Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
File: QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft (raw, json)
Hash identifier: KAJ2PhvF1F5DmGmxg9P+VIL/8Px2/qGHIpiSDLZ0Q6A=
Subject key identifier: EC:89:2A:52:0F:3F:B4:0F:32:E7:E8:0D:5C:1B:D5:5D:97:20:66:CE
Authority key identifier: 40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
Certificate issuer: /CN=4036a64f1a066babb8beb864e695fa997692dd48
Certificate serial: 019923A0DE3DC8DC2119F14D7F86E8BF602F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
Manifest number: 10CC
Signing time: Sun 07 Sep 2025 10:02:49 +0000
Manifest this update: Sun 07 Sep 2025 10:02:49 +0000
Manifest next update: Mon 08 Sep 2025 10:02:49 +0000
Files and hashes: 1: QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl (hash: g0PXsuxb702OoSnCwNhage3R1Tugg8sHtz4ll3RFjIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:de:3d:c8:dc:21:19:f1:4d:7f:86:e8:bf:60:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4036a64f1a066babb8beb864e695fa997692dd48
Validity
Not Before: Sep 7 10:02:49 2025 GMT
Not After : Sep 8 10:02:49 2025 GMT
Subject: CN=ec892a520f3fb40f32e7e80d5c1bd55d972066ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:c7:8a:da:d8:de:25:c5:c8:1e:71:2a:ce:
a8:87:d2:ee:c3:0f:7e:99:7e:e0:52:e3:cb:59:7a:
db:db:37:b3:aa:d7:a0:44:4e:08:0e:81:95:be:8c:
3b:ea:7f:3b:26:a6:90:17:58:c4:c5:f6:45:ac:59:
be:45:91:37:6f:c1:d7:5f:9d:35:db:52:78:59:86:
e0:5d:41:2c:e2:29:05:d1:a2:e0:3b:3d:07:2a:dc:
8c:d2:92:35:14:d3:83:0a:65:cd:53:8d:bf:70:37:
5f:6c:ae:6e:96:5d:59:b5:06:53:10:ca:87:c6:a7:
bf:13:05:99:ec:8b:90:f6:85:4a:70:8c:72:dc:90:
bd:b1:6b:b3:60:35:ba:90:3e:8f:b9:90:8c:34:79:
9f:67:2a:f2:fb:46:9f:94:12:45:35:14:38:13:b9:
77:a4:6e:f5:e8:1f:b2:ed:1a:63:8c:87:a1:da:02:
56:af:2a:d7:11:bc:fc:a1:be:ea:62:6e:be:7e:cc:
aa:20:b8:17:c9:fe:ea:b7:11:a2:38:6f:e9:b0:2c:
93:a8:b6:b8:f6:48:9e:66:a1:79:f8:d0:08:86:26:
57:d8:cb:a7:fa:cc:b6:58:ef:2b:cd:c1:5b:ba:c8:
82:8d:6e:a4:57:7b:90:f3:91:f2:a5:be:60:dc:2c:
6b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:89:2A:52:0F:3F:B4:0F:32:E7:E8:0D:5C:1B:D5:5D:97:20:66:CE
X509v3 Authority Key Identifier:
keyid:40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:64:62:9b:75:8b:10:aa:0b:93:ae:41:06:19:fb:29:81:9d:
71:eb:de:80:e8:42:92:03:54:b6:c6:cf:41:77:98:45:f1:bc:
29:3a:57:d7:bd:de:3a:f4:d2:08:d8:85:56:fd:9b:66:f1:18:
46:59:c0:6c:dc:d7:9d:a4:7f:2e:ce:52:b9:ce:74:be:99:bb:
fb:07:61:a9:8c:9b:0c:49:3d:11:6f:07:5b:e4:31:89:19:71:
67:ac:38:5f:1b:6c:86:f6:da:84:14:7c:e8:d7:56:e4:66:a5:
04:d7:01:99:05:b7:4f:65:9b:b8:3a:fc:e6:05:b6:e9:25:a4:
14:3b:61:1e:1e:33:40:a9:3e:29:8f:1e:86:ee:e7:7b:e1:7c:
f7:be:dc:6c:fd:53:b6:85:41:97:e7:23:c0:0d:fa:51:55:ba:
1a:c6:1f:4c:18:7f:89:e0:db:d6:9d:a1:60:fa:69:0f:32:15:
1d:58:32:d0:cb:a1:48:e2:1c:16:bc:72:5e:1f:88:21:56:ca:
0e:1c:0f:b6:4b:21:3e:88:66:22:51:3c:ec:5d:86:a2:88:cc:
70:d6:a0:8e:c4:26:86:27:39:f0:01:bf:a7:06:c8:9c:68:4c:
44:04:f7:96:94:92:d8:5e:67:47:4d:a9:8e:d2:27:0d:03:f0:
f3:d2:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:02 2025 by rpki-client