Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft
File: QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft (raw, json)
Hash identifier: B3awpsb5MUutbx7ElXgguyMyl/d+M/SA9BuiDJ7KrKs=
Subject key identifier: B8:73:8D:CF:06:EA:4D:1B:20:17:F0:C0:64:80:1C:4D:C2:17:50:C4
Authority key identifier: 41:78:5C:B5:FC:6B:40:FD:F1:4F:72:A6:D2:5F:41:43:C1:7C:31:7C
Certificate issuer: /CN=41785cb5fc6b40fdf14f72a6d25f4143c17c317c
Certificate serial: 0196D2BEF5CF02526731D177E59F00672924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXhctfxrQP3xT3Km0l9BQ8F8MXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft
Manifest number: 14CF
Signing time: Thu 15 May 2025 07:00:52 +0000
Manifest this update: Thu 15 May 2025 07:00:52 +0000
Manifest next update: Fri 16 May 2025 07:00:52 +0000
Files and hashes: 1: QXhctfxrQP3xT3Km0l9BQ8F8MXw.crl (hash: YLuPedq2+UrujlEnC0Og12v3zpddrAQP99kzg+v8dMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXhctfxrQP3xT3Km0l9BQ8F8MXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:be:f5:cf:02:52:67:31:d1:77:e5:9f:00:67:29:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41785cb5fc6b40fdf14f72a6d25f4143c17c317c
Validity
Not Before: May 15 07:00:52 2025 GMT
Not After : May 16 07:00:52 2025 GMT
Subject: CN=b8738dcf06ea4d1b2017f0c064801c4dc21750c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:b5:cf:d9:30:a5:df:51:9a:2e:31:76:af:
2f:f9:6a:5d:d9:f7:2a:21:fd:8b:5f:08:fb:46:17:
73:06:e2:cd:14:bf:8b:3a:94:4b:a1:88:1e:9c:f4:
ec:bc:38:28:7c:1a:f1:b0:55:de:a7:7c:c1:28:19:
ee:b4:0c:b2:94:e9:75:01:43:86:d8:b7:b2:58:0c:
ad:71:99:60:52:e2:16:ae:0c:a2:f2:b7:a6:78:5e:
c1:28:ab:25:2c:9b:f2:21:4f:9b:75:29:ba:33:62:
20:08:99:29:24:cb:88:a0:7c:44:42:85:6d:c3:31:
75:b1:aa:d4:6b:a8:e8:da:e7:b8:2b:68:44:48:b4:
94:d1:18:10:c5:2a:46:81:d4:49:87:35:45:24:26:
e6:41:ad:2d:ef:ba:45:6c:15:92:30:73:e3:36:6a:
24:ce:a3:0b:dd:e5:85:aa:a1:45:af:66:8e:87:99:
6a:f8:ae:ba:e6:d9:59:2c:fe:56:9a:bb:4d:de:3d:
a8:3b:8e:a3:ce:57:69:ff:8d:59:43:69:20:8d:6c:
cd:37:ba:4f:c4:a6:e2:03:bb:cb:52:98:93:35:5f:
dd:74:7f:e9:ab:09:2a:07:a9:78:75:db:0e:cb:b9:
92:2c:b0:6c:fd:88:fa:fe:07:32:92:c4:5b:46:d3:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:73:8D:CF:06:EA:4D:1B:20:17:F0:C0:64:80:1C:4D:C2:17:50:C4
X509v3 Authority Key Identifier:
keyid:41:78:5C:B5:FC:6B:40:FD:F1:4F:72:A6:D2:5F:41:43:C1:7C:31:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXhctfxrQP3xT3Km0l9BQ8F8MXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:32:0a:df:75:c8:1c:f5:6e:ca:6b:06:77:15:9a:70:05:a0:
1c:dd:c7:a6:c7:92:1b:f4:19:7c:88:cc:33:49:4b:d8:26:0a:
dd:4a:fb:25:f6:3f:5c:7c:6d:6a:22:ac:0f:00:f4:0e:84:87:
93:50:51:6b:ae:df:c0:a7:14:84:14:01:de:c3:cb:64:b1:b3:
1d:87:26:e1:99:75:ee:d9:d6:aa:97:80:ae:29:14:40:de:60:
8f:f6:9a:1c:2e:13:ad:e1:5c:9f:b2:25:ea:7d:2c:06:3b:fe:
1a:9b:15:55:bb:b6:27:ef:c6:f0:8a:05:47:8e:58:72:25:2c:
6b:94:f6:53:f2:06:ba:ef:05:ba:49:3b:20:03:40:9c:9c:d7:
58:35:13:a6:59:88:ff:ba:02:57:d4:b3:e1:22:80:36:c3:a0:
36:fe:25:b0:fb:b2:5d:e3:3c:f3:7b:84:48:19:33:d5:79:b1:
8a:1f:44:b4:26:10:17:29:ba:d4:2f:4f:07:5a:50:68:72:59:
0a:2c:f9:ef:87:b0:94:20:6e:46:52:b6:e1:cc:e3:98:96:ab:
be:d7:a7:a7:90:04:10:37:25:05:6b:a1:92:e8:28:f9:25:08:
c3:fb:12:80:86:55:8d:a9:10:ca:f2:16:68:e6:e4:9c:29:a3:
d1:ca:fe:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 16:58:31 2025 by rpki-client