Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: MNXIlbtZ1h54qy/C7EybughYwD5NQNkAG1vQxRipmsQ=
Subject key identifier: D2:5E:BC:CE:9E:50:F0:6F:D1:6E:85:73:35:53:82:8E:2D:F3:AA:9A
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 0198485333844A9C5054836CE32779D6ADC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 0112
Signing time: Sat 26 Jul 2025 20:01:08 +0000
Manifest this update: Sat 26 Jul 2025 20:01:08 +0000
Manifest next update: Sun 27 Jul 2025 20:01:08 +0000
Files and hashes: 1: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: qvyQ2zuhpccCTTUVuuOg3yj5yHpnSw3veoyjHrcZduU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:33:84:4a:9c:50:54:83:6c:e3:27:79:d6:ad:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Jul 26 20:01:08 2025 GMT
Not After : Jul 27 20:01:08 2025 GMT
Subject: CN=d25ebcce9e50f06fd16e85733553828e2df3aa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:2d:aa:ce:49:31:57:a9:2a:75:56:59:ab:
28:52:d3:89:81:9e:3d:f1:a0:c8:08:fb:a8:79:0a:
26:c8:28:07:e4:3e:80:a7:67:4e:62:01:e0:9b:90:
08:1f:1c:0f:db:19:36:17:37:01:62:22:de:43:cd:
54:e4:29:c7:a1:f1:2b:c4:65:76:96:2e:0f:89:2c:
c1:df:f3:10:57:47:b0:6d:89:be:1b:bd:35:63:cb:
76:d1:3f:da:89:d8:cc:97:4b:04:45:88:71:25:fe:
42:ef:40:44:32:a7:c1:43:1d:c4:e1:ef:2d:48:fc:
88:ff:a5:24:e9:a8:3f:fd:1a:a8:5f:c3:26:ec:36:
d8:ab:1b:5d:4d:1a:e7:3b:6e:bc:d0:9a:1f:50:82:
89:63:ba:d7:4a:a5:73:6a:55:0d:7e:40:cf:ea:eb:
25:07:0d:24:73:11:9f:c6:39:a9:00:ab:7c:b2:b5:
e3:12:5b:10:26:58:b6:71:16:2b:df:73:05:04:9f:
40:0f:e5:15:71:fc:7f:2b:73:43:c0:72:54:f1:cc:
7d:ad:90:ba:27:f3:a2:44:0e:1e:db:e2:a4:cc:03:
15:c7:63:f0:79:b8:68:b5:18:85:89:93:ea:fd:46:
26:7c:98:0c:8a:3f:0f:1d:7e:2e:f8:4a:48:a1:f1:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5E:BC:CE:9E:50:F0:6F:D1:6E:85:73:35:53:82:8E:2D:F3:AA:9A
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d0:5b:cc:2c:58:ed:a7:c3:22:1e:e5:da:88:e0:60:86:33:
1c:4f:c1:89:dc:3c:ab:22:c8:9a:cd:08:7a:9f:59:23:7b:d0:
71:8a:22:a2:7f:30:2d:d5:28:df:60:a5:2f:30:eb:99:ac:8f:
84:8b:0e:4c:2a:6f:83:4c:92:0e:86:a5:41:0f:0e:0d:b2:b4:
8c:4d:b6:66:a6:71:9d:63:02:87:f4:2f:40:1e:81:f7:96:8b:
b3:d2:c3:55:d6:fa:5d:8c:bf:db:48:bb:bf:3d:05:22:3a:67:
86:ec:41:81:0f:5d:47:50:d8:26:36:59:ba:36:ba:71:54:a3:
12:bc:91:2e:08:4f:2e:89:67:28:46:06:60:2c:76:64:8d:ca:
fa:95:1c:d5:1b:86:b8:d4:57:60:e4:fd:74:f9:14:83:32:79:
df:e1:f8:0a:a4:f5:30:c7:ea:12:7d:73:74:fb:8a:58:b0:f4:
0c:4e:66:dd:be:ea:0d:15:c3:36:f5:5d:5a:6c:4b:7b:19:d6:
a2:07:23:f0:33:c2:fa:54:bc:59:32:9b:0d:fd:92:d8:c0:d3:
0b:07:9a:ce:36:ad:42:20:0a:de:9e:67:33:31:36:60:53:c8:
57:d9:0d:66:c7:2c:3c:76:15:30:2d:ba:6b:b3:8c:10:da:ef:
0b:2d:60:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:36 2025 by rpki-client