Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: XRUZwsDtEna5vHu62VCKN0OpAQ1PWZjHHartvwCze+c=
Subject key identifier: E3:2C:BC:DA:6D:AF:8D:FC:B2:01:B8:DB:2B:57:E1:83:C7:C3:8F:70
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 0196CFBD623E53B9B7ABD126033E286DB685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 4F
Signing time: Wed 14 May 2025 17:00:17 +0000
Manifest this update: Wed 14 May 2025 17:00:17 +0000
Manifest next update: Thu 15 May 2025 17:00:17 +0000
Files and hashes: 1: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: C25jxmPgMkQLo1Hjm/ofQvo0vtsLwImf2TuoVGl3S0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:bd:62:3e:53:b9:b7:ab:d1:26:03:3e:28:6d:b6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: May 14 17:00:17 2025 GMT
Not After : May 15 17:00:17 2025 GMT
Subject: CN=e32cbcda6daf8dfcb201b8db2b57e183c7c38f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:09:da:43:80:51:ca:67:3e:6a:ae:16:c9:
ca:f7:25:18:99:c5:22:0b:9f:2a:d4:1d:e4:52:3d:
c4:12:23:9b:3e:9c:50:24:a6:dc:00:b9:9d:14:ea:
b0:eb:9c:f8:af:8b:1e:a6:30:d1:bf:ab:25:c4:f8:
f5:7c:b0:a3:0a:68:20:be:fc:af:8b:ce:3a:90:7e:
a2:eb:b6:6f:ea:82:ea:fc:73:bf:46:c7:29:59:3a:
65:73:a1:80:ad:93:c1:2c:b8:4d:fe:5e:e8:dd:c4:
d2:e4:60:a2:42:24:94:6e:0c:d0:66:4f:88:20:ca:
e6:3f:72:12:b7:6e:52:1e:ab:ce:3e:54:23:ab:ff:
cf:4e:94:18:e3:fb:15:c0:05:5d:dc:e5:d4:4f:2c:
f6:93:e0:43:45:bb:6a:78:b5:2a:b7:64:1a:3d:a0:
78:2f:1d:fc:bf:41:9d:3f:99:27:86:e8:02:9c:75:
f9:1a:bd:0e:53:92:e8:db:a7:f0:bd:48:34:15:6c:
18:f8:c5:ed:10:eb:68:3c:0b:7c:37:d0:8d:2c:b8:
e0:c2:88:0c:15:62:48:6c:e4:96:96:25:5b:ba:ce:
ac:49:88:ee:40:09:54:8d:f4:e5:5f:35:e9:f0:7f:
2f:76:9c:43:0d:cb:42:60:4d:6e:33:4b:40:fb:57:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2C:BC:DA:6D:AF:8D:FC:B2:01:B8:DB:2B:57:E1:83:C7:C3:8F:70
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d0:43:70:35:14:b4:91:92:45:9e:87:19:d6:29:2b:b0:26:
e4:39:2c:14:84:15:1b:bb:c9:78:aa:42:d2:8f:75:0a:fb:9c:
f6:ff:4a:a7:b6:3f:0c:f4:16:34:6d:d6:8b:3d:b8:97:01:07:
a6:71:b3:d5:06:9b:e0:e7:0a:e6:13:a5:9c:ee:c2:1d:51:d0:
17:bc:f7:97:8c:d8:79:a6:5e:e4:f2:2b:07:f7:8d:a8:2d:9d:
08:3c:81:00:8b:9d:b5:28:ed:13:29:d6:17:b2:8c:7e:b8:c3:
3f:de:c7:a6:23:db:3c:10:3b:ef:77:e4:5f:79:9d:29:ce:28:
dd:a7:99:22:df:d7:1f:15:63:bc:9f:81:06:33:fb:6a:b0:59:
c1:e2:88:c4:1c:9b:ef:f5:28:fe:bd:1c:06:bc:38:db:d4:33:
bd:d6:23:64:07:56:ec:7d:92:6e:1f:02:d7:50:52:4d:70:a5:
59:d1:81:e6:14:0c:53:89:13:8a:04:10:8b:fe:3b:c8:5a:7f:
2e:85:0c:fd:8c:45:c0:3c:bc:a8:e9:28:aa:12:76:77:84:24:
ea:96:21:e0:cd:78:57:f4:4b:eb:9a:1d:7b:ce:d2:b7:2f:f5:
14:80:dd:2e:f3:21:d7:1d:8b:fa:9b:b4:dd:e2:81:10:bc:7d:
82:59:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:27:55 2025 by rpki-client