Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: QDmJ0WeBi16vafdR1gEhZVH6LiJmQ8LAWioCd6Awbvk=
Subject key identifier: 1B:E0:F0:4A:37:AB:E5:C2:6D:F7:27:7E:35:A5:1C:76:71:52:DE:FD
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 01974D4483223F5800BA45D3A2CB53CCE7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 90
Signing time: Sun 08 Jun 2025 02:00:25 +0000
Manifest this update: Sun 08 Jun 2025 02:00:25 +0000
Manifest next update: Mon 09 Jun 2025 02:00:25 +0000
Files and hashes: 1: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: DR/p1DAe9Kd4K9iHq3B+42nuU+jZQuh+39t5d927SVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:83:22:3f:58:00:ba:45:d3:a2:cb:53:cc:e7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Jun 8 02:00:25 2025 GMT
Not After : Jun 9 02:00:25 2025 GMT
Subject: CN=1be0f04a37abe5c26df7277e35a51c767152defd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:24:1f:5f:83:33:e1:19:73:13:45:90:f9:
69:ab:a5:24:37:f0:de:76:11:90:f2:aa:55:b3:79:
3a:71:3c:62:5e:98:4b:3c:1f:e0:7c:97:dc:5c:9f:
a6:5a:5c:bc:3d:09:10:f0:a2:eb:32:0f:d6:73:aa:
41:1a:bb:46:0a:7b:58:36:04:ca:37:18:23:cb:9b:
b3:b8:aa:46:9d:f5:2c:4c:cf:df:e5:f8:35:20:57:
bf:27:c9:20:86:c9:e7:87:7b:03:59:3a:e6:93:ba:
64:f0:a7:fb:18:13:da:26:da:57:7c:c1:4e:e0:c4:
a2:57:ae:15:0f:e8:e7:b9:4f:2b:e0:db:9f:06:f6:
bb:d8:49:a4:63:28:fc:e9:e5:51:d6:2b:9b:6f:db:
d4:c3:66:2d:bf:e2:08:5a:32:1d:25:95:01:78:e7:
39:ef:ad:44:dc:02:92:23:e7:80:46:11:65:21:4a:
42:67:92:be:42:9f:69:d6:b8:d4:bd:05:c0:48:ae:
b6:8c:b7:77:af:6f:16:b8:a8:69:aa:d8:81:19:e4:
32:e2:ad:ac:6d:59:8e:86:c9:54:ce:cb:9e:96:55:
56:b0:85:fc:c1:16:de:d2:1d:d3:f2:fe:d1:1d:07:
dd:a9:b6:2b:ed:93:26:a8:d2:3b:1d:a0:ac:10:4a:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E0:F0:4A:37:AB:E5:C2:6D:F7:27:7E:35:A5:1C:76:71:52:DE:FD
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:12:41:fd:0d:5d:81:1a:fa:15:94:b2:41:de:77:43:19:4c:
82:b9:06:87:18:f8:4c:67:bb:c3:3f:b2:ce:fe:93:c1:84:6c:
24:6c:86:d3:ef:5b:ca:f4:e7:44:9c:a4:79:6b:cc:78:26:76:
3b:e1:d9:f3:1b:c8:43:8c:9c:f7:fc:12:9f:d1:37:f3:cd:57:
1c:cb:4b:2e:78:19:9b:ce:13:cb:8a:98:c7:9f:9c:ab:39:76:
4e:63:b4:25:41:18:29:a7:e0:0d:10:c8:88:09:29:1f:d2:16:
43:b8:6c:09:de:17:b5:9d:31:f1:07:fc:0b:6e:46:8a:41:76:
d6:e1:19:c4:97:67:4d:03:28:fe:60:4f:61:af:4a:e3:39:8c:
b8:63:8a:69:15:03:ee:07:97:ca:42:16:08:1f:73:8a:37:9b:
5d:04:62:ff:d2:a5:6d:29:02:20:44:46:a9:4e:4f:96:5d:e9:
de:83:6c:0a:ed:81:8c:1c:cf:5c:93:d1:31:7a:f8:1a:56:ce:
25:5d:7d:f1:15:93:39:39:00:15:4d:3f:ce:6b:85:13:aa:68:
f4:43:f8:0c:b7:13:34:c8:b7:a1:c5:88:9b:07:78:35:c1:70:
4b:24:e5:81:8c:db:ff:c2:91:7c:c6:9e:a6:99:46:56:4e:92:
a2:b6:46:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:42 2025 by rpki-client