Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: +sYwrz71q3qDJoxz0Z0kKiZqOpRXSRo/od8B01QnL0s=
Subject key identifier: 2A:BB:61:01:4A:8E:08:1E:29:F7:EC:E2:0B:38:EB:15:04:5A:DC:E7
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 019923D5C15BB806581D72F7DA6CB2A9AF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 027E
Signing time: Sun 07 Sep 2025 11:00:35 +0000
Manifest this update: Sun 07 Sep 2025 11:00:35 +0000
Manifest next update: Mon 08 Sep 2025 11:00:35 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: MhwVPhfg7/u885UVNmEf1dqThFreP5SOXKjLBbBRLtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:c1:5b:b8:06:58:1d:72:f7:da:6c:b2:a9:af:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Sep 7 11:00:35 2025 GMT
Not After : Sep 8 11:00:35 2025 GMT
Subject: CN=2abb61014a8e081e29f7ece20b38eb15045adce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:22:a7:f9:8e:a9:d4:7a:c9:e8:17:0a:d8:
dc:8a:51:d0:3c:03:15:18:ab:a2:2c:25:65:52:57:
84:95:26:0a:92:12:a5:1a:4f:d8:d0:37:ee:61:92:
9c:b5:d4:2a:e9:63:06:fc:59:bf:5a:77:a6:30:80:
6f:ea:fa:66:b7:33:44:46:68:c0:a2:b3:6d:4f:20:
cd:b0:6e:e0:75:c8:ca:f2:24:19:8e:6b:52:09:68:
d4:24:e7:ea:ef:9c:e0:b6:42:eb:28:08:a4:7a:fc:
4c:13:1c:4a:de:dd:c9:8f:74:b9:55:8f:2c:e3:92:
80:17:4f:85:c8:39:d7:e3:3e:9a:26:3a:c2:8f:c0:
a3:b9:6a:19:46:a8:40:b1:03:65:70:22:c4:3f:f5:
57:54:0c:8c:78:40:3e:ce:71:19:a0:1e:af:c7:2f:
9d:60:19:d3:75:34:e7:80:be:7c:09:4a:5e:56:e9:
fb:5e:00:f2:8c:78:5a:82:5e:a8:ef:9f:e6:75:ea:
db:10:36:3c:55:d4:32:f3:b3:e2:76:d1:3e:30:a5:
5a:9c:5c:74:ad:31:62:6b:a2:f6:f0:1b:6f:04:a1:
ae:37:d2:5e:56:40:9c:38:4c:65:73:f7:ca:e0:0f:
d0:17:69:d3:b2:2b:ae:b0:2b:42:64:bb:0c:01:7a:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BB:61:01:4A:8E:08:1E:29:F7:EC:E2:0B:38:EB:15:04:5A:DC:E7
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:70:7b:b6:cc:a6:ae:6b:2f:1e:ed:ef:51:45:95:5d:53:1c:
2e:be:fb:c6:62:a6:f7:c8:04:bc:6b:7a:46:b1:06:c4:ca:6f:
72:3d:a9:a2:0c:d0:34:dd:e6:6c:d5:1c:1d:dc:60:c8:e8:c1:
17:be:c4:67:88:09:cc:4e:19:a7:3e:bb:2d:de:1f:28:06:34:
ac:51:21:18:31:2d:ea:3a:70:3b:e8:af:2f:7e:1d:f6:0b:51:
a8:0a:49:d0:d3:d9:ea:00:87:ab:78:1d:1d:cf:b5:0c:44:e0:
2b:c0:03:9a:35:9f:19:25:85:f6:5f:fb:dc:38:18:b1:b5:b9:
47:19:13:1c:a4:46:a5:87:f9:28:cb:8f:36:50:8a:4c:9d:93:
80:c1:6a:75:75:e9:63:5c:09:26:89:3a:fb:e1:be:34:e4:ab:
cf:e8:54:c0:1f:f6:30:b1:e3:d2:08:04:f1:1a:be:bd:d5:b4:
e3:59:96:d1:2a:60:ca:89:fa:29:ed:6e:42:72:04:62:76:ce:
dd:db:da:6c:2e:8a:65:b4:45:b6:f9:6b:3f:f1:ed:28:0f:c2:
c9:a6:c9:6e:47:37:23:30:cb:f0:2c:8f:17:e1:63:31:b1:be:
c5:3b:f2:3e:a0:44:9e:4d:be:37:11:a0:b5:bb:b8:f3:f7:1b:
a9:83:33:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:28 2025 by rpki-client