Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: 77L8thCpeaOW2PT/2sEj5Ioza0bm79ehG5AEZiP9DQA=
Subject key identifier: 05:AA:80:A2:67:E9:D3:66:A5:FA:95:32:CA:B1:7E:89:4D:FD:CB:55
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 01977007E29AFDB52C84221007FE23BA61CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: A2
Signing time: Sat 14 Jun 2025 20:00:54 +0000
Manifest this update: Sat 14 Jun 2025 20:00:54 +0000
Manifest next update: Sun 15 Jun 2025 20:00:54 +0000
Files and hashes: 1: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: UEiMw5LVM9petLgKZ1dQDYsOlbID9umHkDKG1NoRsWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:e2:9a:fd:b5:2c:84:22:10:07:fe:23:ba:61:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Jun 14 20:00:54 2025 GMT
Not After : Jun 15 20:00:54 2025 GMT
Subject: CN=05aa80a267e9d366a5fa9532cab17e894dfdcb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:e5:0f:2e:93:f2:19:57:5e:d1:1f:74:55:
e6:79:d1:45:e5:e8:f6:21:b1:d8:26:0a:6d:4c:93:
9a:a9:0c:a3:0c:a0:57:18:7e:b8:5e:e9:29:d9:cb:
79:23:a0:42:97:7d:ab:2e:fd:ee:99:2d:cf:76:12:
6e:2a:2c:d8:f1:08:b9:d4:00:bd:60:7a:bf:2c:2d:
97:a4:0f:39:85:a0:f1:ce:49:d4:4d:87:8f:6b:40:
fd:62:ac:d0:85:d6:72:55:75:01:c8:ae:84:e2:54:
c1:72:b5:01:69:4e:28:f8:3c:e2:64:51:55:c0:1e:
34:58:1e:2e:fb:d5:3c:36:d0:6c:7d:7d:07:60:e1:
3f:96:99:7f:a9:de:08:03:a3:76:f1:be:bc:e8:eb:
ee:fc:9a:95:d7:71:56:0e:41:71:b2:b4:7a:0f:ec:
1c:87:4e:f0:74:5a:f2:41:f5:bf:45:0d:ef:20:fd:
cc:eb:17:8b:2f:99:5b:06:24:97:c1:eb:76:dd:84:
25:cf:3f:c3:c4:2d:6f:13:e8:37:f9:e5:96:85:e3:
ce:61:2f:7f:f6:ec:07:7d:95:ac:28:ed:2a:c3:52:
7d:12:90:37:9a:32:47:a8:4e:c0:eb:27:c3:80:27:
15:e0:f2:59:06:9f:dd:b6:38:3a:73:8e:6e:2b:91:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AA:80:A2:67:E9:D3:66:A5:FA:95:32:CA:B1:7E:89:4D:FD:CB:55
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ea:f8:49:9a:43:02:af:32:8d:28:70:6a:0a:0d:c0:0b:36:
61:a4:10:fa:23:68:66:2e:3a:82:85:d1:22:91:c4:09:17:21:
f2:2c:8d:73:19:df:90:04:ab:15:22:32:d0:55:61:f1:d3:37:
17:78:39:32:1b:ff:11:75:91:8d:ea:57:8e:73:48:3e:ad:84:
18:45:98:f8:63:de:31:1d:ed:4f:a1:e7:d6:b5:47:86:ec:ee:
e7:d6:4c:3e:eb:66:b0:6e:16:fa:15:81:03:11:5e:b7:fb:20:
54:12:67:94:69:5c:91:31:03:14:ec:f5:b9:a4:df:05:94:7c:
09:f6:ea:67:b9:b7:28:0a:24:b9:67:69:d4:07:0b:07:1a:ae:
3a:43:dc:90:91:62:4a:68:ca:2e:11:b6:30:52:ef:4c:0a:38:
98:40:9b:4b:18:b4:51:62:0d:66:da:1f:0d:c7:a7:ef:99:8e:
13:5f:1f:1f:b0:a9:20:cb:b5:e6:31:d0:02:fe:bd:a9:d7:42:
ed:31:cd:d0:77:b8:40:30:e3:e0:61:86:6b:ec:05:d3:11:55:
eb:4e:9b:d9:bc:dd:82:f8:c1:79:18:c8:d6:d0:3b:05:cc:8d:
01:77:f2:6e:b2:75:03:0c:3d:e6:d1:7f:1c:92:09:08:61:25:
22:22:31:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB+Ka/bUshCIQB/4jumHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNmQ4ODkwNDFjYjI5YWVkMWZlMWFjMzgwYzc5NGFmN2E0
MmM3ZDEwHhcNMjUwNjE0MjAwMDU0WhcNMjUwNjE1MjAwMDU0WjAzMTEwLwYDVQQD
EygwNWFhODBhMjY3ZTlkMzY2YTVmYTk1MzJjYWIxN2U4OTRkZmRjYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfrlDy6T8hlXXtEfdFXmedFF5ej2
IbHYJgptTJOaqQyjDKBXGH64Xukp2ct5I6BCl32rLv3umS3PdhJuKizY8Qi51AC9
YHq/LC2XpA85haDxzknUTYePa0D9YqzQhdZyVXUByK6E4lTBcrUBaU4o+DziZFFV
wB40WB4u+9U8NtBsfX0HYOE/lpl/qd4IA6N28b686Ovu/JqV13FWDkFxsrR6D+wc
h07wdFryQfW/RQ3vIP3M6xeLL5lbBiSXwet23YQlzz/DxC1vE+g3+eWWhePOYS9/
9uwHfZWsKO0qw1J9EpA3mjJHqE7A6yfDgCcV4PJZBp/dtjg6c45uK5HKDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWqgKJn6dNmpfqVMsqxfolN/ctVMB8GA1UdIwQY
MBaAFKptiJBByymu0f4aw4DHlK96QsfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYt
ZTEzZDY5YTAwNDVlLzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYtZTEzZDY5YTAwNDVl
LzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOr4SZpD
Aq8yjShwagoNwAs2YaQQ+iNoZi46goXRIpHECRch8iyNcxnfkASrFSIy0FVh8dM3
F3g5Mhv/EXWRjepXjnNIPq2EGEWY+GPeMR3tT6Hn1rVHhuzu59ZMPutmsG4W+hWB
AxFet/sgVBJnlGlckTEDFOz1uaTfBZR8CfbqZ7m3KAokuWdp1AcLBxquOkPckJFi
SmjKLhG2MFLvTAo4mECbSxi0UWINZtofDcen75mOE18fH7CpIMu15jHQAv69qddC
7THN0He4QDDj4GGGa+wF0xFV606b2bzdgvjBeRjI1tA7BcyNAXfybrJ1Aww95tF/
HJIJCGElIiIxkw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:09:05 2025 by rpki-client