Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
File: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft (raw, json)
Hash identifier: gsRtkzZS3S+yRbioThkZalsF34Kawk5gN7yUor4AHmE=
Subject key identifier: F2:C3:65:CB:97:DF:01:F2:71:13:FE:0E:DF:16:CF:36:CD:6B:AA:2F
Authority key identifier: 41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
Certificate issuer: /CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Certificate serial: 0196BD80F7F56E227914485AE3998531D49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 04:01:07 +0000
Manifest this update: Sun 11 May 2025 04:01:07 +0000
Manifest next update: Mon 12 May 2025 04:01:07 +0000
Files and hashes: 1: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl (hash: gD7dgRPMJTGxIFD7sHFxg0g4myeKHskOuxBKbPDuUn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:f7:f5:6e:22:79:14:48:5a:e3:99:85:31:d4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Validity
Not Before: May 11 04:01:07 2025 GMT
Not After : May 12 04:01:07 2025 GMT
Subject: CN=f2c365cb97df01f27113fe0edf16cf36cd6baa2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:d8:95:08:32:cc:63:fb:65:f9:4f:17:5e:
7b:23:a3:6f:06:fd:44:5c:25:d0:e1:42:7b:0f:6c:
32:6b:25:2c:c0:f1:bc:05:9c:82:db:a0:2c:b9:50:
35:2c:60:b7:ad:df:9f:60:4d:2f:f2:4c:1d:63:ad:
00:66:5a:51:07:e3:01:b3:cf:77:41:ae:21:8f:90:
6e:3b:65:dc:58:29:1b:eb:ec:88:01:4b:0c:26:ae:
f3:df:32:8a:26:24:d6:98:39:42:ea:4d:0f:fb:b7:
b4:5c:9c:2a:a0:45:3d:3e:df:32:6d:e2:15:62:1a:
42:4f:6e:5c:ad:7d:70:b1:07:29:bb:22:91:a2:7c:
6e:f9:dc:03:5c:db:dd:34:99:5b:53:34:63:a3:f2:
28:f4:c9:bf:e2:dc:01:52:d3:cd:77:39:dd:54:c8:
6f:53:13:c4:70:72:3e:d4:ac:8a:bb:5e:26:ba:7c:
7b:44:88:52:64:f6:25:00:12:20:39:c8:af:3f:fc:
bc:3d:87:99:e0:82:f5:1f:a0:ed:58:0c:8f:c1:70:
92:85:d7:74:f0:49:92:88:a3:93:f4:d6:26:c6:d4:
e2:af:0b:80:27:40:78:98:6a:84:f2:26:3b:12:29:
e9:5e:97:0a:a4:70:f8:6b:33:29:b9:2b:fa:3a:c0:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C3:65:CB:97:DF:01:F2:71:13:FE:0E:DF:16:CF:36:CD:6B:AA:2F
X509v3 Authority Key Identifier:
keyid:41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ac:eb:97:5a:0b:5e:43:ca:0e:d2:1f:e0:e0:38:a9:4c:cf:
f4:22:2f:d2:31:00:ec:73:5a:a3:80:78:ed:6b:f7:44:e5:62:
ef:32:3c:4c:63:39:a8:53:1b:59:74:4b:3a:38:54:7f:df:cc:
96:76:47:66:31:45:51:0e:64:ae:61:dd:29:55:05:4b:39:a0:
f4:41:62:a6:14:ba:5f:2e:ab:14:40:3c:56:41:c2:d2:88:12:
9f:41:26:7b:78:84:0d:c9:6d:2f:00:8f:39:51:b2:12:30:85:
21:83:76:74:5c:69:e1:95:7d:f9:0f:56:03:89:f1:c8:07:94:
0f:44:b1:3e:9f:8e:b3:cf:f8:f7:af:50:42:54:b1:c5:0f:b5:
99:0a:d2:79:34:59:4b:2d:47:d5:d4:ce:b4:68:6c:c5:67:f9:
00:45:3b:3d:d6:29:ab:42:af:e4:0e:c7:20:98:ff:8d:26:1a:
24:b0:7a:3d:30:93:b3:89:b5:1e:0c:c8:52:d5:2d:80:4f:9e:
d9:d0:e8:81:8a:73:91:61:08:52:fc:ea:ad:2b:6b:e2:4b:9b:
a4:9a:61:22:66:a7:ce:19:93:2c:fa:77:03:4d:03:92:3c:79:
e8:9b:25:3a:9b:30:21:54:6a:a6:03:7a:ef:ac:43:b6:9f:a9:
8d:27:c2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:29:20 2025 by rpki-client