Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: smiItRIz0g+Cy299iMmlzgpF72S+9SPTWl/v836J+m0=
Subject key identifier: EA:8D:DA:49:E3:96:9A:58:96:63:49:DC:C6:51:9E:8B:81:7B:47:BC
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 0196C570F294EFB2EBA39669921CC4E81AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 0144
Signing time: Mon 12 May 2025 17:00:35 +0000
Manifest this update: Mon 12 May 2025 17:00:35 +0000
Manifest next update: Tue 13 May 2025 17:00:35 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: dfEEYPqZMi+jEBbc8AxInyYX/AvSu43QI/S4PKEzATw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:f2:94:ef:b2:eb:a3:96:69:92:1c:c4:e8:1a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: May 12 17:00:35 2025 GMT
Not After : May 13 17:00:35 2025 GMT
Subject: CN=ea8dda49e3969a58966349dcc6519e8b817b47bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:48:7f:98:b8:f3:49:f4:0e:fe:1a:4e:de:64:
0c:09:ef:5b:ff:91:b3:e3:0b:85:ba:f0:f0:4b:4f:
94:66:5f:15:61:82:4b:56:a9:fe:47:3d:35:97:03:
a7:37:fc:d7:c2:b1:cd:40:64:ff:53:9b:5a:3d:40:
cc:5b:c9:ff:57:2d:eb:8c:04:71:d6:60:ca:21:dd:
c8:4f:f2:d9:5e:17:ba:60:fa:ca:84:d8:bd:68:41:
24:f7:9d:f6:97:2d:ac:50:f6:e5:4b:da:da:51:4c:
8d:47:d5:a4:b2:15:b3:37:de:7f:7d:fa:3f:d5:cc:
42:f9:f8:a5:f3:44:b3:28:b0:32:28:df:31:8c:fc:
3c:80:fd:0a:38:f4:a3:9c:31:1b:af:32:fb:07:7f:
26:71:0b:4b:97:c6:c8:e1:8e:14:bf:5b:e0:01:29:
1c:36:be:48:76:9d:51:4b:14:a2:40:9c:2b:17:5f:
74:72:7f:a7:12:d0:d6:4b:a8:57:82:e7:b9:1b:db:
b0:8a:3f:e6:f7:a3:4a:53:d2:20:f7:f4:25:08:a4:
a6:0f:23:b7:f1:60:59:1a:18:3a:9b:31:f4:c1:1c:
fb:03:85:c8:25:be:90:b0:9b:64:fa:25:82:8c:e3:
19:b0:67:74:51:2c:e6:f5:ee:cf:fe:3a:04:41:06:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8D:DA:49:E3:96:9A:58:96:63:49:DC:C6:51:9E:8B:81:7B:47:BC
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9e:2b:f5:cf:b7:27:82:70:df:24:d6:6a:35:82:3b:20:22:
04:0f:f8:63:1d:ea:0e:fd:51:66:0a:12:9b:ee:4f:20:a9:4f:
15:f4:ff:02:af:e6:0e:33:ff:8b:85:c1:29:2d:d0:41:15:33:
c3:bf:ca:22:2d:4c:12:7a:b6:3e:3a:ca:63:bb:2e:74:f6:05:
bb:77:f5:7e:92:23:30:81:1a:6a:2a:55:d7:ae:ff:c9:a3:ca:
f6:4c:f8:f2:5e:92:bc:20:e1:4b:63:41:65:a0:37:90:23:20:
3b:ed:1e:a4:e1:44:d2:1f:2b:d5:09:66:3d:24:01:ce:65:d7:
84:ff:1f:83:e0:64:43:f6:fd:6a:8b:05:f2:b3:f8:e8:a5:c3:
d4:1a:0b:ae:21:ba:5b:28:fb:2c:b0:96:af:91:5b:10:ac:c1:
7b:ce:df:7d:e6:a7:70:61:2f:b2:b2:fc:18:59:a7:13:19:24:
b8:a1:15:f3:59:f4:5b:e8:69:31:2f:0f:37:6e:a2:e9:1d:01:
ce:59:a2:51:6a:80:c8:f0:a2:37:0a:03:df:9a:dc:a9:8d:58:
2c:17:ee:e0:06:1c:52:72:33:d3:e5:28:f2:86:12:91:ac:44:
1b:9b:80:d7:8e:8f:87:82:c6:18:66:84:7f:cf:fb:8c:49:77:
39:36:22:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFcPKU77Lro5ZpkhzE6BqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZDMzZmUxMWI5OTQ5NTE2YzFmMWRkODE0ZTI0ZTQ3NDUz
YTllOTYwHhcNMjUwNTEyMTcwMDM1WhcNMjUwNTEzMTcwMDM1WjAzMTEwLwYDVQQD
EyhlYThkZGE0OWUzOTY5YTU4OTY2MzQ5ZGNjNjUxOWU4YjgxN2I0N2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kh/mLjzSfQO/hpO3mQMCe9b/5Gz
4wuFuvDwS0+UZl8VYYJLVqn+Rz01lwOnN/zXwrHNQGT/U5taPUDMW8n/Vy3rjARx
1mDKId3IT/LZXhe6YPrKhNi9aEEk9532ly2sUPblS9raUUyNR9WkshWzN95/ffo/
1cxC+fil80SzKLAyKN8xjPw8gP0KOPSjnDEbrzL7B38mcQtLl8bI4Y4Uv1vgASkc
Nr5Idp1RSxSiQJwrF190cn+nEtDWS6hXgue5G9uwij/m96NKU9Ig9/QlCKSmDyO3
8WBZGhg6mzH0wRz7A4XIJb6QsJtk+iWCjOMZsGd0USzm9e7P/joEQQajHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqN2knjlppYlmNJ3MZRnouBe0e8MB8GA1UdIwQY
MBaAFKnTP+EbmUlRbB8d2BTiTkdFOp6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81NmNmMzgtZDdhYi00MGMzLTlmMDkt
NjgwMjA4M2RlMjExLzEvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81NmNmMzgtZDdhYi00MGMzLTlmMDktNjgwMjA4M2RlMjEx
LzEvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJ4r9c+3
J4Jw3yTWajWCOyAiBA/4Yx3qDv1RZgoSm+5PIKlPFfT/Aq/mDjP/i4XBKS3QQRUz
w7/KIi1MEnq2PjrKY7sudPYFu3f1fpIjMIEaaipV167/yaPK9kz48l6SvCDhS2NB
ZaA3kCMgO+0epOFE0h8r1QlmPSQBzmXXhP8fg+BkQ/b9aosF8rP46KXD1BoLriG6
Wyj7LLCWr5FbEKzBe87ffeancGEvsrL8GFmnExkkuKEV81n0W+hpMS8PN26i6R0B
zlmiUWqAyPCiNwoD35rcqY1YLBfu4AYcUnIz0+Uo8oYSkaxEG5uA146Ph4LGGGaE
f8/7jEl3OTYiaw==
-----END CERTIFICATE-----
Generated at Mon May 12 22:02:58 2025 by rpki-client