca:
11:a8:36:df:2c:f6:9b:02:7b:09:b7:34:7b:ff:3d:e5:4c:70:
33:32:90:ed:87:92:9c:13:13:fc:b9:56:bf:49:16:28:d3:26:
6d:7e:87:3b:05:07:0b:76:11:bd:23:31:df:92:04:78:7a:57:
96:71:74:56:bc:33:f3:79:88:7e:10:b8:d6:d5:7e:16:1c:3f:
9a:a6:65:52:a7:11:54:69:92:46:b9:b8:73:96:6e:85:23:31:
14:aa:38:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:04:23 2025 by rpki-client