Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: IHt1v78j1H2+MACVmVHzNQVZ5qvtu6L40xZYAiJg7hk=
Subject key identifier: 0F:B2:1E:D8:F9:8B:BC:68:61:00:36:89:30:CB:61:77:00:CB:E7:7C
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 01965DCD49A5D0ED821EC6D4AFD8066B3543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 14
Signing time: Tue 22 Apr 2025 14:00:56 +0000
Manifest this update: Tue 22 Apr 2025 14:00:56 +0000
Manifest next update: Wed 23 Apr 2025 14:00:56 +0000
Files and hashes: 1: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: NGVrJC+seEmOOnDvowGC7sd75qNvU0p7h23VBFz//k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:49:a5:d0:ed:82:1e:c6:d4:af:d8:06:6b:35:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Apr 22 14:00:56 2025 GMT
Not After : Apr 23 14:00:56 2025 GMT
Subject: CN=0fb21ed8f98bbc686100368930cb617700cbe77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:ba:36:2a:70:d6:17:e8:2a:ff:f1:00:77:
b4:3f:c7:67:fa:8f:e2:b3:ba:af:97:5a:1e:fb:a7:
30:28:ad:ba:79:7b:da:7f:2c:49:24:1f:37:f9:73:
c3:30:d4:98:02:38:48:8b:a7:82:e5:57:07:20:dd:
65:8c:ba:7b:10:02:f9:7b:b4:47:79:89:ca:18:f1:
23:ca:fb:2a:ca:f4:3e:35:f1:d9:7e:8a:b0:88:ac:
6a:08:83:b8:c6:da:f2:67:bf:77:04:8d:3f:d7:e1:
73:b8:38:c7:64:db:ce:b3:93:34:09:5a:f9:9b:9a:
5d:ca:db:10:c6:e5:40:2f:e2:ff:9b:e6:91:e3:f1:
ae:ba:a1:09:4d:80:71:bd:73:5b:4d:7a:0c:06:56:
4e:a6:8c:0c:0f:24:10:85:33:55:07:7e:22:c3:94:
6c:29:57:d8:97:51:38:cf:2d:57:60:52:f6:0a:76:
f6:2c:b5:b7:c6:54:63:1b:ea:e4:81:2c:a6:1e:e6:
24:c7:f6:4b:b2:02:0b:2c:ae:6f:79:e4:b8:21:53:
5c:0b:18:dd:96:04:d8:08:6c:ef:82:b5:8f:c5:69:
1e:2d:43:8a:30:56:6b:c2:5d:7e:9d:58:ae:57:7d:
07:b5:4b:1f:b6:54:a9:de:d4:96:57:b2:df:d4:78:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B2:1E:D8:F9:8B:BC:68:61:00:36:89:30:CB:61:77:00:CB:E7:7C
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:11:95:45:d5:af:6f:9a:41:51:a2:32:03:76:a1:c3:c9:46:
23:cd:70:6b:f8:e0:5a:e2:18:3e:de:22:3a:9e:35:49:95:ba:
9a:a1:7c:6c:cd:2f:e4:a6:df:ad:a3:16:77:d3:ff:dc:1b:df:
49:66:12:0d:88:bf:61:b6:f3:ba:e5:10:99:d8:d8:89:f2:01:
bf:97:28:a0:e4:97:d4:c0:0f:a3:d9:32:77:30:db:54:e8:d0:
9a:f3:e6:9b:dd:05:69:4c:bb:96:06:b0:85:ba:b9:09:06:8e:
1b:49:b4:01:46:80:f4:de:63:c7:62:9e:61:06:e6:b7:df:39:
71:0d:22:67:96:c6:d1:7a:f1:db:e7:33:fc:b8:ae:aa:d3:e0:
7f:13:3f:e4:6a:f8:3a:4a:97:05:21:8c:9e:96:d4:39:39:4d:
f6:d0:88:25:73:21:83:77:1c:81:0b:04:c9:45:1d:60:7d:04:
cf:8e:f1:c0:cd:06:2f:70:95:37:1c:1e:d9:52:7b:28:6d:e6:
71:5a:26:31:86:85:46:b0:43:a0:17:c5:26:13:26:58:42:dd:
21:2c:14:35:99:b0:c1:1f:8f:b3:b2:b4:b6:6d:7d:f3:f5:ba:
5b:d9:b3:8c:78:05:22:05:96:c0:2d:72:eb:82:8d:64:83:e2:
c9:c2:4b:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdzUml0O2CHsbUr9gGazVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNmQ4ODkwNDFjYjI5YWVkMWZlMWFjMzgwYzc5NGFmN2E0
MmM3ZDEwHhcNMjUwNDIyMTQwMDU2WhcNMjUwNDIzMTQwMDU2WjAzMTEwLwYDVQQD
EygwZmIyMWVkOGY5OGJiYzY4NjEwMDM2ODkzMGNiNjE3NzAwY2JlNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0y6Nipw1hfoKv/xAHe0P8dn+o/i
s7qvl1oe+6cwKK26eXvafyxJJB83+XPDMNSYAjhIi6eC5VcHIN1ljLp7EAL5e7RH
eYnKGPEjyvsqyvQ+NfHZfoqwiKxqCIO4xtryZ793BI0/1+FzuDjHZNvOs5M0CVr5
m5pdytsQxuVAL+L/m+aR4/GuuqEJTYBxvXNbTXoMBlZOpowMDyQQhTNVB34iw5Rs
KVfYl1E4zy1XYFL2Cnb2LLW3xlRjG+rkgSymHuYkx/ZLsgILLK5veeS4IVNcCxjd
lgTYCGzvgrWPxWkeLUOKMFZrwl1+nViuV30HtUsftlSp3tSWV7Lf1HgUYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+yHtj5i7xoYQA2iTDLYXcAy+d8MB8GA1UdIwQY
MBaAFKptiJBByymu0f4aw4DHlK96QsfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYt
ZTEzZDY5YTAwNDVlLzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYtZTEzZDY5YTAwNDVl
LzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBGVRdWv
b5pBUaIyA3ahw8lGI81wa/jgWuIYPt4iOp41SZW6mqF8bM0v5KbfraMWd9P/3Bvf
SWYSDYi/YbbzuuUQmdjYifIBv5cooOSX1MAPo9kydzDbVOjQmvPmm90FaUy7lgaw
hbq5CQaOG0m0AUaA9N5jx2KeYQbmt985cQ0iZ5bG0Xrx2+cz/LiuqtPgfxM/5Gr4
OkqXBSGMnpbUOTlN9tCIJXMhg3ccgQsEyUUdYH0Ez47xwM0GL3CVNxwe2VJ7KG3m
cVomMYaFRrBDoBfFJhMmWELdISwUNZmwwR+Ps7K0tm198/W6W9mzjHgFIgWWwC1y
64KNZIPiycJL8w==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:27 2025 by rpki-client