Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
File: qhC-mR89uJUJcQwgZ233qKS_4bQ.mft (raw, json)
Hash identifier: qdxzz1KKxGqcdareFy3fvdgfpb9G/uxY0QkcSdUz4MQ=
Subject key identifier: C8:12:C4:E9:8F:FA:11:1C:5E:CA:89:2D:75:3C:4F:38:05:81:4A:0C
Authority key identifier: AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
Certificate issuer: /CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Certificate serial: 01967EA1D50BC23FF934D3F85992F2807F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
Manifest number: 0920
Signing time: Mon 28 Apr 2025 23:00:56 +0000
Manifest this update: Mon 28 Apr 2025 23:00:56 +0000
Manifest next update: Tue 29 Apr 2025 23:00:56 +0000
Files and hashes: 1: qhC-mR89uJUJcQwgZ233qKS_4bQ.crl (hash: P91wTX4J3pkQSg1uKXW37nVCba4bOONdPooCii449qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:d5:0b:c2:3f:f9:34:d3:f8:59:92:f2:80:7f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Validity
Not Before: Apr 28 23:00:56 2025 GMT
Not After : Apr 29 23:00:56 2025 GMT
Subject: CN=c812c4e98ffa111c5eca892d753c4f3805814a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:35:97:9d:6a:21:44:3d:a0:f7:68:76:b5:
66:e1:43:dc:c4:da:7b:45:0d:c0:2c:49:af:43:81:
d1:0c:78:56:36:bc:17:95:7b:ea:09:31:24:03:32:
90:50:71:8f:fd:a9:d9:ca:cb:d8:9e:3f:00:95:13:
f0:47:89:ce:f1:59:49:99:60:b0:31:be:4b:5f:0a:
fe:e8:a4:c4:45:e7:06:19:5d:c6:8c:e7:5b:38:48:
48:37:f9:0d:f7:2c:2c:7b:6a:00:88:5c:c5:60:05:
60:88:8b:4d:2e:48:51:08:da:ed:7d:e1:67:b6:ca:
86:93:1a:da:57:4d:cb:27:de:7a:66:1e:fe:88:21:
f5:d8:46:3c:71:f8:f7:38:e7:bb:b4:06:a1:38:bd:
19:ae:1b:e1:1d:ef:4d:0c:96:5d:90:9e:07:bf:23:
4a:33:de:93:2f:03:54:00:85:73:48:6d:48:2f:a6:
ac:25:02:97:11:bf:0e:20:ff:7a:3c:74:f7:2c:79:
06:32:91:d2:cb:42:3e:ed:ff:a2:54:15:10:62:0c:
0c:1f:fc:d4:e3:37:17:d3:c6:d7:9a:df:89:6b:66:
b0:ec:92:61:98:21:82:d2:32:d9:a5:67:39:10:f2:
7f:9f:7b:3c:b3:16:be:17:a1:c2:bc:55:19:a7:ff:
71:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:12:C4:E9:8F:FA:11:1C:5E:CA:89:2D:75:3C:4F:38:05:81:4A:0C
X509v3 Authority Key Identifier:
keyid:AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:34:46:5e:d0:9d:72:72:b1:60:f1:f0:8e:68:7e:b1:cf:a7:
be:fc:c0:3c:b4:ba:66:86:76:f3:24:83:d0:86:52:8c:60:6c:
49:19:86:be:ac:37:52:6b:20:65:2d:26:56:44:a1:98:ab:34:
48:a2:61:e9:d0:c5:e9:43:43:ac:6d:d1:56:b6:c2:a8:e4:9b:
a4:a0:79:5d:3e:48:e9:48:ed:17:a0:c3:ac:5a:e1:f4:95:a3:
d8:85:56:78:04:0c:50:59:10:73:de:ee:14:ad:e4:8d:91:84:
e8:da:e9:f6:ec:da:97:a4:73:a1:a0:f8:e0:2d:7d:cf:ae:60:
1b:6b:57:75:29:87:0c:3a:8f:19:92:37:fd:eb:e2:19:07:85:
4c:98:44:c8:ab:44:6b:83:f5:13:1b:39:7c:69:4a:33:62:5b:
81:d1:5e:a0:2b:34:f1:ab:60:0d:6f:98:0e:dc:7e:f0:46:d2:
5d:dd:19:a0:12:7d:0f:f6:0b:a2:79:c0:8f:3e:f3:33:37:97:
dd:f1:30:ce:2f:84:1b:a7:90:7b:e8:45:5f:98:76:76:f7:b8:
20:cc:c3:15:37:39:64:ab:2f:bd:84:19:10:b6:12:48:aa:7c:
43:73:12:e0:25:d6:1b:bf:6d:5a:93:e0:f6:47:d5:7b:a5:d1:
33:09:7f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:05:41 2025 by rpki-client