
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
File: QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft (raw, json)
Hash identifier: L3uv5JJbkPg/vuZHv2zsQCaaWcsJ6JiJPDTaiUScv/I=
Subject key identifier: 00:94:99:D5:B5:CA:78:98:94:DC:79:83:31:30:E6:A2:C4:BE:1D:21
Authority key identifier: 40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
Certificate issuer: /CN=4036a64f1a066babb8beb864e695fa997692dd48
Certificate serial: 019679E9F0467AE4B124749037ED34B55F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
Manifest number: 0F6B
Signing time: Mon 28 Apr 2025 01:01:36 +0000
Manifest this update: Mon 28 Apr 2025 01:01:36 +0000
Manifest next update: Tue 29 Apr 2025 01:01:36 +0000
Files and hashes: 1: QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl (hash: NLPIw2+LKL+OdMx5CIUG5J10YYCOuJMYHEvi7Ra/BSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:f0:46:7a:e4:b1:24:74:90:37:ed:34:b5:5f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4036a64f1a066babb8beb864e695fa997692dd48
Validity
Not Before: Apr 28 01:01:36 2025 GMT
Not After : Apr 29 01:01:36 2025 GMT
Subject: CN=009499d5b5ca789894dc79833130e6a2c4be1d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:c8:ff:b9:0e:1d:2e:d6:b5:88:27:03:1a:
ff:bb:4f:66:ba:ee:08:b7:f1:e1:2d:bd:77:1e:43:
d8:f7:ad:4c:7d:a4:15:be:cd:c9:ce:7d:5f:09:7b:
0a:10:92:7c:ee:0c:d1:4b:c8:b3:9b:08:48:1a:b3:
ac:72:27:6e:a7:4f:3b:50:e0:cc:40:0c:d9:b5:c3:
20:ba:50:fb:b4:a7:d9:ca:fc:8b:b3:ce:5f:9a:aa:
a8:53:54:cf:96:bd:2b:5d:23:b9:b3:26:a5:88:e0:
66:95:ac:9b:84:2f:bf:0e:66:c7:a4:7e:b5:3d:d5:
5a:66:50:9a:e3:5b:d5:b8:ea:5d:0a:11:d0:c4:cb:
f0:b4:a9:33:4d:02:38:1c:e6:c2:b6:fe:ef:03:7f:
0f:ed:8e:ed:cf:c6:87:51:6d:c4:f2:1a:19:83:3d:
ef:f8:ad:b2:6a:7e:a0:b0:86:8f:1e:c8:a5:61:67:
61:45:dd:99:75:7e:9f:4c:7b:09:69:84:50:a3:58:
85:00:e2:04:62:c0:d5:19:4f:7a:f3:7a:1a:5c:fb:
db:d4:f2:3e:38:2b:e2:9f:95:d7:c3:75:46:fe:0d:
f0:76:e8:f3:06:d7:97:28:38:92:2b:6c:fa:61:04:
5e:9f:07:a0:48:28:a2:58:06:6a:fb:e4:65:ea:3d:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:94:99:D5:B5:CA:78:98:94:DC:79:83:31:30:E6:A2:C4:BE:1D:21
X509v3 Authority Key Identifier:
keyid:40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:56:25:ae:8d:3a:dc:bf:6e:35:ae:29:f3:f0:33:d4:1e:42:
36:68:6a:24:45:63:68:3b:6d:47:a4:93:d6:76:ca:8b:4d:25:
80:9a:9e:58:9e:d0:86:8f:5c:6a:38:ab:11:1b:44:88:63:83:
0a:ce:5f:cb:f0:42:2b:f6:3c:90:52:02:7d:75:88:6e:a4:fc:
e6:7f:86:f1:1e:a0:4c:a6:5c:e5:43:af:87:c2:55:97:f0:60:
5e:59:11:c5:8c:0f:6a:9c:2e:85:a4:ee:31:f4:31:2c:f8:51:
23:47:aa:c8:e3:73:63:75:a7:33:71:d9:25:af:68:75:53:c7:
91:30:28:82:a2:61:76:24:63:e3:b9:3d:a7:3f:8a:2e:71:da:
a6:bd:bf:08:72:f2:ce:8d:38:11:15:e3:09:e6:ce:4f:4c:5d:
54:80:39:9f:9a:be:e8:87:4f:bf:00:59:94:17:ad:0e:ca:e4:
4f:ac:c6:1f:cb:dc:d8:e4:ea:0b:46:05:ab:8f:3e:86:25:cb:
0c:51:85:51:db:96:b3:a0:7b:c2:2c:fb:0f:bf:9e:11:ad:65:
5c:52:6a:8c:be:cb:38:c8:37:fa:a8:b8:89:c7:83:4e:ac:d7:
dd:9f:1e:2c:b0:cf:7f:c2:d6:4e:93:ec:3a:f9:e7:53:4c:7f:
c5:60:6a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:25:45 2025 by rpki-client