Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json)
Hash identifier: zptunGC7lHRTU+16al3DiRSfwHUR4E4W7iwyzmJVnMI=
Subject key identifier: 5B:51:D5:61:34:97:A8:36:E9:3E:A9:90:78:57:5E:8D:CF:72:E9:6D
Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Certificate serial: 0196A954D949DFF88FF93C4ADA83779398F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
Manifest number: 04AE
Signing time: Wed 07 May 2025 06:00:32 +0000
Manifest this update: Wed 07 May 2025 06:00:32 +0000
Manifest next update: Thu 08 May 2025 06:00:32 +0000
Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: rpNK+FbcZdmGisMzzCTh6DhphzKasTg2SHkq7yphXTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:d9:49:df:f8:8f:f9:3c:4a:da:83:77:93:98:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Validity
Not Before: May 7 06:00:32 2025 GMT
Not After : May 8 06:00:32 2025 GMT
Subject: CN=5b51d5613497a836e93ea99078575e8dcf72e96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:36:d9:c6:1e:dc:f7:a4:4a:6f:14:fa:80:
68:3c:3a:60:5c:b7:a2:e9:5a:04:4d:ca:8e:ab:18:
63:2b:82:99:2a:f6:86:b9:64:19:40:59:bf:35:1d:
7b:8a:f3:a2:7e:1a:f1:c9:67:0d:47:d9:89:6a:9d:
81:e3:70:62:74:b8:33:12:2c:01:64:24:56:5d:97:
41:20:79:81:ad:3b:10:20:71:66:d3:91:82:49:03:
4d:22:38:ec:11:ac:08:c4:26:73:cd:95:7d:01:9c:
95:14:c1:6e:08:ed:a0:0c:44:5b:b2:87:c5:50:ae:
ce:c0:9f:18:8f:4a:fb:f9:82:c8:51:4f:ab:31:35:
ef:ad:0e:e6:75:dd:85:69:3c:1d:3e:6c:6a:64:ec:
e5:8b:47:e3:3b:09:40:b8:21:36:5b:c4:a5:f6:c7:
fe:6f:58:04:87:76:5d:b4:aa:3c:9e:2b:84:e3:fb:
28:dd:9c:8d:5b:18:ef:98:2d:17:c0:d0:0c:db:6c:
9a:fe:01:67:7a:98:aa:77:94:dc:19:6c:17:10:46:
a6:db:18:74:6e:1b:85:72:6d:6b:c8:18:1d:72:2d:
ad:40:c6:2c:fc:97:c8:ed:fc:ab:3b:69:fd:88:5f:
04:d9:45:67:61:ae:cd:19:c0:8b:12:cb:cf:ba:21:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:51:D5:61:34:97:A8:36:E9:3E:A9:90:78:57:5E:8D:CF:72:E9:6D
X509v3 Authority Key Identifier:
keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2d:0c:5f:a7:25:3c:7e:77:03:dc:4a:cc:e9:99:4b:91:5e:
c9:15:19:72:65:9c:56:b1:dd:3c:47:3e:3a:0d:9b:f9:62:85:
4c:66:60:64:b2:d5:cc:82:e3:23:0c:b7:a2:bd:e4:4f:46:9a:
73:2c:e4:d7:a3:2d:53:4a:62:89:41:59:39:ef:de:96:16:24:
18:aa:91:4e:e2:d4:5c:e3:97:ae:d7:ec:2c:7c:2b:a2:7a:7c:
e7:45:cd:7e:59:4f:79:56:a3:00:8a:f6:39:1f:7f:63:4e:e3:
a5:b8:18:bf:82:b3:0b:14:35:27:c9:74:52:29:02:60:c1:52:
41:bf:de:b8:d3:7c:33:39:cd:f3:ba:97:f4:c4:7a:21:42:61:
61:0b:ec:47:8c:fa:9a:f4:49:a5:99:26:c5:64:58:dd:f1:55:
15:74:50:83:bb:be:6b:66:26:2b:ef:80:fc:2f:ab:bb:f2:ab:
e7:6c:94:ff:c7:12:52:f9:5a:1f:93:20:76:d9:1c:6f:ab:cd:
c1:c7:2f:6b:f4:08:52:53:e4:00:95:8b:6a:1b:4e:81:9d:43:
db:b9:3a:4a:76:9d:1e:a1:36:86:54:33:70:07:70:dc:97:76:
b2:3c:9b:b7:0e:1c:ad:7d:d6:8e:ca:14:fe:e4:b6:ee:e1:d5:
04:44:16:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:29:49 2025 by rpki-client