Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json)
Hash identifier: Dvl1FYnV2xl3R6ZGLZO98vFosXo3t9cnJtSb+evSgpk=
Subject key identifier: 66:26:4B:B4:B6:31:43:AE:70:EA:F5:0E:2E:8B:2A:B7:67:A4:A8:4E
Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Certificate serial: 0198730677C86BE249FF210926BF6BEB7102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
Manifest number: 059B
Signing time: Mon 04 Aug 2025 03:01:00 +0000
Manifest this update: Mon 04 Aug 2025 03:01:00 +0000
Manifest next update: Tue 05 Aug 2025 03:01:00 +0000
Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: 5dhtQd4DLYLGzM6WFzpgbG2vgYj3Rd4d8d0oshMvOBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:77:c8:6b:e2:49:ff:21:09:26:bf:6b:eb:71:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Validity
Not Before: Aug 4 03:01:00 2025 GMT
Not After : Aug 5 03:01:00 2025 GMT
Subject: CN=66264bb4b63143ae70eaf50e2e8b2ab767a4a84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:c0:08:72:34:d6:a6:e9:c4:23:85:11:40:
e8:7b:cb:3d:a5:40:2e:18:1d:4b:2f:57:5a:dc:5c:
95:79:ef:9a:ff:26:5c:4c:ce:bc:a3:ed:8d:60:ca:
2f:2b:0a:89:0c:bc:e9:42:3a:af:70:a6:a1:dd:e1:
74:f8:9d:02:a8:f4:93:57:1d:17:e0:24:36:9d:a9:
61:39:44:6f:2d:06:df:e6:5b:3c:6a:0d:01:c0:e1:
22:fd:7c:20:55:4f:eb:1d:11:d2:16:cd:06:36:26:
49:a4:31:18:fe:96:2d:db:ef:a4:01:6c:7f:59:06:
cc:a1:ae:37:9f:e1:cf:cf:a4:69:d2:08:55:1e:0b:
32:2b:52:dd:b7:f7:53:7c:2a:50:ad:22:95:98:ea:
85:fb:b8:ea:f8:50:f1:97:f7:f9:f0:13:12:2f:fb:
6d:49:91:58:33:c1:78:87:da:34:40:e2:83:b1:f7:
cf:10:c6:2f:d6:0b:a8:33:ac:9e:de:33:bb:36:fd:
5c:20:93:0d:a3:ef:cc:8d:80:82:58:c6:7f:66:90:
66:18:de:e1:85:2b:a2:7c:ff:fe:b9:9c:79:ba:20:
a6:76:21:d3:45:c7:62:19:00:72:9f:40:9a:10:f7:
eb:95:85:9f:da:57:bc:1b:27:f1:c9:cd:3c:6b:72:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:26:4B:B4:B6:31:43:AE:70:EA:F5:0E:2E:8B:2A:B7:67:A4:A8:4E
X509v3 Authority Key Identifier:
keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:12:49:87:2b:4c:ad:6e:0b:a5:ea:8a:30:cf:eb:aa:c4:f5:
79:a5:f8:47:1b:10:b6:a7:3f:cf:1b:ff:2f:16:50:c4:ae:ab:
69:f6:dd:95:e8:1d:11:10:ed:aa:29:da:bc:45:75:d3:c8:93:
2f:5e:d8:b9:ba:ff:ef:ce:7b:03:13:6a:10:9d:05:de:eb:c7:
fb:1c:db:e9:89:d2:b1:19:91:d9:87:57:ea:23:55:c8:21:a5:
25:fe:0a:ce:68:aa:17:48:72:dc:ad:91:69:8d:0b:9a:26:15:
27:b8:6d:0d:c4:aa:8f:bc:60:68:65:35:ae:0f:68:bd:58:37:
75:80:c0:7c:d9:a4:b4:e3:11:9f:69:d2:5f:8e:dd:73:9f:b1:
dc:9b:7d:e2:c6:67:48:5e:f9:59:18:9d:e9:b9:b1:94:db:4e:
f6:ac:51:2b:3c:d8:d9:d8:c6:96:be:6a:99:87:10:2e:bd:10:
6e:9f:c3:89:d3:be:b1:59:79:7a:f1:b5:7a:1e:65:c4:64:23:
5f:c7:3a:e3:3c:e2:61:d2:30:db:b2:b2:c1:ec:e3:bd:f0:4c:
2c:c3:e4:40:1b:39:9f:9c:2e:12:04:07:99:01:58:5c:1f:b2:
c2:5f:db:5e:e4:4e:95:e5:9c:49:f3:f4:da:39:a3:19:8a:26:
f9:71:e7:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBnfIa+JJ/yEJJr9r63ECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDk5YzE2N2EyMzZkY2Y0NTVlYjk4NzFmMGRjZWQwYmEw
ZGMyOTEwHhcNMjUwODA0MDMwMTAwWhcNMjUwODA1MDMwMTAwWjAzMTEwLwYDVQQD
Eyg2NjI2NGJiNGI2MzE0M2FlNzBlYWY1MGUyZThiMmFiNzY3YTRhODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusTACHI01qbpxCOFEUDoe8s9pUAu
GB1LL1da3FyVee+a/yZcTM68o+2NYMovKwqJDLzpQjqvcKah3eF0+J0CqPSTVx0X
4CQ2nalhOURvLQbf5ls8ag0BwOEi/XwgVU/rHRHSFs0GNiZJpDEY/pYt2++kAWx/
WQbMoa43n+HPz6Rp0ghVHgsyK1Ldt/dTfCpQrSKVmOqF+7jq+FDxl/f58BMSL/tt
SZFYM8F4h9o0QOKDsffPEMYv1guoM6ye3jO7Nv1cIJMNo+/MjYCCWMZ/ZpBmGN7h
hSuifP/+uZx5uiCmdiHTRcdiGQByn0CaEPfrlYWf2le8Gyfxyc08a3JnWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYmS7S2MUOucOr1Di6LKrdnpKhOMB8GA1UdIwQY
MBaAFKhJnBZ6I23PRV65hx8NztC6DcKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVtY0Zub2piYzlGWHJtSEh3M08wTG9Od3BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mY2Q0MWItNWUxZC00YjFhLWE1NmQt
MTYxM2U4ZDUwNjVmLzEvcUVtY0Zub2piYzlGWHJtSEh3M08wTG9Od3BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mY2Q0MWItNWUxZC00YjFhLWE1NmQtMTYxM2U4ZDUwNjVm
LzEvcUVtY0Zub2piYzlGWHJtSEh3M08wTG9Od3BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBJJhytM
rW4LpeqKMM/rqsT1eaX4RxsQtqc/zxv/LxZQxK6rafbdlegdERDtqinavEV108iT
L17Yubr/7857AxNqEJ0F3uvH+xzb6YnSsRmR2YdX6iNVyCGlJf4KzmiqF0hy3K2R
aY0LmiYVJ7htDcSqj7xgaGU1rg9ovVg3dYDAfNmktOMRn2nSX47dc5+x3Jt94sZn
SF75WRid6bmxlNtO9qxRKzzY2djGlr5qmYcQLr0Qbp/DidO+sVl5evG1eh5lxGQj
X8c64zziYdIw27KywezjvfBMLMPkQBs5n5wuEgQHmQFYXB+ywl/bXuROleWcSfP0
2jmjGYom+XHn9A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:46 2025 by rpki-client