Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: 8pHyMiYBIqK9Xst1H2p4KiQMxuFutUieOh4IV4modw0=
Subject key identifier: 98:40:90:A7:26:64:8D:83:CF:07:75:6E:2A:96:A6:0B:B3:ED:FD:E8
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 01989F3A74E4DF339778483E9F4A6F0C3DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 013F
Signing time: Tue 12 Aug 2025 17:01:04 +0000
Manifest this update: Tue 12 Aug 2025 17:01:04 +0000
Manifest next update: Wed 13 Aug 2025 17:01:04 +0000
Files and hashes: 1: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: l0Ymlw6ziosXxpqcTbCv22qMD/HyiVfLgvowEZlHvVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:74:e4:df:33:97:78:48:3e:9f:4a:6f:0c:3d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Aug 12 17:01:04 2025 GMT
Not After : Aug 13 17:01:04 2025 GMT
Subject: CN=984090a726648d83cf07756e2a96a60bb3edfde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5c:2c:b9:9c:d4:24:8d:ae:c2:eb:b0:9c:df:
e2:b6:03:fd:6a:87:80:0d:d5:38:c4:43:b0:e8:2e:
97:c4:92:48:e9:42:ab:b3:4c:60:c3:c7:38:05:73:
b4:bf:a2:38:25:19:ee:28:62:28:c8:1e:b0:96:83:
7f:55:88:4c:43:e9:d9:6b:98:c0:89:50:fc:19:69:
61:88:70:4f:1f:e5:7b:80:be:5c:bc:eb:e9:0f:d0:
17:cf:2c:ad:48:1f:10:5b:44:0c:61:32:f2:f7:bc:
c9:30:ad:96:b9:1c:a9:b4:18:56:18:54:81:63:b0:
69:9d:9a:b9:a2:78:b4:77:0d:c3:8a:e6:99:16:b2:
31:e5:cf:39:2d:99:7c:18:e9:d7:d7:4f:a1:45:e8:
77:00:8e:fb:5a:07:95:d5:0e:41:c7:ed:e3:6b:d1:
d9:ea:4d:a6:24:07:db:e1:90:ff:69:6e:61:0f:a2:
fd:3e:b6:b8:02:01:d8:11:21:db:50:2f:b4:c9:35:
0d:4d:ef:bf:81:a0:95:cd:5c:85:ad:5c:88:65:82:
d1:88:74:d6:59:93:1e:2d:3a:80:6d:e2:d9:3d:47:
c1:7d:ce:af:97:b5:d4:ee:ef:c2:80:a1:69:a5:86:
58:33:6a:b8:a2:51:16:f0:2b:84:d6:eb:93:ce:06:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:40:90:A7:26:64:8D:83:CF:07:75:6E:2A:96:A6:0B:B3:ED:FD:E8
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c9:4a:6e:0b:7f:32:54:ae:fb:f9:3c:ed:56:be:92:11:2f:
f6:e9:f5:67:a1:c9:b9:38:e2:8c:7e:9f:21:59:5b:ac:10:42:
19:07:29:fd:d7:2c:c7:85:dd:c5:e5:2f:7c:63:6a:fa:2e:ae:
71:8a:fa:6c:04:61:3d:ff:59:0f:60:d6:08:c8:2a:b2:28:97:
bd:4c:3a:10:84:c3:d1:2a:05:52:a3:b4:0e:76:74:92:4e:49:
da:38:86:d7:06:c8:0b:80:be:17:1b:f1:6c:ab:5a:54:92:c2:
25:9a:40:af:3d:ab:ad:e4:b2:59:03:8e:1b:48:ba:2d:be:09:
fc:dd:06:5b:a9:eb:b3:0f:29:8b:ab:00:6f:f3:92:88:96:7e:
ff:e8:a9:e0:c4:49:b0:fc:76:25:17:bc:bb:ec:c5:d3:06:e0:
b9:42:be:61:2c:44:0c:d2:38:94:8e:ba:93:5d:59:5a:46:6b:
87:0f:d8:74:80:ae:84:96:d2:ca:1f:bb:5c:19:88:e7:28:66:
14:12:4c:e1:be:4a:0a:86:d2:84:00:63:52:0c:14:81:60:9a:
a2:da:8d:0d:1e:fa:de:c0:77:0d:af:9c:07:ab:70:46:c1:ff:
e2:5e:e6:f6:2e:49:f0:30:ac:17:66:f1:b9:84:ce:4e:25:35:
c5:9d:0c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:32 2025 by rpki-client