Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
File: QpoEfERhf8-ynNVy962HR9C5Mms.mft (raw, json)
Hash identifier: G1J0FFS6+lH2iNzjmnkCoTjluksRHL7LQPeYPfSfaEI=
Subject key identifier: 87:7D:BF:FE:06:E7:1C:E1:1B:C9:3E:6E:E0:80:2F:02:28:B1:73:92
Authority key identifier: 42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
Certificate issuer: /CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Certificate serial: 01967FB41B915A645CF31DAC7360E6FD1ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
Manifest number: 0989
Signing time: Tue 29 Apr 2025 04:00:31 +0000
Manifest this update: Tue 29 Apr 2025 04:00:31 +0000
Manifest next update: Wed 30 Apr 2025 04:00:31 +0000
Files and hashes: 1: QpoEfERhf8-ynNVy962HR9C5Mms.crl (hash: +JISvZnV9ZXbpdBHSJr+NRAPTPMjFKJX6lECvdiCyd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:1b:91:5a:64:5c:f3:1d:ac:73:60:e6:fd:1e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Validity
Not Before: Apr 29 04:00:31 2025 GMT
Not After : Apr 30 04:00:31 2025 GMT
Subject: CN=877dbffe06e71ce11bc93e6ee0802f0228b17392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:17:6d:d7:9c:ce:1b:3a:e5:8f:b8:63:80:
9f:55:28:d8:6b:fc:f4:f0:7a:12:e4:de:c1:b2:7c:
6c:e8:5c:a5:80:5c:e4:66:96:43:17:c5:22:8c:52:
1d:9f:e2:99:0d:ef:68:49:3b:58:16:4e:1f:e7:00:
4b:16:52:8a:e3:ad:2e:08:c6:a2:ea:83:cc:0f:31:
d4:a7:06:2b:4c:43:3f:f3:ef:9c:22:d5:af:ab:b5:
3b:0c:e9:54:fb:52:5a:c4:78:bc:d1:93:27:ab:dd:
47:e0:ca:2f:76:d8:db:88:c2:7f:cc:4d:0d:f3:e8:
ec:66:e7:ae:3e:de:4b:8d:22:1d:80:47:25:1c:a5:
a3:f6:0a:df:ff:e4:36:35:ba:8b:34:99:5d:65:a4:
76:ff:35:5c:06:42:76:11:22:44:3d:a9:5d:0a:4b:
19:b4:50:85:d9:05:11:8f:ad:83:25:df:26:ba:cd:
9f:4d:2e:c9:c5:14:8a:3e:1f:be:72:44:6d:35:27:
b7:99:94:be:02:5b:1b:59:ba:b9:73:4d:ab:8f:66:
45:4b:5d:59:bc:0f:31:4c:c2:7f:5f:7a:3e:64:6e:
f4:2d:4d:3f:bb:fc:de:23:84:be:c2:66:4a:89:e9:
86:84:7e:75:35:cf:32:96:5e:ba:09:84:71:23:71:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7D:BF:FE:06:E7:1C:E1:1B:C9:3E:6E:E0:80:2F:02:28:B1:73:92
X509v3 Authority Key Identifier:
keyid:42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3a:95:3d:99:b7:b8:e0:7b:19:35:37:df:37:a5:c7:4b:aa:
21:49:ea:f0:9d:1a:7c:ee:c4:d8:0f:f1:da:f4:08:eb:38:e2:
07:05:27:33:80:94:87:cc:27:4e:8a:60:89:94:ea:5d:43:80:
c0:72:f6:b5:70:87:02:e8:9b:c2:c0:8d:b8:02:0b:f0:21:07:
73:10:c7:3b:e5:e8:c6:bb:e9:47:04:ff:23:56:06:2e:2e:4d:
4b:b8:e7:fd:a9:22:4b:d2:aa:10:c1:d5:7e:02:35:0f:7f:ce:
3c:96:cf:6f:ba:58:63:5a:2b:91:4c:9a:79:0c:5f:a4:a3:f2:
5b:d8:32:a5:8d:08:45:b1:6a:03:01:9b:67:99:ac:30:45:60:
98:cd:25:55:8d:f6:fd:2e:9c:b0:d9:8f:a6:3c:b3:91:6e:7a:
a6:65:43:88:79:7f:de:1f:9d:7b:1d:c7:ed:e0:e4:97:02:15:
b2:a0:e0:d6:79:4e:3d:b2:88:29:d3:ab:d6:32:b7:97:f3:ef:
73:a7:b8:d8:94:43:14:17:23:7b:5c:ad:75:81:56:2a:df:9c:
6b:44:22:fd:d3:f5:73:f3:74:cb:7f:4c:22:0d:ad:ad:b1:e5:
4b:f1:e7:9b:94:2a:64:92:00:c3:22:79:d6:9a:2a:6e:a2:f2:
b6:a3:78:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:55:13 2025 by rpki-client