Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
File: qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft (raw, json)
Hash identifier: 2hn4EOYo7m23q1XbVUFLQZ+qwr61q5bI7Kib88TVrNE=
Subject key identifier: 1E:29:CA:6C:68:25:66:2A:86:81:E7:FA:51:BD:5C:0A:2E:11:CD:F5
Authority key identifier: AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
Certificate issuer: /CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Certificate serial: 0196767A4542E2398BB2D41E95756D4381D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
Manifest number: 0D91
Signing time: Sun 27 Apr 2025 09:00:46 +0000
Manifest this update: Sun 27 Apr 2025 09:00:46 +0000
Manifest next update: Mon 28 Apr 2025 09:00:46 +0000
Files and hashes: 1: qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl (hash: m82SovbfBkwlKohuf+qr8xSAFo/yaRJl2wFgmxVGobI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:45:42:e2:39:8b:b2:d4:1e:95:75:6d:43:81:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Validity
Not Before: Apr 27 09:00:46 2025 GMT
Not After : Apr 28 09:00:46 2025 GMT
Subject: CN=1e29ca6c6825662a8681e7fa51bd5c0a2e11cdf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:41:2f:ac:ad:14:5a:28:11:80:6c:e1:b8:
60:44:f3:b7:1b:a0:81:bd:b0:0b:14:63:51:86:17:
99:69:87:d1:a3:9f:25:e9:a4:b0:96:83:68:9e:41:
98:4e:84:91:74:6a:8a:e8:ca:12:91:07:4a:37:96:
fc:fa:26:90:79:37:b6:01:62:66:5e:a1:34:40:4e:
bd:27:35:30:e9:be:3e:c1:d1:fc:01:e2:c8:f6:ce:
52:ce:08:12:93:e3:11:e2:c9:19:bd:19:ac:a0:0a:
26:f1:ed:5b:26:72:3c:8c:da:a9:09:8f:7a:af:9b:
f9:e3:8d:e3:18:3d:c1:d4:69:24:5c:57:1f:5e:f0:
7e:24:35:ae:88:f4:f5:aa:de:86:72:b3:23:fb:ac:
48:b2:73:fc:95:b3:f1:e5:17:d9:af:a4:10:f0:46:
d3:7c:1d:07:35:48:e7:95:f5:0d:70:04:3d:91:17:
18:32:42:54:72:f8:c7:39:02:d4:66:0b:cd:ff:7d:
d3:b9:08:71:ac:78:45:cf:58:2b:93:60:7d:c7:f5:
49:86:07:a8:3e:34:02:d6:5a:9f:d6:72:97:e8:ff:
b0:28:cb:e2:b0:94:28:c1:43:24:b8:9b:17:2c:62:
41:78:28:4f:92:8e:04:c0:9a:ce:ba:c3:c5:e8:a4:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:29:CA:6C:68:25:66:2A:86:81:E7:FA:51:BD:5C:0A:2E:11:CD:F5
X509v3 Authority Key Identifier:
keyid:AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:80:c8:06:89:0a:06:1f:10:69:54:1e:ce:9d:d1:fc:ef:de:
9b:16:98:40:95:c0:c4:58:f2:cb:6d:38:26:77:38:65:e8:2a:
8a:53:c1:51:78:89:f0:94:fe:1b:11:d7:44:d6:3e:c3:53:17:
ab:d8:dd:8c:43:17:f7:ff:c0:6c:f9:e6:0d:5e:34:51:8e:e2:
4c:c5:34:23:a1:84:85:f9:82:c7:7a:ce:fd:90:9f:60:a3:80:
ed:41:6f:82:56:d0:58:86:a6:de:9a:43:69:eb:83:e0:64:cb:
95:dc:e6:4b:06:b1:f3:50:52:0d:82:e7:60:7f:1c:88:f2:b8:
4f:1a:30:50:9c:3b:b8:ae:43:76:1f:bd:a6:98:1b:c0:95:d7:
06:20:83:d7:70:4f:f8:83:db:84:f0:eb:3d:d1:06:02:0c:45:
f8:1c:27:e9:68:d3:ed:ad:36:ac:0d:76:c4:37:24:cf:14:e8:
40:a0:8f:77:45:d4:27:bb:e1:25:3a:f3:ad:f3:77:61:4b:ac:
0b:ac:00:67:73:a9:41:00:27:f7:0f:7a:64:bf:19:95:94:64:
b7:1f:5d:8a:07:77:b7:8b:69:31:4f:01:56:b9:a2:ee:e0:a3:
68:c4:e7:e1:0f:8f:72:3f:f7:7b:06:29:87:db:94:62:22:29:
0d:08:ca:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:53:16 2025 by rpki-client