Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json)
Hash identifier: l8TD4GurUnoISZzwulkrQBjPVSnNMZ6eUrCwO/6UQzg=
Subject key identifier: CB:7C:4A:20:34:79:9B:5F:8A:BA:CB:6E:A8:BE:3E:E1:AC:C8:16:B1
Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Certificate serial: 0197B7B369BFDADD80D256EB9A3447E28ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
Manifest number: 053A
Signing time: Sat 28 Jun 2025 18:01:17 +0000
Manifest this update: Sat 28 Jun 2025 18:01:17 +0000
Manifest next update: Sun 29 Jun 2025 18:01:17 +0000
Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: jq0ywNEodIlGyeGa01k+DfZyDB42/Bex1R1Cr46Navo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:69:bf:da:dd:80:d2:56:eb:9a:34:47:e2:8a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Validity
Not Before: Jun 28 18:01:17 2025 GMT
Not After : Jun 29 18:01:17 2025 GMT
Subject: CN=cb7c4a2034799b5f8abacb6ea8be3ee1acc816b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:62:6a:c3:19:6f:ca:ab:88:f5:d1:30:39:
b6:50:73:1c:df:9a:03:5f:6c:b7:5f:59:e6:43:c6:
e4:eb:ea:b9:3d:9c:a8:45:49:2e:4c:fc:7f:0f:f7:
6e:5a:d6:41:8b:b9:3e:b5:79:c5:7c:31:f1:7f:84:
f4:a8:e5:a8:37:96:db:42:47:d4:04:ea:df:94:29:
40:83:60:d4:97:27:a7:40:3c:c8:a5:16:fd:c8:2b:
bd:07:10:d7:09:0d:aa:ea:2d:7b:73:72:91:db:93:
43:f8:f1:5c:54:ef:27:89:e2:00:30:2e:77:74:af:
5f:8b:5d:66:62:f1:e0:26:06:7c:e6:91:ed:17:08:
b1:7e:a9:cf:3f:57:c2:70:bc:3f:98:37:95:55:19:
8c:9b:f7:6a:c1:c8:ca:12:cf:2d:96:b2:16:0c:ec:
a6:73:89:da:b6:31:4e:a9:82:06:9b:ac:38:65:64:
22:fd:c3:5f:42:58:a2:d6:0c:a7:5b:01:85:0b:97:
b6:49:9c:93:95:61:0b:85:73:79:c4:e8:84:17:30:
f7:50:85:23:b2:02:7b:d5:ae:80:6d:da:b3:ed:12:
55:0b:60:8c:25:3c:b7:f4:14:33:32:4b:96:ee:33:
aa:58:73:11:79:6e:a0:05:48:52:db:7c:85:f0:a9:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7C:4A:20:34:79:9B:5F:8A:BA:CB:6E:A8:BE:3E:E1:AC:C8:16:B1
X509v3 Authority Key Identifier:
keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:46:56:78:5a:3b:11:14:d4:ed:ac:ae:58:98:d8:be:88:95:
7c:aa:a0:17:3e:1a:1f:2c:93:56:12:2e:93:31:0e:07:5f:51:
e7:b3:0a:f4:3f:65:47:3f:15:29:3d:ee:5a:00:25:c6:a7:40:
07:fe:24:dd:3b:1c:86:10:c6:eb:d9:27:7c:0c:e7:98:d7:cf:
75:0c:82:b5:68:97:42:34:fa:c1:f2:d2:e7:1d:d5:22:d2:7d:
86:8e:f9:94:20:86:fe:70:7c:b4:07:d7:06:f7:5b:f3:b3:cd:
92:3e:27:d6:80:ee:92:b5:91:26:82:ce:0b:18:92:cb:f2:b8:
62:42:fc:74:5c:51:2a:2b:0d:bf:7a:1a:6d:36:8d:46:39:be:
fc:46:b2:56:5b:03:ad:3a:0c:d1:f4:ec:07:3f:10:13:70:3e:
fc:ca:5c:b8:a7:c0:d2:33:96:f5:f2:ee:dc:c1:74:b3:b0:c9:
3b:5e:bc:c0:69:00:45:36:39:ae:51:4e:13:d7:66:d3:71:e5:
bc:e5:2c:7a:19:36:08:27:e0:81:46:65:13:02:40:e4:bf:5d:
48:37:54:cf:b3:64:1e:1a:cf:a8:82:b5:67:07:82:65:b3:fa:
89:05:7f:09:b2:37:d5:10:ea:c6:86:60:27:ea:01:02:8b:19:
c8:30:49:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:28 2025 by rpki-client