Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
File: QucVYSpqaXFPXj8uTLxI_OhKb1I.mft (raw, json)
Hash identifier: 6ayMkm7hASFafBhWyA90CFlss+5tWrjmEbfIgdZIop0=
Subject key identifier: 62:C7:9F:10:30:61:42:F5:6E:AD:FC:C5:01:27:74:31:51:DB:2E:5F
Authority key identifier: 42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
Certificate issuer: /CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Certificate serial: 01967C459A692C108C84A4BD3431B8AF72E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 12:00:58 +0000
Manifest this update: Mon 28 Apr 2025 12:00:58 +0000
Manifest next update: Tue 29 Apr 2025 12:00:58 +0000
Files and hashes: 1: QucVYSpqaXFPXj8uTLxI_OhKb1I.crl (hash: QZe4iq9S/qp0mEH6er9/yn0g9+ny98a5W1Uiy1GJXFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:9a:69:2c:10:8c:84:a4:bd:34:31:b8:af:72:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Validity
Not Before: Apr 28 12:00:58 2025 GMT
Not After : Apr 29 12:00:58 2025 GMT
Subject: CN=62c79f10306142f56eadfcc50127743151db2e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:08:54:57:07:7f:b7:04:f4:76:ef:a3:de:83:
44:2a:bf:07:1a:5d:d7:ec:ef:0c:3d:34:f3:e2:d4:
a6:98:50:02:f3:b0:5d:31:37:3b:25:52:4f:5a:9e:
87:42:2a:67:83:b4:08:89:e3:75:b0:44:51:3a:0e:
13:d1:5e:5f:fc:d3:17:14:14:3a:3f:17:55:85:14:
7e:9e:a1:8c:27:c9:85:57:2f:6e:0d:d9:2a:a9:8a:
fd:07:e5:2f:46:9a:9b:03:47:8c:9d:11:a6:ba:4b:
3a:62:15:f8:9b:c6:4f:d6:19:8c:3a:99:cd:1e:ea:
d5:83:84:da:c7:d7:99:99:e7:30:bb:df:5b:75:90:
7c:ed:fa:01:c5:70:f0:e3:73:92:6e:af:0c:cc:42:
9c:6e:44:35:9e:dd:1f:40:98:89:a9:86:f1:29:ca:
9e:a2:7c:a1:a7:65:27:a4:5e:4c:a6:1b:d7:75:f3:
c0:da:d1:79:c3:05:74:bc:41:fa:0f:fc:fe:cf:98:
50:4f:4a:f3:e8:a1:46:eb:24:f8:90:cc:7e:8d:1f:
10:c2:80:a2:46:06:cc:b3:c9:0d:d6:78:88:c0:8d:
41:bc:4f:46:43:78:03:ee:48:d0:a3:69:68:2e:16:
37:33:9a:b9:73:b8:68:7b:52:67:9f:73:85:ff:15:
cc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C7:9F:10:30:61:42:F5:6E:AD:FC:C5:01:27:74:31:51:DB:2E:5F
X509v3 Authority Key Identifier:
keyid:42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:11:32:83:0e:b3:c7:70:2b:61:6d:27:a2:fe:1d:74:45:86:
7e:49:50:cc:5a:c7:7a:cd:48:96:41:b8:5e:d7:c0:af:99:b7:
8e:a1:07:c4:ac:39:12:2a:3c:49:71:bc:de:e3:96:96:09:4d:
75:59:b3:c5:96:24:be:37:dd:f1:a8:02:95:46:0e:5b:7f:bd:
fe:16:94:ba:3a:61:a0:e4:5f:a1:92:bf:ae:7c:14:3a:9a:8a:
2d:4a:8e:13:1d:2f:d8:f8:b2:f7:51:58:ea:b1:08:33:3e:49:
cc:61:0d:d7:ee:3a:82:41:a0:87:0f:7d:76:87:20:92:36:d2:
79:77:76:c6:55:c8:59:a2:e6:a1:02:2b:d7:b2:9a:fc:d8:21:
fc:15:19:e7:06:9c:9c:6c:c9:19:29:f9:04:ef:7b:8a:30:5a:
b7:67:a2:0e:99:fd:9f:6d:58:b0:e6:a1:b7:c6:fc:91:e1:38:
5a:ed:8c:78:00:27:15:5c:83:22:1e:d8:fa:c5:6a:5e:db:75:
2f:c6:bc:a2:a9:62:fa:b0:55:7c:2e:2e:5a:76:92:74:d9:13:
84:62:62:24:9f:26:e8:14:e0:39:88:b9:18:a6:64:10:bd:60:
5d:f9:3c:6e:c1:a0:86:3a:e4:17:e1:a3:7a:44:f3:52:f0:cd:
f1:58:1f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:27:02 2025 by rpki-client