Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: tF+Tt/XfZt5MBmlZ5kC/Q67pieHTAEC8RUz78y4+7W4=
Subject key identifier: 8C:72:72:A6:34:E6:B4:E6:80:D6:FC:BD:1C:E0:FD:6C:B6:08:C7:31
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 019685B65820622986163F3E24023C03444F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 0123
Signing time: Wed 30 Apr 2025 08:00:41 +0000
Manifest this update: Wed 30 Apr 2025 08:00:41 +0000
Manifest next update: Thu 01 May 2025 08:00:41 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: x4fUrTYdzI0IgCmesQXMcqCkNrGdhAYxf9zpnukgNRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:58:20:62:29:86:16:3f:3e:24:02:3c:03:44:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Apr 30 08:00:41 2025 GMT
Not After : May 1 08:00:41 2025 GMT
Subject: CN=8c7272a634e6b4e680d6fcbd1ce0fd6cb608c731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8f:01:7d:6c:26:9b:b7:21:55:50:ed:a0:95:
c2:8d:8d:9b:e9:e7:aa:36:a9:93:f9:35:35:87:d1:
09:74:e3:f8:72:d6:7b:f4:1b:a7:82:e7:80:ff:d3:
af:cd:88:b0:40:f5:30:c7:10:b0:bc:0e:7b:c1:82:
f1:55:98:2a:fd:ca:8b:c6:2d:ec:72:a2:0c:01:34:
3c:08:4b:21:61:ec:0c:4d:71:f6:ab:eb:e4:ce:7f:
59:36:f7:72:8a:9c:51:aa:2e:c9:4d:12:34:56:c6:
6a:2c:7a:b9:33:44:5d:93:d7:0b:a6:f3:93:3f:5d:
fb:58:0e:09:e5:eb:88:33:88:d6:cf:59:2e:48:3a:
e0:ac:f8:9a:a1:47:ad:95:b4:ef:ae:19:56:2f:36:
8b:0b:a7:99:10:32:86:8b:75:ca:6c:a9:06:44:b4:
09:d8:2b:3e:07:4b:de:36:27:cd:68:4d:45:29:f7:
79:4b:c7:88:7a:53:bc:4f:95:3b:46:69:d9:2a:be:
cf:cb:ed:c7:ff:57:7c:46:ff:1e:41:b1:22:3e:b5:
06:5b:0d:d8:9f:68:84:ca:6d:3f:77:78:d1:1b:29:
a9:6b:1e:b3:67:83:b6:44:d2:f4:ff:70:c1:67:ce:
91:02:5a:9c:b0:88:d9:b1:f8:5f:ab:a0:3f:f0:5c:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:72:72:A6:34:E6:B4:E6:80:D6:FC:BD:1C:E0:FD:6C:B6:08:C7:31
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6e:2f:6e:6d:05:23:d5:76:ab:10:b6:dc:ef:7f:9b:7e:89:
9a:76:e1:01:02:5f:0e:bf:fe:92:37:99:85:75:a0:1a:49:ac:
87:92:9b:39:19:50:73:3a:3c:42:d9:e0:55:ce:47:6b:84:8d:
68:45:97:20:28:93:ad:2a:6b:3b:0b:c8:9d:b4:d5:dd:14:d5:
0c:44:28:2d:bf:32:c7:5c:5d:16:68:d5:c6:c7:17:ce:ab:1b:
20:29:c3:57:fd:37:9d:6f:9e:0b:04:0b:1a:af:5b:fb:8d:19:
1c:1f:79:bc:33:f1:83:5c:a3:ed:b1:a6:08:4b:df:42:d2:5f:
b9:1c:da:a6:06:34:7e:39:33:b3:8e:66:5d:94:e7:58:98:97:
87:84:fc:37:9d:50:30:68:11:d9:31:a1:d6:96:2f:9c:e8:5d:
d2:42:81:ec:b7:b8:aa:48:cf:ce:3b:45:21:c7:29:8a:62:4d:
54:50:3c:d1:5c:ad:d0:8f:61:09:2f:f8:b0:26:76:5e:a6:65:
cf:58:e2:34:56:43:bf:df:47:0b:f1:fa:46:45:9e:fe:76:2f:
d4:0e:2c:9f:86:ad:0a:e6:7c:5f:a9:48:59:da:1a:93:51:b4:
d5:e3:2a:f4:64:c3:03:82:1d:70:32:f1:a6:cc:4d:ad:d4:62:
ac:70:8a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:25:41 2025 by rpki-client