Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
File: fqigEMxtfJMg4BLqHR424KdhwTg.mft (raw, json)
Hash identifier: h+HgfqLs5+1PG8cp8CG4X9hXTDCulcgxgKOZobOESBQ=
Subject key identifier: 1D:C3:C9:73:88:8F:08:35:B9:33:C1:39:70:D9:94:91:85:93:33:A9
Authority key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
Certificate issuer: /CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Certificate serial: 0198D515CAE5CEA604EAAEB0CED70AC0BFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
Manifest number: 0628
Signing time: Sat 23 Aug 2025 04:00:31 +0000
Manifest this update: Sat 23 Aug 2025 04:00:31 +0000
Manifest next update: Sun 24 Aug 2025 04:00:31 +0000
Files and hashes: 1: fqigEMxtfJMg4BLqHR424KdhwTg.crl (hash: ipAXiWjC69LQ9IegRVX7F1PRS/NZHdN1r+BgnnFJ4Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ca:e5:ce:a6:04:ea:ae:b0:ce:d7:0a:c0:bf:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Validity
Not Before: Aug 23 04:00:31 2025 GMT
Not After : Aug 24 04:00:31 2025 GMT
Subject: CN=1dc3c973888f0835b933c13970d99491859333a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:44:1f:3f:6c:bf:e4:58:84:95:10:e9:06:
c0:bb:e3:f8:82:6e:48:b8:12:ae:e3:48:b0:1f:46:
be:2e:be:e0:d4:d1:23:26:99:3f:c8:37:90:ea:ca:
e9:a6:50:15:d5:bc:60:73:2b:5f:7b:38:b9:0f:6a:
f8:40:54:46:74:9a:b0:2b:30:c7:ba:08:fc:c6:de:
f0:2f:46:fe:1d:52:cd:b2:ee:ea:3b:50:c4:f9:c0:
79:d6:14:3d:41:02:17:0d:5e:8d:52:d9:53:eb:a9:
a9:88:9f:91:fd:3f:b4:57:a6:d0:db:9f:e1:e2:bb:
ed:e2:ec:e8:71:b6:3b:0f:f2:78:d7:8f:62:e3:3d:
41:3c:c1:ff:18:b2:d5:d7:bb:fa:6e:56:a3:02:a5:
ce:49:da:fb:b1:76:3a:d3:9e:e7:04:21:cb:d0:26:
7b:9d:01:3f:39:36:ef:3c:09:a1:51:07:18:eb:44:
30:d9:a9:47:9a:4d:39:15:a0:a0:43:57:31:5d:65:
e0:ef:31:ae:3c:fa:d4:8f:f6:53:43:59:3e:1c:3a:
28:6b:2e:58:0d:9b:57:b3:ed:ad:72:22:3f:b8:87:
3a:4b:04:e8:37:c6:1d:e4:ee:2b:85:39:5d:63:fd:
86:9d:5c:3b:35:77:4b:ca:dc:20:42:50:73:75:22:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C3:C9:73:88:8F:08:35:B9:33:C1:39:70:D9:94:91:85:93:33:A9
X509v3 Authority Key Identifier:
keyid:7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4b:57:1e:b5:eb:38:36:32:42:0f:cc:78:ad:84:fa:59:ea:
c5:a5:74:62:75:2e:80:97:61:59:4f:d6:60:51:05:90:db:c1:
0d:c5:75:6c:b1:9b:3e:3b:87:fe:42:45:94:c4:2e:73:9e:fc:
25:17:7a:4b:36:44:6e:45:ee:ce:3a:c9:12:52:e8:b9:84:d9:
b7:ca:7c:ea:a2:5c:7e:8a:6a:ef:56:b3:98:29:c2:48:f4:10:
63:84:25:25:ea:b9:76:dc:e0:13:cf:a9:99:40:f6:7c:fa:61:
6a:b2:b7:16:65:45:17:4a:bb:b4:91:be:e6:65:89:ed:ee:9b:
7d:be:cb:8c:8e:b6:84:eb:5c:4e:b7:cc:c6:9f:dc:64:a1:6f:
0e:7b:f9:fb:e5:fb:ad:a8:d7:c1:99:90:d8:e0:8f:8e:73:fb:
3d:a7:51:84:45:f5:63:1e:15:86:80:bf:d0:34:21:07:34:df:
ba:79:98:61:42:21:b6:d2:46:77:4d:e5:cd:16:b4:ca:f4:5d:
de:3c:00:e3:e3:6d:16:2c:e6:e9:f7:9d:93:e6:1a:40:ac:b5:
cc:a6:06:a0:07:c4:de:63:07:92:ef:42:ca:90:82:1f:2f:a7:
1d:38:35:16:06:e2:a4:95:ce:4a:e0:ad:14:1c:36:27:a8:38:
86:62:8d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:59 2025 by rpki-client