Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: sdsqzMA5/i07DyQFCgoJMDaxHL6X+CQRpg1x370WzN4=
Subject key identifier: D1:4A:A2:D6:60:0B:51:F7:F3:D1:1B:D1:6F:67:D5:78:29:D7:75:28
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 0198D698153C17ADF599D717DDB77273D03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 0256
Signing time: Sat 23 Aug 2025 11:02:27 +0000
Manifest this update: Sat 23 Aug 2025 11:02:27 +0000
Manifest next update: Sun 24 Aug 2025 11:02:27 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: l/2s0Tkwjug9i9XBl2p134Xdq57lK7rBMLcgZGMHgcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:15:3c:17:ad:f5:99:d7:17:dd:b7:72:73:d0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Aug 23 11:02:27 2025 GMT
Not After : Aug 24 11:02:27 2025 GMT
Subject: CN=d14aa2d6600b51f7f3d11bd16f67d57829d77528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:ce:8d:18:9d:c9:f5:ee:86:80:d5:60:56:
50:de:1a:db:91:3f:f4:66:51:b1:9b:65:c5:70:f6:
a0:9a:25:ce:0b:e1:b3:fe:fd:b1:f7:1d:ed:1f:08:
3d:56:20:6a:54:8f:9d:a4:34:be:03:29:c9:c2:c3:
c3:0a:2b:a8:7a:ea:13:0f:83:a2:b4:f9:23:d9:a6:
fb:bc:c3:31:2c:f6:3f:47:80:ca:93:52:ff:3d:37:
40:35:a4:0c:6f:df:89:a3:74:d6:75:9d:63:a8:e9:
fe:a9:a4:dd:6e:23:62:7c:cc:5c:19:34:d2:cd:00:
b5:4f:10:9e:32:0d:0a:3b:2c:22:2a:f7:d7:ef:87:
90:db:54:29:9c:4d:2c:a3:a6:e4:5a:e3:a5:e7:40:
ee:7a:71:b5:74:18:01:d9:a8:9b:cf:b3:6c:7a:d4:
c3:4d:3d:fe:8f:cd:4c:7a:be:07:0d:de:4c:03:47:
42:1b:f4:0f:b3:06:5c:52:b1:14:cd:09:7d:17:4a:
29:b2:13:4d:be:62:72:ca:a6:52:25:c8:83:19:72:
fb:7e:2a:d5:00:48:a8:7a:8b:40:04:44:cc:69:86:
4e:8e:ea:57:fd:db:3c:b7:94:84:67:e7:d2:2b:7f:
ca:83:54:eb:6a:c1:71:8e:74:2f:c5:ea:8d:4b:8d:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4A:A2:D6:60:0B:51:F7:F3:D1:1B:D1:6F:67:D5:78:29:D7:75:28
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e0:df:21:c9:74:e3:6f:3e:dc:03:26:54:b8:64:3b:1e:74:
27:50:29:40:8e:9e:96:b8:13:41:a7:5a:c1:08:7e:03:25:38:
bf:ef:33:05:03:4e:68:3b:99:8c:3e:e6:5d:9d:c8:7e:5a:c5:
a2:b0:e5:13:78:12:b6:b8:46:b9:ee:ce:b9:f2:a8:99:b5:7e:
47:b4:68:35:82:72:7b:31:2e:15:a4:2e:15:d2:83:b4:32:0b:
07:2d:0b:88:0a:1f:81:cb:63:5c:cd:ba:c7:ba:6d:38:0e:8d:
1a:80:97:7b:d8:9f:9b:c6:ab:26:ce:58:7d:bc:e2:86:44:ec:
f4:eb:5a:53:d9:5e:2f:88:38:ce:b7:0d:cf:9a:63:d0:da:40:
6b:4a:1f:d5:40:9f:a6:41:d8:d7:b4:8d:f8:57:a0:47:96:f9:
01:eb:90:4d:88:b7:7a:7a:ad:6e:1e:2d:e6:0c:43:ed:67:b8:
c7:4c:d8:89:11:62:01:03:a8:35:62:67:25:d9:4f:bc:6c:aa:
e6:48:14:8f:75:2c:57:a3:30:69:90:92:1f:29:98:be:e2:87:
7b:c9:c8:ab:1a:eb:88:94:51:fe:7b:84:a7:be:67:ac:93:7b:
75:73:e5:ef:48:cf:e9:0c:8b:fb:d1:57:43:e1:21:64:64:f4:
ab:28:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:09 2025 by rpki-client