Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
File: qhC-mR89uJUJcQwgZ233qKS_4bQ.mft (raw, json)
Hash identifier: KUbls/dcV/5eAUzBDTzeoYa1xPIrBUg9jzsJZKGbReI=
Subject key identifier: C6:60:38:45:25:38:26:D7:E4:71:7E:23:B3:8A:33:2F:C9:8E:52:0E
Authority key identifier: AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
Certificate issuer: /CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Certificate serial: 0196C2395070B94D3C9E7ACF51B30D0A753C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
Manifest number: 0943
Signing time: Mon 12 May 2025 02:00:58 +0000
Manifest this update: Mon 12 May 2025 02:00:58 +0000
Manifest next update: Tue 13 May 2025 02:00:58 +0000
Files and hashes: 1: qhC-mR89uJUJcQwgZ233qKS_4bQ.crl (hash: 071XE5y22sC8dWm3wD79NsXpVyV0nw1W0g1rP3l9JZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:50:70:b9:4d:3c:9e:7a:cf:51:b3:0d:0a:75:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Validity
Not Before: May 12 02:00:58 2025 GMT
Not After : May 13 02:00:58 2025 GMT
Subject: CN=c6603845253826d7e4717e23b38a332fc98e520e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:8b:3b:cf:e8:50:79:48:ab:bc:f6:d9:64:
b7:16:bb:a1:14:01:19:39:49:c2:90:fb:0c:f1:f6:
c3:e9:18:e0:32:17:9e:88:dc:91:2f:5f:3e:3f:9f:
42:8a:71:1f:f4:1b:e4:f2:9b:fe:16:3e:4b:57:23:
da:42:0c:bd:fb:23:84:f3:1c:15:dc:d1:5f:89:d3:
44:68:9b:b8:96:ef:21:95:a4:fd:00:db:b7:fb:fb:
be:67:30:fb:20:cc:62:4f:d7:e8:fe:c7:91:ef:c1:
39:04:bc:5c:9b:cf:4f:45:2e:82:29:07:12:3d:f7:
4a:45:00:e0:36:0d:47:8e:a2:22:18:d7:f3:70:a7:
8e:06:2a:c0:f3:cf:02:6d:bf:99:25:18:a7:04:33:
d4:c0:71:ff:c4:33:52:ed:ed:a6:a7:84:3b:d8:59:
7d:fe:98:7d:56:55:ee:b3:3f:46:eb:1d:18:57:a9:
f4:9e:f0:2b:f7:cf:cd:76:0d:81:39:f9:7e:ce:ca:
f5:db:d5:a5:32:de:7b:e2:b9:58:90:98:49:f5:2d:
d8:50:9a:ac:8d:ea:78:70:30:39:03:09:c4:c1:08:
21:66:a6:74:1f:6b:ee:1a:8a:7c:a5:0a:98:18:89:
6b:16:f3:84:14:4c:fa:fb:72:a8:bb:79:0b:75:db:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:60:38:45:25:38:26:D7:E4:71:7E:23:B3:8A:33:2F:C9:8E:52:0E
X509v3 Authority Key Identifier:
keyid:AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:70:de:3a:01:8e:15:a3:80:ae:3c:83:fa:51:56:7c:09:19:
9d:fc:e7:d5:3c:ae:39:81:ea:c3:7c:d8:8f:c6:00:fe:3f:5d:
99:97:56:d2:f3:0a:a3:2c:ac:8e:d5:4b:8d:87:cc:bb:dd:05:
36:64:3e:d5:35:08:ac:97:74:b1:fb:59:20:7e:e8:45:c2:49:
74:2d:de:c8:2c:c3:3e:fb:79:d2:eb:00:33:19:b4:11:3c:96:
ca:e2:df:79:da:11:31:a7:fc:dc:81:e7:be:24:42:31:73:46:
f5:98:76:73:17:25:79:9f:72:17:42:79:a2:8f:1b:cd:42:89:
9e:96:75:c1:05:4c:a3:cd:41:51:1f:47:82:b6:4a:e3:f6:66:
3b:61:2e:66:1d:39:21:8b:32:4c:52:bc:c0:c5:06:02:dd:83:
54:5b:d7:3f:5a:27:4f:ab:bd:e5:ba:ac:9e:af:eb:a4:6c:31:
eb:84:0d:18:0f:24:9d:91:61:41:1c:0f:fc:e1:c2:2d:12:98:
c5:f8:42:7c:cd:8b:4e:ee:05:35:61:24:1a:10:ff:ba:a7:a5:
4c:0a:a3:ac:c0:11:ae:1e:a8:2d:57:75:ad:13:da:a5:01:9d:
29:fb:8e:0a:24:64:62:6b:8c:24:8f:db:55:b2:e6:a1:24:4e:
a2:58:ff:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:49:11 2025 by rpki-client