Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json)
Hash identifier: kzdrEmE8LhrVo1y/Nadv08AgAxwlF/EWtFccqyPuxEw=
Subject key identifier: 07:B7:29:57:B8:B9:48:EF:36:34:7A:3B:BE:68:C9:78:4C:0F:0B:12
Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Certificate serial: 019848895C6A1F3440521BF02DA18F438ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
Manifest number: 0585
Signing time: Sat 26 Jul 2025 21:00:18 +0000
Manifest this update: Sat 26 Jul 2025 21:00:18 +0000
Manifest next update: Sun 27 Jul 2025 21:00:18 +0000
Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: ubBRCtGnHJexNICWqw1RM+tvMnXBmexXfT6LN2e/+bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:5c:6a:1f:34:40:52:1b:f0:2d:a1:8f:43:8e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Validity
Not Before: Jul 26 21:00:18 2025 GMT
Not After : Jul 27 21:00:18 2025 GMT
Subject: CN=07b72957b8b948ef36347a3bbe68c9784c0f0b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:0d:81:86:e7:9e:c7:a8:72:54:78:49:93:
f5:75:df:dc:86:b1:aa:06:a1:86:75:4c:3d:75:7e:
f0:5d:ad:bd:4d:23:f6:a7:6a:ff:6a:66:2e:fa:4a:
8e:77:bc:41:54:1a:e3:12:f6:00:82:d5:8e:e9:ca:
be:e5:d4:a9:24:0c:e4:ce:3e:f5:4b:aa:78:c6:0f:
8b:27:79:5d:1b:1c:2d:fa:b7:1c:26:36:3f:74:70:
80:40:a8:1e:da:e0:e0:b0:46:3b:62:6e:a6:29:a4:
c2:de:5a:d2:b1:84:33:4d:86:b6:08:df:67:fc:0b:
ef:fc:ec:ad:af:4b:e9:07:ac:64:e2:a5:25:10:9c:
b5:c9:29:8a:c9:92:95:b8:c9:3c:85:3d:e6:1e:61:
68:f6:f5:94:44:43:3f:43:84:fe:c2:4f:39:31:c9:
f3:64:5c:d6:3e:dd:bd:93:a8:32:af:dd:a3:da:b4:
69:ab:55:77:04:26:72:05:27:ee:ac:19:82:ce:19:
a8:16:cc:86:3c:1c:05:59:98:e8:f9:1f:1c:2b:1c:
bd:e3:3f:7c:40:18:17:8d:ba:67:69:af:f7:73:f0:
e7:fc:34:f0:c4:7c:d7:f3:e2:41:e0:2f:df:2f:8e:
2f:d5:9d:14:ae:a7:62:ad:b9:af:2e:61:25:d5:dc:
34:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B7:29:57:B8:B9:48:EF:36:34:7A:3B:BE:68:C9:78:4C:0F:0B:12
X509v3 Authority Key Identifier:
keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b2:f9:19:78:c2:bf:ff:20:aa:59:b3:35:78:d4:df:8e:90:
f1:e0:51:b6:a5:c8:4c:4c:24:9c:67:d2:45:fb:17:0f:a6:8e:
ab:59:21:b6:08:8d:2a:d4:1e:b7:23:7f:3e:43:68:10:c9:f4:
e8:1c:a3:4a:96:b1:98:19:18:b2:dd:9f:eb:bf:6b:b4:e8:1e:
72:f8:82:20:91:74:ac:c7:dc:6c:ee:d8:31:93:72:74:90:0e:
d7:7f:4d:a1:2f:ed:01:de:2b:7a:64:4e:e5:ca:78:9c:d8:77:
00:13:3f:b2:65:1b:a0:5b:88:e2:45:e6:3e:cc:96:52:22:01:
aa:62:ca:b7:70:74:5c:cf:2d:b8:9b:0f:65:83:8d:7e:d6:95:
c8:9a:97:ba:99:f5:ec:ac:66:c1:34:2c:de:58:0d:e6:5e:c2:
a0:7f:ac:99:7a:71:d0:7e:c8:ec:57:99:9a:c8:0b:1b:87:7b:
2d:af:bd:4e:be:13:03:a1:93:ba:c8:e5:11:ae:f9:92:29:8c:
c5:84:a5:1c:3e:27:b7:37:c6:75:e3:e5:56:96:1f:d2:30:b5:
05:2a:a8:26:49:8f:40:71:de:58:b9:b2:fb:f2:57:99:73:b1:
25:98:c2:a6:76:6b:09:29:af:47:c9:0f:ab:f0:51:4a:20:fe:
30:b8:43:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:21:35 2025 by rpki-client