Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
File: fqigEMxtfJMg4BLqHR424KdhwTg.mft (raw, json)
Hash identifier: 3c7Aab7zIRbguXgHJT6M22ilYJgLx3BN3awBWoOaw4w=
Subject key identifier: D4:B2:D1:E6:15:FC:DA:CC:47:10:5D:50:32:60:D6:AF:B7:3C:CF:C8
Authority key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
Certificate issuer: /CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Certificate serial: 01984A09E2F7EBD931D0E18CB01DDA1A3113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
Manifest number: 05E0
Signing time: Sun 27 Jul 2025 04:00:18 +0000
Manifest this update: Sun 27 Jul 2025 04:00:18 +0000
Manifest next update: Mon 28 Jul 2025 04:00:18 +0000
Files and hashes: 1: fqigEMxtfJMg4BLqHR424KdhwTg.crl (hash: 3W9k093SNjvxgDOWSut4WLqKgw5wFYym5PeZvz0apfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:e2:f7:eb:d9:31:d0:e1:8c:b0:1d:da:1a:31:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Validity
Not Before: Jul 27 04:00:18 2025 GMT
Not After : Jul 28 04:00:18 2025 GMT
Subject: CN=d4b2d1e615fcdacc47105d503260d6afb73ccfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:8b:e4:25:de:ce:1b:de:dc:b8:30:30:9c:
bc:de:86:03:e4:8a:58:98:7a:8f:38:04:d7:f6:bb:
77:8e:20:d8:a9:ab:56:e8:66:d0:e0:80:e3:52:54:
e4:4b:95:80:14:36:81:8e:d1:69:26:b9:79:9d:bf:
78:f9:bd:95:2e:e2:44:a3:aa:56:87:36:65:ae:97:
d4:99:cc:35:b4:e9:e2:4e:9e:1c:f0:68:90:f3:66:
2c:4d:0b:34:65:c0:71:76:37:4e:b5:46:a8:fb:36:
a0:00:e3:4a:cf:95:1c:c6:40:1a:4d:89:70:82:07:
46:a7:bd:e7:5a:b2:ef:99:51:88:9a:ce:38:17:57:
1e:b2:ba:78:01:3f:c1:74:5e:b4:26:6a:39:60:8f:
6a:8b:83:71:0f:e5:d8:90:45:3b:99:79:9e:e5:23:
28:08:37:34:29:e2:a8:26:cb:8d:bc:81:39:67:ed:
7c:f4:cc:8f:02:d2:93:71:12:16:20:d5:bc:69:10:
04:5c:02:51:2a:58:8c:55:66:65:f0:ec:d0:18:1e:
d1:a8:ec:ae:fc:68:a8:22:fe:d7:fb:b6:de:ad:69:
49:60:60:f1:e9:33:d6:55:45:88:19:b6:68:24:78:
68:62:00:93:41:3b:86:29:53:e7:73:ef:94:a6:1b:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B2:D1:E6:15:FC:DA:CC:47:10:5D:50:32:60:D6:AF:B7:3C:CF:C8
X509v3 Authority Key Identifier:
keyid:7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:86:7e:f7:16:28:32:92:8a:d7:30:cc:18:be:b1:dd:34:8b:
d2:50:e8:83:a4:1d:06:4a:f0:1e:ff:db:e4:3f:4d:58:d3:46:
db:13:aa:3c:a4:95:29:91:93:d8:30:92:26:4b:78:31:b7:be:
64:f1:1b:20:6f:4a:f6:1e:c0:5c:ed:43:46:38:a0:a2:4c:1f:
3a:48:52:46:20:4b:53:d9:98:62:8b:0f:49:5a:cd:ac:33:60:
9e:17:76:5f:3c:9b:4e:6c:36:0f:2e:2c:ea:36:32:59:9f:22:
47:53:5b:25:b4:c1:e1:a6:65:e2:65:bf:13:71:a4:2d:0f:dd:
d5:f2:20:ff:6b:fd:36:58:16:37:a5:e0:26:ed:b5:fb:1e:cc:
61:3e:99:db:6a:4b:66:e9:27:88:78:3b:71:fa:5e:18:6d:90:
96:32:bf:84:60:f5:07:cc:02:77:c8:b1:68:f4:a9:ab:bb:a8:
3f:31:dd:7e:5d:30:0d:92:5a:31:cf:d0:3f:03:e9:2d:e3:ed:
a7:53:93:91:83:8c:1c:32:c0:5d:9c:85:63:f4:bc:65:a3:32:
36:bd:f6:97:f9:f0:b2:44:4e:e0:97:3f:38:3d:82:22:0b:e3:
29:0b:2a:a1:1c:b5:de:90:1c:b6:ef:ff:fb:8e:0f:a9:4f:4e:
98:4e:02:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCeL369kx0OGMsB3aGjETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYThhMDEwY2M2ZDdjOTMyMGUwMTJlYTFkMWUzNmUwYTc2
MWMxMzgwHhcNMjUwNzI3MDQwMDE4WhcNMjUwNzI4MDQwMDE4WjAzMTEwLwYDVQQD
EyhkNGIyZDFlNjE1ZmNkYWNjNDcxMDVkNTAzMjYwZDZhZmI3M2NjZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhGL5CXezhve3LgwMJy83oYD5IpY
mHqPOATX9rt3jiDYqatW6GbQ4IDjUlTkS5WAFDaBjtFpJrl5nb94+b2VLuJEo6pW
hzZlrpfUmcw1tOniTp4c8GiQ82YsTQs0ZcBxdjdOtUao+zagAONKz5UcxkAaTYlw
ggdGp73nWrLvmVGIms44F1cesrp4AT/BdF60Jmo5YI9qi4NxD+XYkEU7mXme5SMo
CDc0KeKoJsuNvIE5Z+189MyPAtKTcRIWINW8aRAEXAJRKliMVWZl8OzQGB7RqOyu
/GioIv7X+7berWlJYGDx6TPWVUWIGbZoJHhoYgCTQTuGKVPnc++UphuKdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSy0eYV/NrMRxBdUDJg1q+3PM/IMB8GA1UdIwQY
MBaAFH6ooBDMbXyTIOAS6h0eNuCnYcE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iYWE4NmUtN2ZjNi00NDJmLWFkZTEt
NDViZWZiZjFlZjdmLzEvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iYWE4NmUtN2ZjNi00NDJmLWFkZTEtNDViZWZiZjFlZjdm
LzEvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4Z+9xYo
MpKK1zDMGL6x3TSL0lDog6QdBkrwHv/b5D9NWNNG2xOqPKSVKZGT2DCSJkt4Mbe+
ZPEbIG9K9h7AXO1DRjigokwfOkhSRiBLU9mYYosPSVrNrDNgnhd2XzybTmw2Dy4s
6jYyWZ8iR1NbJbTB4aZl4mW/E3GkLQ/d1fIg/2v9NlgWN6XgJu21+x7MYT6Z22pL
ZukniHg7cfpeGG2QljK/hGD1B8wCd8ixaPSpq7uoPzHdfl0wDZJaMc/QPwPpLePt
p1OTkYOMHDLAXZyFY/S8ZaMyNr32l/nwskRO4Jc/OD2CIgvjKQsqoRy13pActu//
+44PqU9OmE4CZw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:35:51 2025 by rpki-client