Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
File: QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft (raw, json)
Hash identifier: 7rPvv3HiGNcfNYcQROZZIJqxeKfYYaJwfQ7zJp+X8t4=
Subject key identifier: B1:41:F2:EF:48:D7:48:C2:19:86:50:B9:FF:2E:5E:82:A9:17:8C:29
Authority key identifier: 40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
Certificate issuer: /CN=4036a64f1a066babb8beb864e695fa997692dd48
Certificate serial: 0198A04DE388D547CEC35648BB57C394031F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
Manifest number: 1088
Signing time: Tue 12 Aug 2025 22:01:55 +0000
Manifest this update: Tue 12 Aug 2025 22:01:55 +0000
Manifest next update: Wed 13 Aug 2025 22:01:55 +0000
Files and hashes: 1: QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl (hash: SDonBqGbJbqiUDqU59coAnuvaZLh/2E2wEvXnud/6ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:e3:88:d5:47:ce:c3:56:48:bb:57:c3:94:03:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4036a64f1a066babb8beb864e695fa997692dd48
Validity
Not Before: Aug 12 22:01:55 2025 GMT
Not After : Aug 13 22:01:55 2025 GMT
Subject: CN=b141f2ef48d748c2198650b9ff2e5e82a9178c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ad:21:72:ed:bf:e6:68:f7:57:95:51:17:a1:
e1:ad:a7:44:77:12:dc:c9:24:c4:36:7f:0f:40:7e:
36:00:ed:d3:fc:a4:0f:06:db:00:9d:ce:af:e7:88:
37:d7:04:5d:f6:0a:ab:a6:41:bb:aa:df:bc:6b:c7:
d4:55:ca:3d:bb:cd:a1:a5:04:2f:79:cd:1d:42:da:
a4:61:b6:7e:6a:03:70:1b:08:65:a2:58:50:7b:98:
92:02:77:67:3b:56:00:ea:82:33:8c:1a:76:72:fa:
97:1b:b1:80:37:b4:ad:2f:0c:e0:75:d9:60:7c:1c:
44:5e:02:f7:4d:cc:7a:27:13:15:ea:da:6c:da:d0:
f2:eb:b2:2f:6e:e7:53:a5:f5:01:26:2e:43:ce:d6:
b6:9d:d8:19:8c:ca:88:12:4d:b2:8b:75:b2:11:ef:
e0:73:7a:63:b3:89:f2:df:41:02:61:2e:01:c4:0d:
62:6e:2d:40:9c:17:6e:4c:4f:df:dd:72:5f:14:90:
e2:4c:8f:d6:90:0b:b9:cd:7b:09:7c:81:fb:d2:4c:
4d:e4:79:32:7e:05:65:24:e2:0f:5e:9a:f5:3b:6e:
2c:64:ba:31:c1:24:1e:45:b7:8a:ab:8b:c2:c9:2a:
99:f0:70:29:07:aa:ac:d5:6e:31:ea:77:61:b9:b7:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:41:F2:EF:48:D7:48:C2:19:86:50:B9:FF:2E:5E:82:A9:17:8C:29
X509v3 Authority Key Identifier:
keyid:40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2f:60:9c:87:0b:43:a0:6b:f5:bc:78:b1:b9:c8:62:1a:6c:
c3:e2:44:2c:22:b4:04:60:8d:fc:78:12:00:5c:c9:be:ca:84:
13:7c:f1:0c:d3:e9:28:11:6d:95:e5:e9:fd:7c:14:51:9f:06:
04:72:e2:63:6b:c5:06:40:b4:65:e1:8f:e8:a0:1d:11:01:43:
1a:26:07:c9:d0:ec:16:e6:7b:56:21:b8:ac:b8:47:4c:7d:4a:
68:92:59:cd:7f:c9:54:b9:23:aa:b4:0f:7e:ae:eb:64:f6:b2:
ee:fb:af:e9:e9:7b:a7:b8:dc:94:d8:91:68:e4:d1:8f:c0:e4:
8d:bb:50:8a:58:8c:23:39:cc:16:a7:cb:f9:ba:88:ce:44:f9:
bf:b7:c5:20:db:d9:8e:5f:28:a0:4e:ac:a5:1c:e8:69:a2:ed:
a9:0a:d8:8b:42:20:87:e1:ba:d7:40:de:e7:87:9e:4a:bd:45:
1e:ea:9a:65:97:12:87:ca:8d:68:f6:68:7a:9f:ac:c4:56:83:
7f:c0:dc:01:1c:98:5e:af:b8:64:ab:15:10:cb:bd:94:0c:94:
52:0d:4c:af:a0:35:8d:8b:42:45:f0:9e:9a:d2:b8:83:dd:b2:
07:a9:3a:6d:b8:fb:85:03:d7:4d:70:53:bc:8a:d3:d0:a9:1d:
3b:15:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:30 2025 by rpki-client