Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: rDjkiXLoKyYxSLQ/ZyDC760wl9RXpFxcRBWl0LGzQV0=
Subject key identifier: 57:90:6E:51:93:8A:0D:FE:6B:C4:4C:D9:8F:39:EE:7C:3C:9F:FD:29
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 0199FCC677937B5AE246A6DAE4E5DD8CC72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 01F4
Signing time: Sun 19 Oct 2025 14:01:29 +0000
Manifest this update: Sun 19 Oct 2025 14:01:29 +0000
Manifest next update: Mon 20 Oct 2025 14:01:29 +0000
Files and hashes: 1: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: vYyLhrMgfxdoUgXa6se/YXQeyC+2Ly7DNMS/h0F00gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:77:93:7b:5a:e2:46:a6:da:e4:e5:dd:8c:c7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Oct 19 14:01:29 2025 GMT
Not After : Oct 20 14:01:29 2025 GMT
Subject: CN=57906e51938a0dfe6bc44cd98f39ee7c3c9ffd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7e:4f:09:c5:51:ed:ac:a6:44:7d:e2:f6:2c:
c5:01:b4:b7:dc:ca:f7:0a:be:5a:f2:fa:7c:d4:70:
5e:49:5e:47:6e:10:4e:cd:6d:29:21:f4:8a:4a:f6:
e6:bc:2b:75:ae:7d:98:d8:c6:db:c1:46:40:db:e7:
cf:d9:53:f3:28:95:8d:d8:1d:6d:4c:d4:ce:55:98:
9c:dc:a6:b7:e7:6e:47:1b:cc:ed:d9:ed:fb:03:a2:
51:13:f0:e0:dc:b2:d6:3c:eb:18:d6:07:e8:8b:36:
d1:b0:99:6a:4a:d2:56:a9:56:7c:fa:5a:5d:13:fd:
fe:fb:05:12:ed:0f:52:45:f8:2c:12:22:a1:09:b7:
49:78:56:61:bc:9c:67:03:14:7b:38:55:43:0e:c2:
a3:ed:49:ea:1f:3a:67:d2:ca:4d:ca:2e:6e:84:62:
18:e7:bc:c3:4f:d0:b2:15:d1:43:2e:b3:39:96:03:
1d:48:12:89:be:22:b6:0b:d9:54:16:62:77:76:22:
0f:38:33:80:ab:63:bb:c4:f6:7a:25:b2:26:02:23:
f5:fb:37:29:1f:22:42:be:43:28:e1:ad:91:18:82:
7d:94:a3:48:b4:d2:5d:d3:c3:76:25:f0:08:34:d0:
9f:5d:cb:b9:ed:6d:2d:90:0e:92:1f:09:6a:4c:fd:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:90:6E:51:93:8A:0D:FE:6B:C4:4C:D9:8F:39:EE:7C:3C:9F:FD:29
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:20:f2:b7:06:e6:6b:18:90:95:62:7f:e7:17:87:56:48:73:
4b:8c:7d:b5:6d:e0:88:66:59:01:2b:06:62:69:71:f0:f5:f6:
46:d8:60:73:6e:69:35:46:4e:19:74:06:cf:e2:ca:3e:b1:a1:
e4:24:8e:cd:bc:69:78:16:d4:6c:ed:c7:07:20:02:e6:c6:a0:
0b:49:d6:03:4f:b2:fb:89:fd:8e:55:be:8e:3d:79:10:c6:9c:
12:6d:64:bc:67:ea:4c:42:54:3c:e9:f2:18:6b:af:34:f5:35:
c2:a4:b7:a0:59:c7:a3:82:a2:2e:f6:bc:b3:6e:72:df:6a:d4:
e7:ca:59:ce:f9:2f:80:79:65:fb:33:1c:5e:1f:67:7d:34:e8:
69:66:05:3d:66:88:69:7c:ed:aa:e8:83:ef:11:aa:29:0b:0c:
65:33:87:7d:59:67:22:28:1c:b1:db:a7:84:9b:0a:ca:62:8b:
01:b9:9e:0b:b3:0a:08:ee:96:4f:6d:3c:1c:45:b6:57:de:7d:
17:78:49:d6:98:e4:11:42:03:99:4f:3d:f1:15:67:30:df:a7:
0a:04:f1:21:8f:6d:2e:95:68:e5:21:9b:ca:34:19:83:a2:a3:
65:f2:b6:b7:b9:77:f3:48:a3:da:ae:83:58:e6:c0:a4:eb:c7:
bd:07:fe:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:11 2025 by rpki-client