Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
File: QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft (raw, json)
Hash identifier: q9VoDAJhs6k+98kKKU7N8B1mjmYxy2WjC+5x2mXiSDY=
Subject key identifier: 96:5D:7E:9F:A9:03:BE:83:CA:1F:A3:53:9B:45:9A:19:AE:A6:B8:D0
Authority key identifier: 41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
Certificate issuer: /CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Certificate serial: 0196BDEE165D6D04B806A51459ADC3C98FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
Manifest number: 1530
Signing time: Sun 11 May 2025 06:00:19 +0000
Manifest this update: Sun 11 May 2025 06:00:19 +0000
Manifest next update: Mon 12 May 2025 06:00:19 +0000
Files and hashes: 1: QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl (hash: V0b4jboi0HyPoxFI53S8UO0nzSLj9RIYO2+sE+mp7ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:16:5d:6d:04:b8:06:a5:14:59:ad:c3:c9:8f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Validity
Not Before: May 11 06:00:19 2025 GMT
Not After : May 12 06:00:19 2025 GMT
Subject: CN=965d7e9fa903be83ca1fa3539b459a19aea6b8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:39:71:25:15:c6:5f:d5:bd:c8:e4:2e:f4:ca:
c8:c8:1a:da:e6:cd:bb:9c:24:08:c0:8f:3a:e8:c9:
05:c1:7c:dd:a6:37:05:f6:47:a5:1f:3b:e3:49:03:
a4:38:2c:df:7a:39:cd:4a:9f:17:53:c5:82:b4:7d:
87:e7:99:59:9a:15:3e:07:76:32:e5:36:cb:6b:d7:
99:3c:4e:ba:6e:9f:6a:ab:47:81:9f:76:ff:61:68:
46:e8:6f:12:0e:16:97:c4:d3:81:72:da:46:03:9e:
1d:7d:25:d6:f7:90:a9:cc:55:c8:bb:d7:ad:df:1e:
f1:7f:d2:44:b4:72:5f:1e:e5:ec:70:60:b9:65:fe:
92:2e:66:7e:75:1f:50:c4:ed:20:72:52:ce:39:f7:
7b:68:4a:52:ce:89:17:5b:ed:be:f6:cf:d5:50:33:
d3:57:98:cc:22:93:c7:08:6c:6f:cc:1e:2c:4c:f2:
60:06:5f:a3:c3:d2:58:cf:15:ef:52:00:bf:c6:db:
04:d0:9f:ca:1b:f0:b1:62:96:09:cc:2b:ae:e1:61:
0c:b7:4b:20:ce:70:eb:2e:a1:99:39:ac:9e:7f:a8:
39:bc:98:00:2d:35:57:ec:97:52:56:b2:5a:22:26:
11:11:0b:a9:4e:4f:61:9b:67:e9:a2:3f:bf:05:e1:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5D:7E:9F:A9:03:BE:83:CA:1F:A3:53:9B:45:9A:19:AE:A6:B8:D0
X509v3 Authority Key Identifier:
keyid:41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fb:89:24:f0:03:95:42:9a:13:68:a8:62:66:14:a8:08:8a:
0b:83:af:33:59:0c:f7:cc:a3:fc:18:9d:5b:07:9d:f7:a9:89:
66:04:0c:55:ad:e6:2f:6a:e3:93:3f:73:f7:93:55:34:0a:df:
f8:9a:20:68:d3:b7:7d:83:42:bf:13:8d:4b:06:3b:49:2b:2b:
35:40:18:6d:bb:b4:fe:b8:e5:72:06:56:4f:98:f2:46:06:89:
6d:a2:6c:56:a2:6b:7c:fa:16:a9:fa:ba:e6:c2:8f:a4:e9:b6:
6a:6f:94:a1:a4:72:ba:1c:68:34:ad:28:10:ec:56:37:11:d3:
61:5d:e8:fc:e7:c2:45:a6:df:1c:35:27:56:55:4a:d1:de:f8:
2e:6d:ee:69:bd:b3:3e:09:89:0e:02:6d:b5:b9:4d:0b:37:a4:
ef:5d:f1:71:79:76:38:71:01:91:57:ac:67:4c:49:2d:b7:f4:
bb:e2:1e:c1:d4:f9:62:0a:5d:09:ca:dc:65:cb:62:ab:9f:2e:
8f:f7:de:04:2e:b4:b8:a4:24:d0:09:c3:22:37:e3:b3:cf:f4:
5d:79:3a:1e:17:05:36:06:64:74:b6:42:b3:3d:3d:62:2a:26:
b6:b7:be:1d:c3:74:64:53:93:ab:63:a5:c1:d8:82:b8:bc:9c:
7d:19:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:28:20 2025 by rpki-client