Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: Teb5BqppMK0pSBR7Noj/innhr9mn+CGBFc7CkbFJ8tY=
Subject key identifier: 84:5E:4B:99:F7:5B:D1:0E:67:92:66:47:C5:2F:FA:50:AE:02:A5:DC
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 0197526B16101747751BE13883AB741AEEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 018D
Signing time: Mon 09 Jun 2025 02:00:38 +0000
Manifest this update: Mon 09 Jun 2025 02:00:38 +0000
Manifest next update: Tue 10 Jun 2025 02:00:38 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: /K+eNly2aQlUO+qNPte30oinbw8wbxnYY7Lts2OSb80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:16:10:17:47:75:1b:e1:38:83:ab:74:1a:ee:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Jun 9 02:00:38 2025 GMT
Not After : Jun 10 02:00:38 2025 GMT
Subject: CN=845e4b99f75bd10e67926647c52ffa50ae02a5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:62:db:22:3f:9a:44:1f:8f:20:9d:a0:5b:fc:
4a:f9:d7:f2:23:cf:d5:4d:6b:c1:9c:50:48:f7:6d:
05:61:73:d9:a5:5d:d1:a9:a1:97:24:a8:e0:4a:65:
57:86:2b:ff:86:b0:71:0a:3d:15:4c:66:84:f3:64:
4b:a2:30:45:1e:11:0c:ce:30:6d:7f:f4:75:49:df:
43:ec:b3:e6:04:9d:f3:8f:31:d2:9a:39:a6:9d:7e:
25:69:eb:34:6e:ba:d8:a2:e3:48:fa:74:34:81:0a:
b9:69:e0:b7:2b:0d:e4:f0:dd:cf:1e:eb:49:c7:36:
de:f6:eb:66:be:3e:2e:a9:6e:95:42:ac:c2:02:1b:
c8:0b:8d:b3:2c:c1:a5:63:39:60:5b:52:8b:00:86:
2d:59:59:c7:59:2b:b0:7f:69:bd:96:46:b7:c9:3f:
02:8b:6b:d0:8b:92:79:e9:12:b7:1e:12:d3:da:f7:
fb:2a:7c:c2:23:5e:fc:8e:ef:5d:7e:74:86:e1:00:
8f:28:c5:e3:27:31:14:50:6e:12:8c:05:c4:56:7b:
8a:ca:cb:f0:84:88:30:df:9a:e4:a5:f3:87:6e:d9:
bc:16:5a:7c:88:94:1b:c8:6e:e0:fe:96:ed:bc:1f:
42:48:a8:00:00:44:4e:3e:5b:06:c7:6f:1f:d2:45:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5E:4B:99:F7:5B:D1:0E:67:92:66:47:C5:2F:FA:50:AE:02:A5:DC
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:32:2f:c6:96:da:e4:6e:22:a2:55:4e:60:e2:4a:d7:a9:90:
d9:8e:52:00:45:db:e7:be:96:a7:93:54:26:ba:0e:2a:98:a7:
9e:5f:a5:5e:ba:bc:c5:69:3e:cc:cc:94:57:34:c5:6e:f2:b6:
c0:6f:fc:10:80:06:db:2d:31:2d:e3:3c:45:5c:bf:65:43:4c:
69:09:e3:0c:45:af:f1:6b:1c:f3:64:df:f5:19:2f:eb:1f:f5:
79:ac:36:92:c4:99:f7:40:7f:ca:96:f8:72:16:8a:fd:99:fd:
1d:c5:b5:c5:e7:46:71:9b:e7:6c:cc:53:8e:bb:5c:a2:80:aa:
83:b2:18:28:92:42:c5:e8:a1:94:a5:5d:68:39:c7:6d:23:07:
b0:3f:cc:ae:2d:07:29:bb:84:bd:f6:06:ec:84:7c:35:8d:47:
28:56:ca:35:1c:ee:9c:c9:49:99:de:43:42:a5:67:95:05:ab:
77:4d:01:e5:7b:3a:91:bb:71:ef:15:03:04:10:d7:e4:0a:46:
ea:99:e9:9a:a1:18:8d:9c:70:71:ee:8e:18:1a:18:89:48:f1:
1d:bd:84:28:55:09:1c:fc:bb:6e:07:6a:1a:38:2d:02:62:90:
b2:c6:c6:6d:a3:01:ec:e0:c6:93:ac:ca:05:f8:2e:f5:74:96:
52:8f:a5:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSaxYQF0d1G+E4g6t0Gu6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZDMzZmUxMWI5OTQ5NTE2YzFmMWRkODE0ZTI0ZTQ3NDUz
YTllOTYwHhcNMjUwNjA5MDIwMDM4WhcNMjUwNjEwMDIwMDM4WjAzMTEwLwYDVQQD
Eyg4NDVlNGI5OWY3NWJkMTBlNjc5MjY2NDdjNTJmZmE1MGFlMDJhNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GLbIj+aRB+PIJ2gW/xK+dfyI8/V
TWvBnFBI920FYXPZpV3RqaGXJKjgSmVXhiv/hrBxCj0VTGaE82RLojBFHhEMzjBt
f/R1Sd9D7LPmBJ3zjzHSmjmmnX4laes0brrYouNI+nQ0gQq5aeC3Kw3k8N3PHutJ
xzbe9utmvj4uqW6VQqzCAhvIC42zLMGlYzlgW1KLAIYtWVnHWSuwf2m9lka3yT8C
i2vQi5J56RK3HhLT2vf7KnzCI178ju9dfnSG4QCPKMXjJzEUUG4SjAXEVnuKysvw
hIgw35rkpfOHbtm8Flp8iJQbyG7g/pbtvB9CSKgAAEROPlsGx28f0kXpdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIReS5n3W9EOZ5JmR8Uv+lCuAqXcMB8GA1UdIwQY
MBaAFKnTP+EbmUlRbB8d2BTiTkdFOp6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81NmNmMzgtZDdhYi00MGMzLTlmMDkt
NjgwMjA4M2RlMjExLzEvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81NmNmMzgtZDdhYi00MGMzLTlmMDktNjgwMjA4M2RlMjEx
LzEvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjIvxpba
5G4iolVOYOJK16mQ2Y5SAEXb576Wp5NUJroOKpinnl+lXrq8xWk+zMyUVzTFbvK2
wG/8EIAG2y0xLeM8RVy/ZUNMaQnjDEWv8Wsc82Tf9Rkv6x/1eaw2ksSZ90B/ypb4
chaK/Zn9HcW1xedGcZvnbMxTjrtcooCqg7IYKJJCxeihlKVdaDnHbSMHsD/Mri0H
KbuEvfYG7IR8NY1HKFbKNRzunMlJmd5DQqVnlQWrd00B5Xs6kbtx7xUDBBDX5ApG
6pnpmqEYjZxwce6OGBoYiUjxHb2EKFUJHPy7bgdqGjgtAmKQssbGbaMB7ODGk6zK
Bfgu9XSWUo+l1A==
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:02:50 2025 by rpki-client