Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: v/gHdzvu4iLYB5GlzfjjNKByAPrqB+vEIhXFcDP7ev0=
Subject key identifier: 3A:5C:45:46:9C:D3:D2:05:50:C7:78:6D:CB:92:42:FF:B5:8C:03:22
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 0198D54E598AE91C3277135C35A5CA3D89C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 015B
Signing time: Sat 23 Aug 2025 05:02:18 +0000
Manifest this update: Sat 23 Aug 2025 05:02:18 +0000
Manifest next update: Sun 24 Aug 2025 05:02:18 +0000
Files and hashes: 1: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: N2Iunp2TVfakRPLRQFh8nOe4ILMyibgJbyojEctqaJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:59:8a:e9:1c:32:77:13:5c:35:a5:ca:3d:89:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Aug 23 05:02:18 2025 GMT
Not After : Aug 24 05:02:18 2025 GMT
Subject: CN=3a5c45469cd3d20550c7786dcb9242ffb58c0322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:35:2b:c3:1d:e6:1f:65:23:5a:27:a4:10:
9d:58:ee:f9:76:6c:0c:d2:83:4e:53:6e:0b:f6:2d:
1d:b7:87:be:82:3e:24:08:f3:d1:eb:1b:76:89:7b:
ed:ea:06:38:37:06:6b:d2:73:73:c2:0c:84:ab:17:
7f:cc:fc:f5:19:30:28:ec:b7:76:e2:0a:5b:fc:cc:
6f:38:39:c4:34:1f:11:69:9b:58:b2:06:01:f0:7a:
01:18:7e:33:42:ce:d6:cf:20:f4:cc:18:c2:6f:c5:
1e:47:cd:00:d8:9d:c0:76:42:7f:12:8e:0e:0c:36:
05:86:78:93:8f:22:58:26:9a:62:81:dd:33:5b:4c:
fd:b5:8d:1b:cc:40:65:43:63:f1:b2:63:7a:ce:15:
33:ee:35:06:3f:7c:83:96:b1:e4:f8:03:ac:66:70:
b7:bc:7b:53:30:35:d8:94:fd:8f:44:dc:37:da:f9:
8f:7e:e0:fd:45:22:40:63:40:42:53:9f:14:61:90:
8b:4c:bb:9d:b1:91:fb:3f:e0:46:36:c3:61:08:1e:
e5:fa:37:88:43:3b:58:fc:cc:2d:bd:c8:e5:61:e6:
70:21:b0:ce:09:91:3e:d6:e2:86:d4:ee:a0:be:66:
cd:cd:1b:73:f2:f1:c8:44:3e:4b:77:c6:4d:cb:c2:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:45:46:9C:D3:D2:05:50:C7:78:6D:CB:92:42:FF:B5:8C:03:22
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9f:2a:61:82:50:59:cf:de:d3:93:cc:09:8b:be:85:ec:3c:
5a:2c:85:41:8b:fc:ad:cb:35:03:fb:75:57:90:53:a4:02:4c:
25:66:01:a1:3c:8d:73:9f:9b:37:8d:7a:df:4e:6e:f5:50:47:
5c:95:e2:e7:90:69:a3:7a:7b:f3:a0:4d:e7:76:76:3b:87:e5:
76:a9:10:b6:57:6c:e1:06:1f:f7:f4:18:de:1d:7b:5d:b6:47:
51:2a:c3:2f:8a:eb:f5:c4:4d:69:64:1b:9e:4b:04:04:7f:54:
ac:af:6a:68:6b:cf:fe:8d:89:34:d6:1c:17:e4:b9:20:96:82:
0c:e6:cd:80:a6:15:49:e9:f5:86:e4:f4:ff:de:1b:61:3d:e3:
98:8c:d9:9a:be:3a:06:cb:ff:eb:36:f8:05:22:21:1b:75:ec:
2f:4d:e1:8a:1c:f6:0c:c0:db:ad:c6:5c:90:0b:98:94:3e:13:
bf:e3:ab:23:20:83:23:b0:5d:77:90:65:e7:44:6f:1b:45:2c:
79:2b:da:85:7c:d9:ff:c1:06:0d:6c:1b:48:0c:73:87:6a:99:
7a:21:13:05:31:e3:c8:45:6f:0f:44:df:65:b6:32:46:77:b5:
a9:9d:a8:3e:15:74:f2:44:7e:2f:c0:92:70:bb:b9:10:6c:73:
cd:bc:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:14 2025 by rpki-client