Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: e0DOMx9qF4PiRnI0DSHbqihW/E3fdIRdordGIWd+/CI=
Subject key identifier: BC:43:FA:C8:37:D8:55:E9:3E:0E:4A:81:99:2D:58:8F:CB:54:5C:3C
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 0196D88A3D27F28E31317B657F2761FC2AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 04C1
Signing time: Fri 16 May 2025 10:01:00 +0000
Manifest this update: Fri 16 May 2025 10:01:00 +0000
Manifest next update: Sat 17 May 2025 10:01:00 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: 1S14rYtci2+zYNLjHpm8KYx3q6CEt67oZZkGpjSd8JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:8a:3d:27:f2:8e:31:31:7b:65:7f:27:61:fc:2a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: May 16 10:01:00 2025 GMT
Not After : May 17 10:01:00 2025 GMT
Subject: CN=bc43fac837d855e93e0e4a81992d588fcb545c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:7e:b6:f4:df:49:40:de:ee:d0:2c:cf:42:
5c:6f:3b:98:21:4b:3e:25:0b:74:10:7d:31:08:d8:
e8:93:94:ad:e8:c5:4c:12:37:e8:ea:77:b2:f8:79:
49:2d:fe:52:3b:52:69:9c:9f:72:9d:26:9e:43:0e:
bf:0e:db:7d:50:c5:84:b8:95:65:93:8c:2c:04:bd:
de:69:25:3a:3f:49:43:47:f9:00:03:97:68:d7:67:
cc:6e:69:cc:6d:c5:da:10:05:b4:72:2f:2c:c1:3d:
9b:44:c1:70:c0:b7:79:8f:cf:bf:68:40:cb:26:7f:
ea:90:7f:a3:71:85:6b:28:aa:e0:13:ac:bb:86:9e:
7a:95:e6:7e:3e:98:e0:1b:0c:be:7a:43:7a:08:75:
0f:37:1d:a6:2e:4f:75:f4:e7:2d:dd:68:32:62:22:
50:c0:57:58:b5:2a:c6:86:b0:be:1b:f4:91:2e:59:
f8:bf:a6:6c:fd:5a:8c:c3:e4:ea:7a:43:b1:31:60:
9f:ae:a1:da:8d:f9:3e:66:f9:b7:50:18:ff:79:fa:
4c:9b:05:e0:41:d9:c6:2b:9b:ec:1b:70:86:5d:ec:
39:40:1a:af:ee:66:69:87:0b:75:54:eb:89:22:b1:
cd:8d:ce:6a:d9:03:90:8a:97:b1:63:62:38:92:ab:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:43:FA:C8:37:D8:55:E9:3E:0E:4A:81:99:2D:58:8F:CB:54:5C:3C
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e4:65:4f:c3:c3:0c:95:c8:20:6b:f0:ca:a5:4b:af:46:1d:
96:5c:8f:ea:52:4c:d8:cb:77:a8:b0:ad:cc:21:e3:91:98:83:
6f:ac:cd:49:a7:f4:28:7d:2a:10:7b:99:f7:ef:1f:33:dc:72:
ef:14:2e:1e:6c:b4:99:2c:eb:f9:1f:33:2b:df:62:14:15:83:
32:ab:45:4b:19:cb:5d:e0:d7:dd:50:53:99:eb:b6:4b:8a:80:
e0:85:a6:93:df:44:1b:b4:32:dc:14:1c:a4:14:13:15:78:bc:
dc:46:bb:df:0e:61:5b:7d:53:32:8a:4e:34:6d:be:a9:a8:e2:
4f:3b:9e:6b:e7:8c:66:d6:40:a5:06:d3:cf:cf:1f:00:52:79:
d3:42:08:2e:c5:83:59:45:7b:62:f0:e6:82:5b:69:b3:9c:fb:
ac:8a:c9:ea:7a:ce:21:73:66:31:b0:42:dd:9d:1f:4e:ca:dc:
99:18:f5:82:6e:f4:82:74:f3:ff:b1:1d:af:fb:2a:c0:89:c9:
d0:5a:86:a2:11:98:1f:6d:b1:17:fd:46:46:7c:0b:ae:b4:e9:
1e:e2:4a:e6:37:7b:9b:41:71:00:ca:c6:89:a8:c0:fd:22:dd:
32:96:39:13:ba:98:d0:27:93:db:d0:65:2c:e9:6e:11:ad:32:
10:43:30:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 16:50:26 2025 by rpki-client