Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
File: QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft (raw, json)
Hash identifier: Ibo9/zrS0OrCytGbTFB5nNqZqaoCWZdEZKg+LrJL+H0=
Subject key identifier: 47:E8:97:E7:8C:1C:04:85:F2:4C:CA:6A:7E:7D:F2:B6:68:71:BC:5C
Authority key identifier: 40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
Certificate issuer: /CN=4036a64f1a066babb8beb864e695fa997692dd48
Certificate serial: 019776E6824104510EF2C966EBF6ED41991C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
Manifest number: 0FEE
Signing time: Mon 16 Jun 2025 04:01:47 +0000
Manifest this update: Mon 16 Jun 2025 04:01:47 +0000
Manifest next update: Tue 17 Jun 2025 04:01:47 +0000
Files and hashes: 1: QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl (hash: VjClwC0hlM8WiNZ0KfXD3Xr2BKkwnUzZ+SirdnAORoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:82:41:04:51:0e:f2:c9:66:eb:f6:ed:41:99:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4036a64f1a066babb8beb864e695fa997692dd48
Validity
Not Before: Jun 16 04:01:47 2025 GMT
Not After : Jun 17 04:01:47 2025 GMT
Subject: CN=47e897e78c1c0485f24cca6a7e7df2b66871bc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:9f:98:3e:b4:78:77:0e:a0:9f:b5:a4:b1:
6c:66:bf:e0:79:66:85:95:a7:11:c8:dc:85:b1:21:
f9:d3:76:09:77:40:27:9c:8e:00:86:9c:a5:de:a3:
4d:37:8e:c7:19:b6:99:55:b0:a9:77:9e:5e:0a:d4:
08:d8:6b:72:b0:95:57:71:ee:de:87:26:b1:03:9a:
8a:48:b2:c5:12:67:6d:6a:15:b9:d3:92:9f:b0:88:
91:1c:bb:ba:27:1d:81:9c:c5:d4:51:d9:35:91:92:
81:cf:22:64:9f:92:3d:62:16:93:4e:5f:4c:60:83:
e7:6d:91:57:86:5f:af:3c:9d:a7:a8:fd:21:7c:58:
3b:38:08:d0:e7:0e:76:f9:1d:88:a0:5b:9b:32:f4:
90:d6:39:79:91:4b:0a:b0:2a:7d:7f:33:d4:42:ee:
61:18:48:86:38:02:8b:d5:12:7b:1a:03:b9:c9:58:
33:b6:56:fa:9c:9f:f8:31:cc:4a:93:61:84:33:d2:
37:d9:df:78:57:64:70:cd:ee:bc:fb:a9:aa:22:fb:
d3:c3:78:86:32:96:5d:bc:48:d2:97:08:9e:63:a5:
c1:d6:f3:77:26:d5:46:e8:da:8e:d7:0c:da:8c:6a:
7e:b3:23:b1:74:2f:f7:80:f8:ed:e0:ef:6c:e4:f9:
4a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E8:97:E7:8C:1C:04:85:F2:4C:CA:6A:7E:7D:F2:B6:68:71:BC:5C
X509v3 Authority Key Identifier:
keyid:40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2c:91:cf:a2:43:17:93:44:29:03:79:9c:0f:24:c3:73:c6:
d2:ae:f6:81:80:0b:3e:01:96:98:9b:b6:6c:ff:42:39:b3:4a:
28:86:43:22:dd:58:46:db:d2:be:57:42:19:10:72:7a:e0:cc:
ce:77:5d:a9:d0:c9:55:71:ba:9c:11:17:96:9a:66:60:d6:72:
24:fa:a2:b5:45:0d:49:c1:5f:bd:6b:bf:63:86:a9:db:e8:81:
13:82:d7:e4:c8:df:0b:0f:ac:37:e1:94:e4:c1:1c:ad:50:28:
61:44:50:1a:94:79:f5:1e:aa:53:a0:9b:d6:1d:4a:6b:44:58:
04:24:02:0c:90:5c:4f:a8:89:bd:94:ce:41:5f:71:94:d4:85:
eb:ed:49:ae:ed:bf:f3:66:4a:fc:9c:42:85:c8:53:df:35:e0:
75:16:2b:80:bd:83:f5:18:2a:af:c3:ea:38:1f:2c:92:2a:4b:
57:6b:f6:ea:d1:8d:55:a5:aa:42:c6:28:b5:0e:b9:8b:9e:bc:
8b:07:31:35:09:f9:90:83:60:d5:4f:49:bd:cb:3e:e7:95:b1:
ca:3b:d5:43:31:4e:51:07:fc:02:45:c1:98:f0:b0:70:52:07:
a7:30:c0:93:6e:ec:27:7b:0c:23:c1:7e:ec:b3:24:d3:e6:3a:
4f:07:6e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:18:03 2025 by rpki-client