Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json)
Hash identifier: LhH4CQEkpU1oIGKgBkID0wPowWQMBA5hWqZfPjld/n8=
Subject key identifier: 36:8A:2B:6E:82:74:6A:7F:D9:8E:0C:66:7E:04:BD:2D:0B:5F:BF:E0
Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Certificate serial: 019A70DC7DD374441B659A4EE66118E20E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
Manifest number: 06A3
Signing time: Tue 11 Nov 2025 03:01:29 +0000
Manifest this update: Tue 11 Nov 2025 03:01:29 +0000
Manifest next update: Wed 12 Nov 2025 03:01:29 +0000
Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: xNn0QISo+FS8bI6Xp74e5Z0qGuzLhm1fXWDBDbzkVHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:7d:d3:74:44:1b:65:9a:4e:e6:61:18:e2:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Validity
Not Before: Nov 11 03:01:29 2025 GMT
Not After : Nov 12 03:01:29 2025 GMT
Subject: CN=368a2b6e82746a7fd98e0c667e04bd2d0b5fbfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:33:16:3d:ef:82:41:61:6e:56:53:d4:c0:
02:f5:c9:b8:fc:0d:4c:55:f9:5a:75:2f:60:98:9e:
29:4d:f9:93:10:12:0f:9f:dc:41:e6:7a:5e:e6:41:
d2:65:6f:e1:a9:99:25:94:7f:df:ec:c2:6a:10:88:
a2:f2:62:c3:81:3f:88:f7:ed:24:23:8f:72:57:1d:
54:57:82:db:8c:c2:37:a8:d5:de:6d:7a:e0:f3:e1:
c9:51:9f:08:ca:fa:c6:15:44:20:4a:23:56:c3:6c:
f7:54:be:42:47:b1:55:44:ba:34:db:ab:b0:d4:06:
41:36:03:bf:b2:0b:8d:e4:b9:00:73:f4:cf:8a:d1:
2a:6f:0c:9a:ba:22:78:55:ff:b9:3f:0f:81:5d:48:
c2:0f:78:5c:20:c3:34:d6:09:e7:bc:c7:03:3d:51:
9b:20:d5:03:97:58:cb:85:fa:b1:fb:fe:71:7e:f9:
bd:e9:73:ac:ef:86:32:b9:e9:40:1b:54:ba:8b:a0:
d8:5d:b3:e2:92:fd:62:e9:e5:13:77:2d:b6:c8:fa:
91:4d:0a:f1:eb:40:58:b7:7c:92:b5:3c:b2:75:e3:
02:6a:2a:dd:b6:01:18:9d:f2:3b:5d:53:b0:85:c9:
9a:ea:d2:8d:2b:e1:ac:41:65:48:88:ed:5c:7f:ac:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8A:2B:6E:82:74:6A:7F:D9:8E:0C:66:7E:04:BD:2D:0B:5F:BF:E0
X509v3 Authority Key Identifier:
keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a3:09:51:1e:5c:da:2b:1c:b1:c9:cb:c1:66:8a:26:90:b4:
ef:63:be:79:91:81:30:ab:cf:01:f5:b4:fb:c8:18:64:c1:c8:
0c:42:27:d6:98:57:27:88:22:66:0d:1d:ba:19:ee:69:47:23:
7e:1b:2d:d6:1e:b9:8f:ff:f7:d4:df:9c:9f:cf:1e:19:ea:1c:
4c:2f:59:dd:d6:c4:4a:78:c1:bb:e6:7b:6e:54:b7:2a:15:9d:
19:a3:d6:2f:e5:14:ed:a7:59:fc:0a:16:60:bf:c5:d5:9d:14:
28:45:f4:f4:16:f7:71:1f:51:44:6a:14:ef:cb:c0:22:05:0c:
c4:23:be:99:12:f5:7c:30:1a:1f:19:da:c0:6b:2e:8f:a0:ee:
69:df:44:09:b4:04:1c:d9:5c:72:8b:0e:a7:72:fd:ec:b0:2a:
3b:92:4b:b2:b1:b1:7c:3e:56:f0:ab:de:90:34:09:f0:b0:b5:
80:97:81:c1:75:2f:4e:ec:73:e8:36:fc:a9:df:91:92:37:98:
37:8c:9b:a2:9b:2a:a1:bd:56:6a:46:50:05:65:3d:58:d1:03:
39:d5:b8:bf:d4:9f:f8:a0:a0:69:1f:5b:f7:26:51:68:ff:a2:
d0:31:70:3a:28:78:c6:bc:f0:1e:ab:0d:1c:9f:ca:b5:38:4a:
ef:ca:cc:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3H3TdEQbZZpO5mEY4g6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDk5YzE2N2EyMzZkY2Y0NTVlYjk4NzFmMGRjZWQwYmEw
ZGMyOTEwHhcNMjUxMTExMDMwMTI5WhcNMjUxMTEyMDMwMTI5WjAzMTEwLwYDVQQD
EygzNjhhMmI2ZTgyNzQ2YTdmZDk4ZTBjNjY3ZTA0YmQyZDBiNWZiZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteszFj3vgkFhblZT1MAC9cm4/A1M
VfladS9gmJ4pTfmTEBIPn9xB5npe5kHSZW/hqZkllH/f7MJqEIii8mLDgT+I9+0k
I49yVx1UV4LbjMI3qNXebXrg8+HJUZ8IyvrGFUQgSiNWw2z3VL5CR7FVRLo026uw
1AZBNgO/sguN5LkAc/TPitEqbwyauiJ4Vf+5Pw+BXUjCD3hcIMM01gnnvMcDPVGb
INUDl1jLhfqx+/5xfvm96XOs74YyuelAG1S6i6DYXbPikv1i6eUTdy22yPqRTQrx
60BYt3yStTyydeMCairdtgEYnfI7XVOwhcma6tKNK+GsQWVIiO1cf6zBJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaKK26CdGp/2Y4MZn4EvS0LX7/gMB8GA1UdIwQY
MBaAFKhJnBZ6I23PRV65hx8NztC6DcKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVtY0Zub2piYzlGWHJtSEh3M08wTG9Od3BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mY2Q0MWItNWUxZC00YjFhLWE1NmQt
MTYxM2U4ZDUwNjVmLzEvcUVtY0Zub2piYzlGWHJtSEh3M08wTG9Od3BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mY2Q0MWItNWUxZC00YjFhLWE1NmQtMTYxM2U4ZDUwNjVm
LzEvcUVtY0Zub2piYzlGWHJtSEh3M08wTG9Od3BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqMJUR5c
2iscscnLwWaKJpC072O+eZGBMKvPAfW0+8gYZMHIDEIn1phXJ4giZg0duhnuaUcj
fhst1h65j//31N+cn88eGeocTC9Z3dbESnjBu+Z7blS3KhWdGaPWL+UU7adZ/AoW
YL/F1Z0UKEX09Bb3cR9RRGoU78vAIgUMxCO+mRL1fDAaHxnawGsuj6Duad9ECbQE
HNlccosOp3L97LAqO5JLsrGxfD5W8KvekDQJ8LC1gJeBwXUvTuxz6Db8qd+RkjeY
N4ybopsqob1WakZQBWU9WNEDOdW4v9Sf+KCgaR9b9yZRaP+i0DFwOih4xrzwHqsN
HJ/KtThK78rMqw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:54 2025 by rpki-client