Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json)
Hash identifier: pwAdLQNbfFvGMf8NxYDzm/Bjb65zQABsr+H8fFK3QaQ=
Subject key identifier: A0:5B:8F:6E:1F:FA:B0:F1:0C:6A:4A:B8:D3:1E:15:5B:BC:C0:25:0D
Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Certificate serial: 0198D7736BD0158DCE91A077BE336A8A932B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
Manifest number: 05CF
Signing time: Sat 23 Aug 2025 15:02:02 +0000
Manifest this update: Sat 23 Aug 2025 15:02:02 +0000
Manifest next update: Sun 24 Aug 2025 15:02:02 +0000
Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: atVc7+JD7d7v5jeWOfwiUdX9Pau5TdERD2l1fX0AyEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:6b:d0:15:8d:ce:91:a0:77:be:33:6a:8a:93:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Validity
Not Before: Aug 23 15:02:02 2025 GMT
Not After : Aug 24 15:02:02 2025 GMT
Subject: CN=a05b8f6e1ffab0f10c6a4ab8d31e155bbcc0250d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:62:d1:e4:56:15:73:fd:dc:61:f4:4e:84:
2d:b4:16:4f:43:c7:8c:64:27:49:b0:31:d7:32:23:
77:82:f9:14:a2:2c:79:c5:de:83:a3:4d:c1:6b:82:
26:eb:3b:0f:a9:fa:52:7e:af:d1:04:18:d4:9d:e8:
e5:8d:4a:25:fe:b6:bb:ec:c5:05:3d:36:84:7d:89:
e5:75:95:63:83:4f:df:8c:41:c8:3c:90:0b:2a:bd:
e8:af:fe:eb:45:4c:b5:14:16:24:53:3e:39:32:91:
83:d3:65:ed:0c:d1:77:e0:64:7f:a0:b8:4e:e7:8a:
63:ac:57:d4:41:06:fe:09:9a:9e:05:8c:87:27:f8:
6a:eb:4f:22:b1:44:13:48:99:41:26:85:69:c7:18:
8d:21:e2:c8:bc:56:d9:89:17:a2:64:c2:b4:b1:72:
ee:d2:e6:e9:e4:45:75:62:77:f5:ab:ed:75:00:55:
8c:c7:48:24:da:d5:da:3b:df:b6:f2:34:b4:17:20:
af:ac:85:b6:e0:11:74:5f:d0:a7:56:02:28:b0:14:
86:d7:9c:a1:99:fb:0b:b6:e0:00:ee:e5:01:f1:f0:
d0:a5:4e:1e:01:cb:19:83:61:fb:7f:c2:fb:82:5d:
63:3a:1c:e0:5c:7e:0f:b1:82:f3:d7:7d:37:1b:6d:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5B:8F:6E:1F:FA:B0:F1:0C:6A:4A:B8:D3:1E:15:5B:BC:C0:25:0D
X509v3 Authority Key Identifier:
keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:23:47:15:7a:e2:d9:75:90:93:e5:02:cb:cb:f9:2c:47:01:
25:2a:e2:02:61:cb:4c:cb:0d:aa:ad:c4:d0:77:06:94:38:64:
8a:db:85:71:e8:98:2f:5f:bf:76:4b:99:63:0b:5d:81:ae:64:
82:f7:ca:51:7b:67:a0:e6:a5:a7:5a:e2:80:29:19:b7:94:e3:
74:1f:d6:a8:e6:f9:d4:f2:e2:e2:5e:04:17:3c:9d:24:9e:a2:
31:b9:03:91:a5:af:26:ea:5b:27:15:c3:d4:67:a7:04:73:75:
c8:38:77:81:e9:df:ae:b7:0f:65:68:b9:11:56:be:9d:db:57:
80:b4:d4:ee:0f:a5:3f:71:30:e7:f4:39:c0:02:db:f7:bf:ca:
fd:f5:37:ef:e6:84:59:34:d9:fc:aa:16:de:63:ac:dd:db:f0:
0d:41:6e:58:0d:59:b6:09:95:c2:64:25:a2:5a:b3:20:50:6d:
db:70:82:ff:d9:46:f2:d5:7d:29:a4:58:7b:60:34:32:8c:7f:
73:63:b8:7c:e9:27:ba:cf:6a:28:8b:cd:97:f3:e3:e0:bb:4d:
b4:60:af:34:99:bb:9a:bc:ca:9a:0e:b6:89:c0:fb:a3:bb:c9:
d3:90:e9:13:91:be:0d:e1:11:f8:80:32:e7:db:a6:9d:90:ec:
52:c5:91:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:58:21 2025 by rpki-client