Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: biOnS/w2tUbdww0CR5qx/TMp77XGyCn8fkR2wTJ5mXg=
Subject key identifier: C7:69:29:B2:E3:D3:C1:CA:1A:B2:6D:28:80:F9:43:4B:99:40:FA:E5
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 0197715162A4BF8B44CFE8BE0C2D75B00373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 019D
Signing time: Sun 15 Jun 2025 02:00:48 +0000
Manifest this update: Sun 15 Jun 2025 02:00:48 +0000
Manifest next update: Mon 16 Jun 2025 02:00:48 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: vv1GGK7xQ5eKq1o0u6Pbev0u9YL1d1Ry2hPat+b9n7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:62:a4:bf:8b:44:cf:e8:be:0c:2d:75:b0:03:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Jun 15 02:00:48 2025 GMT
Not After : Jun 16 02:00:48 2025 GMT
Subject: CN=c76929b2e3d3c1ca1ab26d2880f9434b9940fae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:d8:87:0c:58:aa:7b:17:f3:da:ea:78:55:
c4:01:51:35:1e:30:99:40:50:c2:74:95:82:c5:d0:
00:14:2e:1f:6c:b6:7e:a2:1d:8f:d8:5b:2e:c9:9a:
9a:22:87:02:d5:62:e6:d6:ea:aa:40:6b:03:e4:1a:
3f:fc:5e:f4:fe:de:d8:5a:68:d1:f9:2e:47:c3:a9:
bf:20:32:0f:aa:3b:2b:ae:24:45:1a:e2:9d:d3:46:
f8:92:c7:0a:a8:23:3a:6d:2c:37:e0:1a:9f:12:68:
32:d0:60:30:a0:4f:f0:d8:1e:00:f9:dd:56:c7:4a:
3b:54:28:6c:51:ce:fd:88:df:31:59:3d:ec:08:cd:
d2:15:f0:d0:61:01:3b:25:35:34:6c:c2:b2:c1:56:
c4:39:49:2f:c7:99:d0:5c:09:64:31:1d:8a:72:4d:
71:8d:62:1e:d0:33:58:47:aa:89:ee:3b:dc:4e:b3:
d5:0d:6f:e6:9b:cb:53:0b:2d:81:83:2c:3c:23:00:
19:57:da:00:86:ee:dc:09:e1:b1:99:46:4a:48:c2:
42:cb:c8:fc:54:af:ed:bf:91:44:87:28:91:b3:bb:
81:86:8f:ac:40:aa:be:7d:f8:96:e0:b8:98:3a:2e:
06:2a:01:56:15:2b:ee:80:b5:1d:4c:f3:e5:aa:99:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:69:29:B2:E3:D3:C1:CA:1A:B2:6D:28:80:F9:43:4B:99:40:FA:E5
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d2:78:05:12:27:ac:d4:06:cd:5c:70:5c:88:21:fd:00:b1:
a2:38:52:15:95:d8:11:9d:5b:93:06:da:b6:25:34:cc:78:22:
11:da:84:e9:d2:fe:ac:c4:5d:0d:b9:24:d1:02:3e:b0:d8:b8:
d9:16:b2:f9:ad:80:a9:bd:90:1a:32:39:b5:5e:57:24:3b:20:
27:c3:ae:83:98:52:f2:4d:cf:de:36:7b:61:29:f0:d6:08:57:
6a:86:d4:14:a9:e7:8c:6b:c3:ad:69:56:ca:20:cc:59:1e:d8:
61:8b:99:1d:65:57:55:18:c4:4f:79:91:8c:60:fa:54:e5:30:
c3:b3:3f:a8:4c:b3:38:bd:14:cf:44:1d:7d:25:66:06:a1:55:
01:86:6f:30:61:09:2d:21:fb:8c:79:cc:4b:c8:50:b8:b5:62:
08:9a:11:14:e6:fd:94:45:a0:2d:75:51:7f:14:bb:80:f7:ff:
55:e6:ea:42:10:ce:70:c5:13:d2:88:c7:8d:86:1d:f6:3f:79:
75:2b:58:a2:fd:12:31:34:28:55:9c:d4:38:e0:f9:ba:10:c9:
9b:35:e2:29:3a:7b:28:e0:b3:f3:66:ae:60:b5:84:86:b1:ec:
9e:32:ea:fa:2a:f2:f9:4e:15:2d:84:0d:de:b4:13:0b:28:d3:
3b:33:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:04:59 2025 by rpki-client