Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: I3KaqEJ+JmPTiTAUZD01vwPHNNtoMjV/U2Wrlq+oW7M=
Subject key identifier: DF:1A:98:89:C1:91:2A:92:93:E7:2F:DC:98:AB:EC:0E:18:5A:BA:1B
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 019A72936F2790A5992EBEAFD784ADA6230E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 0231
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: ITfyc0ThqgxTqvG4JcGpBng/vYOmet2/oHd9Ne2wt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:6f:27:90:a5:99:2e:be:af:d7:84:ad:a6:23:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=df1a9889c1912a9293e72fdc98abec0e185aba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:ac:93:64:d1:f9:8d:f8:98:19:82:d6:e5:
9a:0a:89:1d:d5:04:06:cd:c5:81:b5:9f:07:be:83:
5d:72:27:ba:76:ab:0f:e0:33:8a:47:31:34:a7:74:
83:9a:89:ee:c9:b9:87:6a:af:3b:f0:4a:9b:ee:ff:
19:93:a9:8d:8e:5e:1e:2c:74:b1:2b:13:d1:78:82:
9f:75:76:c0:d1:af:86:47:93:10:78:a8:a0:85:f6:
22:c7:3e:07:e6:2e:d5:23:90:c1:6e:71:96:da:80:
1d:08:0e:00:22:83:ed:6a:9b:59:24:1c:7c:12:c0:
0d:78:c9:c4:3d:fe:c4:c7:aa:11:fe:9d:4d:8b:9f:
fd:30:e8:aa:15:96:15:f4:cd:f3:57:f8:7f:89:20:
d2:05:36:04:13:e1:de:f9:8e:2b:99:a6:ff:d2:da:
ca:ee:96:b1:12:8b:d9:33:af:3a:6d:59:28:3a:f7:
e1:50:86:14:76:9d:a1:27:5f:85:d1:75:d9:74:8f:
68:6d:d1:ec:f2:51:2b:b1:84:2b:82:b2:bb:5d:b6:
c7:ca:84:f1:ad:cb:9d:af:5d:e9:35:95:be:61:a7:
27:35:26:8a:94:1a:0a:dc:82:fb:4a:25:31:43:73:
2a:da:08:ea:d6:11:47:8f:1c:3b:d0:10:e9:48:39:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1A:98:89:C1:91:2A:92:93:E7:2F:DC:98:AB:EC:0E:18:5A:BA:1B
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:86:93:f6:e7:d0:21:da:b9:8f:0c:f6:75:61:ff:ca:ed:c6:
00:09:ce:61:52:1f:52:f2:c3:4d:37:fe:3d:52:1e:41:25:3b:
70:7a:4c:ac:17:f4:e0:0b:cf:39:60:14:e2:b0:ba:52:f9:7d:
24:42:11:6e:a9:82:b8:b7:dd:6f:93:89:cd:28:e0:8f:4b:37:
00:d4:03:f9:01:4d:92:5f:e0:2d:88:db:52:dc:b2:71:91:75:
97:f8:a2:ca:13:52:eb:46:95:89:58:3c:05:20:2d:0e:99:bb:
8a:e8:e1:42:57:1a:b4:a3:a3:4c:76:e5:3d:a2:c0:37:3c:cb:
1a:e5:e7:07:30:dc:e1:12:e5:67:d7:26:b0:86:5c:32:07:e1:
e9:32:3d:62:2b:f5:5e:3a:33:37:91:80:9c:8c:ad:b1:d2:7a:
8e:91:63:0e:92:b4:44:87:bc:e5:4a:5d:fc:aa:2d:08:04:1a:
bd:19:4a:d0:5c:14:63:03:0f:76:6c:90:7f:31:20:a6:e3:f1:
90:a3:32:3f:c3:61:e4:70:48:b5:62:27:10:4b:71:dd:a8:a0:
5e:b5:58:07:41:f2:f8:3f:56:0e:29:e3:24:bb:8b:05:04:62:
df:25:a0:74:5f:12:63:d0:5c:de:60:be:26:49:fa:4c:42:25:
a7:68:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:32 2025 by rpki-client