Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: /jgIpuSZIf3FvYQ/QSPhFUZAVAvy2l/6T7h5IX7x4w4=
Subject key identifier: A2:29:A1:BF:02:86:86:9D:E6:BA:ED:DD:37:03:32:FA:1F:1A:B7:D9
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 0196CBE173EDCC307EA64A9F6FF63E9097C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 0FD2
Signing time: Tue 13 May 2025 23:01:12 +0000
Manifest this update: Tue 13 May 2025 23:01:12 +0000
Manifest next update: Wed 14 May 2025 23:01:12 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: ZkU5uJtLRQRTROGQ+bqNJPX5T2VmMPcXDbvyCejyIXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:73:ed:cc:30:7e:a6:4a:9f:6f:f6:3e:90:97:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: May 13 23:01:12 2025 GMT
Not After : May 14 23:01:12 2025 GMT
Subject: CN=a229a1bf0286869de6baeddd370332fa1f1ab7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:13:36:ec:3f:7c:ee:8d:fe:e4:9a:b7:98:
3d:a4:8a:08:bd:4c:a3:d2:65:04:4c:2a:49:64:3e:
7a:d5:ca:27:ee:7a:68:75:96:01:7b:aa:15:1f:fb:
f4:08:b5:d5:c3:63:2f:09:8e:6d:98:39:95:e5:f8:
9f:52:53:ad:ea:35:e4:3a:27:47:e8:3d:f9:0f:c6:
01:02:f1:2f:5e:78:d3:75:3c:0a:81:82:b7:d3:c0:
9d:2a:31:01:51:b3:a4:e5:ed:db:0b:ec:80:59:2b:
55:db:45:c5:ea:90:0c:bb:61:c0:09:a7:ab:4b:51:
60:ce:f0:57:29:65:2e:38:a1:8f:1c:bd:bd:98:6b:
c2:d3:25:e1:b9:8e:3a:2a:ae:30:55:b7:35:19:bb:
e7:0c:ab:81:f3:02:e3:55:6b:93:e2:bb:4e:55:6b:
77:d1:e9:32:8a:62:df:eb:9c:e1:d8:5d:e3:51:9b:
9e:99:01:a0:e9:cf:58:92:55:b4:33:44:04:e5:58:
d9:3a:d2:fa:72:a9:67:8a:36:87:8f:eb:10:ad:d9:
c0:00:2e:13:1b:b0:82:f9:bf:97:51:d0:ec:b4:04:
e9:4b:c7:05:33:8e:e4:a7:63:4f:2c:e5:88:27:b9:
ac:67:20:4d:f2:c6:e3:43:34:5f:63:2e:e8:92:5f:
62:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:A1:BF:02:86:86:9D:E6:BA:ED:DD:37:03:32:FA:1F:1A:B7:D9
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:12:12:04:12:09:db:10:02:6d:61:d3:c7:0d:92:bc:77:a7:
7b:3a:32:63:8d:05:7b:f2:47:63:3c:ad:a1:68:80:a6:66:09:
9e:61:5d:62:a8:34:59:0c:72:35:71:6a:57:5b:b6:92:82:3c:
17:e4:13:0a:4d:f3:2e:a6:1c:b2:ed:c2:a9:39:49:1f:ac:d4:
cc:73:0b:15:4e:77:b7:1d:00:d5:23:5f:35:cb:7e:92:b0:2e:
34:d1:45:84:ed:52:8b:f0:6b:a3:cf:9d:90:f2:1b:40:c0:6c:
d9:99:b9:24:6b:54:03:bd:7a:6d:7e:40:c7:f8:d7:e9:63:a1:
81:ed:57:bb:1e:64:bc:28:6e:8b:0a:75:ba:11:c5:5b:f1:bf:
3f:c2:11:ab:25:4c:0c:72:36:aa:72:ba:85:99:7f:5f:3e:56:
d5:19:83:d5:1c:0e:86:86:53:32:3a:21:6e:65:6b:ad:24:f5:
84:07:52:b3:df:3f:6e:b7:c5:77:c7:8c:3c:fd:53:03:8c:44:
55:fd:4f:43:fb:92:d4:65:61:fa:63:c8:f1:e6:45:1c:9a:92:
98:e1:cb:de:b8:8f:39:27:b8:18:43:a2:40:6f:a2:83:b5:e1:
e1:b1:ee:82:40:3b:39:c6:cb:8c:26:0f:d3:68:a7:c8:e5:e6:
53:7c:1d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:57:07 2025 by rpki-client