Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier: cp3axsEHCpz1l9VUkqUjrxoB+6x+6tsUuqB6harQtkY=
Subject key identifier: 6A:2F:5F:EB:31:0B:83:48:CC:64:B4:1D:1B:D9:7C:8F:B0:F2:B6:B0
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial: 0196A6547C5F70B4E51FF0248CEB289CBC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number: 0914
Signing time: Tue 06 May 2025 16:01:16 +0000
Manifest this update: Tue 06 May 2025 16:01:16 +0000
Manifest next update: Wed 07 May 2025 16:01:16 +0000
Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: zUxPg+H9IvLhqon7+au2fLwUCNSmbPk1VYcFQLcWkdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:7c:5f:70:b4:e5:1f:f0:24:8c:eb:28:9c:bc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Validity
Not Before: May 6 16:01:16 2025 GMT
Not After : May 7 16:01:16 2025 GMT
Subject: CN=6a2f5feb310b8348cc64b41d1bd97c8fb0f2b6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:bd:2a:63:83:97:35:39:40:56:99:b4:29:
67:4e:df:a7:49:d3:3e:43:ba:bc:4d:51:9a:6a:a0:
a2:2a:58:83:28:b5:da:a9:e2:c2:e8:4d:b1:48:54:
c2:bc:49:51:bc:d9:6d:62:4a:06:7e:d1:7d:bb:d1:
49:27:50:0a:a4:8b:be:61:03:30:80:fd:41:fe:65:
d8:e1:4b:dc:01:28:8f:3a:1b:e1:c6:75:18:b8:94:
24:06:fd:00:63:99:6f:d6:a3:b5:bb:f6:f8:56:96:
86:23:90:06:2c:cb:73:e4:77:92:48:c0:d3:8f:74:
46:62:88:43:06:a3:e3:f0:c3:9e:38:18:e2:0f:99:
ca:58:3a:a7:87:2e:6c:77:95:5c:e3:6d:b8:a9:7c:
8b:c7:4e:d8:3e:13:ef:b1:3a:c3:a0:c1:15:7e:1a:
64:26:96:76:d8:0e:0b:33:85:b2:3d:6f:e7:38:5b:
77:95:f2:57:26:3d:4d:a9:fe:25:66:77:e6:d9:34:
e9:d0:af:76:7e:2f:80:86:1f:48:ef:9e:82:a7:12:
8b:5e:6a:de:d3:f2:ca:bd:ca:71:35:ff:5e:65:f8:
df:61:6a:1d:a1:fe:5b:fb:a0:a7:12:80:a7:b5:15:
2f:a0:3d:3a:f5:67:74:c0:4e:4e:fc:26:57:47:10:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2F:5F:EB:31:0B:83:48:CC:64:B4:1D:1B:D9:7C:8F:B0:F2:B6:B0
X509v3 Authority Key Identifier:
keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8e:0a:c4:29:d5:17:88:ba:ef:b2:09:b4:47:c9:77:6f:21:
fa:ae:f0:36:b4:8a:43:35:c1:ec:f5:dd:ea:94:3e:1e:f5:f3:
25:59:4e:d7:9b:6e:25:3f:eb:a8:c1:21:d7:58:10:6c:51:ca:
c1:9d:a2:20:f1:d9:06:5a:40:ca:5a:a1:35:26:6a:e7:76:7f:
e6:30:18:c6:7d:aa:65:5e:51:22:a1:3d:ed:50:1b:80:ba:38:
d2:8d:e5:d9:4a:d1:81:29:55:c2:76:d9:f1:1d:a9:af:e5:b9:
da:aa:0b:d7:a6:de:8f:ac:db:3b:c7:5f:c0:3d:72:4b:f8:7f:
c7:1e:7f:32:57:a7:77:c8:d2:21:04:9a:df:b1:75:72:13:9d:
e3:f9:de:63:6c:ac:56:ad:30:75:98:da:0f:07:bd:6b:e9:fa:
a2:51:d3:75:36:3b:48:0c:ff:75:c6:83:f0:bc:f8:e8:fc:ac:
50:e9:e6:0e:51:09:da:7e:08:96:aa:9e:b7:df:df:7a:23:4d:
38:bd:42:1a:bd:c1:15:ff:a7:39:23:ca:64:ff:df:dd:b3:49:
3f:40:5e:12:5d:15:85:ea:3f:ea:df:f9:bf:fd:53:8f:b1:4c:
13:d8:c4:b8:a3:79:db:d2:00:fb:84:0c:e9:cd:8c:86:a8:46:
db:3f:24:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:14:04 2025 by rpki-client