
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
File: qif1ErChAmXfKzRvFDpkXDgnQr4.mft (raw, json)
Hash identifier: JrP7R8Ljj89jbUSspg2sYHLk9lCkoLtZ13qRmApHcug=
Subject key identifier: 4C:01:34:74:93:52:9F:4D:46:0B:BE:87:29:C4:FB:6A:91:7F:C9:D5
Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Certificate issuer: /CN=aa27f512b0a10265df2b346f143a645c382742be
Certificate serial: 0196A4651B3555F26CF771AD6E45FB90F1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
Manifest number: 0538
Signing time: Tue 06 May 2025 07:00:11 +0000
Manifest this update: Tue 06 May 2025 07:00:11 +0000
Manifest next update: Wed 07 May 2025 07:00:11 +0000
Files and hashes: 1: qif1ErChAmXfKzRvFDpkXDgnQr4.crl (hash: v4MuCGH34zwxgH/uYrzKm92P8WjRpG2yQhQ87SlkvlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:1b:35:55:f2:6c:f7:71:ad:6e:45:fb:90:f1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be
Validity
Not Before: May 6 07:00:11 2025 GMT
Not After : May 7 07:00:11 2025 GMT
Subject: CN=4c01347493529f4d460bbe8729c4fb6a917fc9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:f8:97:f2:9b:c2:17:6c:fb:5d:74:24:e5:
cc:63:51:fa:76:8c:bb:06:ce:e7:74:a2:e6:54:18:
f6:38:1d:ee:f6:7d:06:06:e1:41:17:41:5c:62:77:
d4:47:84:2e:b4:3e:a5:25:5c:58:21:0f:88:41:e8:
52:be:54:69:0c:95:6b:30:7c:f8:af:3e:9a:60:95:
8e:de:f2:d1:c9:d7:b5:34:e8:d1:27:46:bc:6b:5c:
b0:2b:ee:d1:31:4c:77:6b:32:09:ae:4b:2e:85:89:
86:b5:d8:6c:2d:ce:c8:8b:70:7a:c3:5b:31:d0:56:
61:ea:d5:33:75:e8:63:65:8c:8b:39:b1:c4:13:86:
5f:b2:ae:5e:2b:01:ff:c1:52:04:f1:40:58:56:d3:
21:b5:51:b2:fb:e7:2d:35:bb:6a:3a:b0:b2:1a:3e:
7a:94:23:4e:42:a5:29:41:22:5b:6b:67:84:cd:b2:
52:cc:a4:02:c6:3e:1d:2e:ca:ac:09:77:f7:c2:bb:
b1:d2:46:2e:c6:c4:ad:9f:fb:52:87:76:f2:d5:10:
05:b0:b0:a1:6e:1c:b2:d6:7f:06:dc:c8:ec:3c:5c:
4e:40:5c:c8:e8:20:74:54:bd:46:0d:e3:7c:96:8b:
7e:d4:cf:eb:e4:b3:e2:a5:4e:4d:21:0c:1f:5f:91:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:01:34:74:93:52:9F:4D:46:0B:BE:87:29:C4:FB:6A:91:7F:C9:D5
X509v3 Authority Key Identifier:
keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c2:46:4f:fc:b9:f6:98:3b:a1:bc:7a:7e:07:ed:44:75:0d:
02:d3:b2:2f:b6:fc:37:53:5a:7e:a4:2e:db:29:8f:b5:c1:1f:
e5:c6:32:02:bc:b9:43:45:c7:ea:10:55:62:c8:18:5e:ba:14:
05:d2:e4:e3:c6:1a:a0:49:c2:c1:90:17:53:13:4a:bf:90:89:
b3:c0:eb:e2:5c:8d:4e:99:9f:cd:19:09:9b:a1:fd:fc:c7:49:
60:0a:36:3a:44:cd:fc:cb:de:74:a1:e0:e4:c3:8f:c3:13:43:
da:88:65:15:7c:fa:fb:d7:04:42:48:28:2d:37:e8:ed:e0:85:
19:09:b0:10:69:08:03:40:3d:a8:d1:0b:de:61:92:2e:be:9a:
30:46:0b:74:68:64:65:1e:97:42:8e:e9:2b:9e:34:2d:93:f9:
c7:ef:3a:e8:6b:b5:1e:e5:33:89:47:f6:05:f3:10:b6:66:5f:
52:fb:1a:3b:27:15:a1:88:a8:c3:2f:07:2b:da:c4:15:bf:d4:
cb:0c:4c:99:61:2c:04:8a:b2:bb:53:70:69:c5:be:50:33:00:
e0:95:d7:11:db:14:fe:a5:25:9f:4c:cd:ad:ae:07:bd:25:1d:
c8:3b:62:64:61:d8:73:7b:93:9e:8e:80:65:4a:7d:8a:19:20:
e5:bf:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:27:25 2025 by rpki-client