Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: zD5tM3WK6l7ee/S6mCrxr22HM+3coGEH4ekgNG4Cbuc=
Subject key identifier: 54:66:B9:43:81:60:0B:E6:D4:9E:B6:83:ED:1A:8A:D4:43:F5:8B:9F
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 0196594B8DE9F7DF7248D0883B81317A443A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 010C
Signing time: Mon 21 Apr 2025 17:00:45 +0000
Manifest this update: Mon 21 Apr 2025 17:00:45 +0000
Manifest next update: Tue 22 Apr 2025 17:00:45 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: uuTGHDGcbBnx+RFMpHYfCph898uo5rEjg1gybMKJI90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:8d:e9:f7:df:72:48:d0:88:3b:81:31:7a:44:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Apr 21 17:00:45 2025 GMT
Not After : Apr 22 17:00:45 2025 GMT
Subject: CN=5466b94381600be6d49eb683ed1a8ad443f58b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:95:ae:96:c6:63:ec:3e:ab:02:e5:d4:bc:e3:
65:f7:7b:49:30:1c:da:ec:e3:63:47:00:13:31:60:
e4:52:ff:5a:2c:a2:96:36:bf:50:6e:15:da:2d:a6:
29:fc:90:32:72:38:10:3c:7c:76:cf:35:82:3e:ed:
72:db:e4:6b:e6:d8:2c:76:ce:cd:38:9d:e1:f6:09:
53:39:b3:47:99:c9:2f:22:24:db:61:a8:08:2c:01:
3c:6f:64:82:4b:f8:8c:da:cb:58:af:37:05:ca:df:
4f:08:7b:ee:81:ee:c8:a7:76:d0:80:52:84:7c:46:
36:7a:ae:4c:45:6f:a0:75:39:a7:6d:3a:e5:2c:13:
c7:ac:ee:a7:ee:4d:2c:dc:a7:76:0f:c6:90:64:30:
45:ef:ff:f3:c8:6b:a2:e2:7c:9a:3e:44:49:6f:2a:
33:68:aa:29:e4:69:cb:6c:d2:69:8e:b4:8d:84:34:
bd:10:04:3c:73:f8:05:48:25:85:e2:70:83:be:8d:
a9:80:6a:48:3a:18:35:a7:6d:ac:61:ad:d9:a7:a3:
1a:0a:14:62:57:41:7e:65:2a:80:b6:90:75:a4:57:
5b:45:7a:4d:9a:17:ae:59:fa:14:a2:0c:62:60:e4:
b3:19:3b:88:8d:11:8c:b0:6e:c9:72:46:24:c6:e1:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:66:B9:43:81:60:0B:E6:D4:9E:B6:83:ED:1A:8A:D4:43:F5:8B:9F
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:06:f8:a3:02:40:f3:10:61:de:b3:6d:3a:fe:32:84:47:1d:
b7:f4:fd:b7:7c:2e:27:78:b0:eb:bc:a5:39:4c:d8:ae:25:e5:
72:cd:a2:ae:ce:9c:52:f0:c5:14:0a:89:82:16:f2:e2:dd:2c:
50:2b:e2:75:98:4a:e5:a2:3a:05:c3:8d:74:d0:7b:fc:39:76:
e3:34:ef:22:20:33:e2:56:79:53:de:88:d3:da:c4:8d:94:1b:
f9:0f:87:16:0f:02:3e:ce:1b:ff:25:ec:80:2d:f6:4d:c7:77:
d0:f1:fe:f3:75:0a:6c:03:79:95:16:50:a5:e1:f0:1e:1d:3b:
82:e9:e4:9b:c8:16:8c:17:a9:f3:2a:91:9a:5f:ba:c0:11:4f:
c9:55:5f:fd:a3:e9:49:2f:71:dc:76:3e:37:ac:35:b1:c5:7a:
14:93:1e:27:62:3b:45:2a:7c:96:32:16:ad:fa:bf:5b:bc:2f:
1a:b3:d6:fb:12:27:35:da:38:51:f7:cc:9a:59:d7:3a:5d:2a:
dd:34:6b:da:7d:fe:4d:4a:61:a2:94:50:b9:ca:1b:42:84:6f:
48:09:fe:45:45:ca:1d:b5:1c:55:b5:fd:98:a0:35:64:a8:c8:
89:bf:69:eb:20:db:1a:c5:d2:ae:21:ea:21:5a:9e:fc:3c:98:
53:b9:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:23:17 2025 by rpki-client