Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json)
Hash identifier: U81o22ZArA30+HrolgybzBcb5UUuk7R53KGNhspv+R0=
Subject key identifier: 0F:F8:BD:D0:13:2F:02:E7:0A:64:CA:67:73:56:02:7C:E8:DC:4F:C8
Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Certificate serial: 01976E507812A20B0DF5F18EB730117E68EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
Manifest number: 0514
Signing time: Sat 14 Jun 2025 12:00:56 +0000
Manifest this update: Sat 14 Jun 2025 12:00:56 +0000
Manifest next update: Sun 15 Jun 2025 12:00:56 +0000
Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: mi0Ec9A5OxuGPe0Ze2ckevEU9xSnjFBmg/FjTs0wk1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:78:12:a2:0b:0d:f5:f1:8e:b7:30:11:7e:68:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Validity
Not Before: Jun 14 12:00:56 2025 GMT
Not After : Jun 15 12:00:56 2025 GMT
Subject: CN=0ff8bdd0132f02e70a64ca677356027ce8dc4fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:08:ad:cf:ba:e7:7c:6d:0e:d0:01:a5:d7:3c:
d3:27:7f:64:cc:2a:1b:cc:47:ec:62:a8:14:5d:b4:
34:10:b8:d5:a5:c0:46:a2:f0:fc:4b:28:d0:74:82:
b1:47:61:59:3d:5d:e0:ee:d8:cf:37:af:e9:5b:44:
ce:9d:22:94:a0:e5:6c:1b:67:f6:3e:3d:71:bb:cd:
b3:ec:fd:3e:b9:3e:17:a3:c5:21:20:a4:5c:ed:c1:
a0:80:d6:22:4a:ac:b4:37:21:6b:1e:04:2d:4f:a0:
f6:85:e3:1b:0d:9e:ac:cf:e7:48:58:e3:bc:c2:19:
80:f4:28:7b:05:ba:f0:f8:8e:6a:16:73:04:dc:ea:
f0:08:ce:57:90:0b:f6:5c:a2:b6:fd:69:51:30:13:
64:07:c6:01:21:8a:c8:eb:b9:ba:b3:25:a8:10:9f:
90:42:d4:f6:e2:6a:e0:b4:fa:de:de:dc:86:b3:47:
2d:05:5e:51:37:72:be:1b:8b:ed:27:1d:db:fe:37:
53:8e:85:ee:9f:ff:e8:10:4a:01:9e:5c:52:7a:76:
cf:c6:d2:31:1e:69:c5:fe:b4:1f:fb:db:15:a4:70:
c6:74:41:0e:95:51:7b:a0:fc:e3:e7:8e:a8:70:b2:
32:cc:c1:38:ae:6a:22:32:5a:c7:1b:2e:b2:3c:b5:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F8:BD:D0:13:2F:02:E7:0A:64:CA:67:73:56:02:7C:E8:DC:4F:C8
X509v3 Authority Key Identifier:
keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b6:c3:b4:7d:68:43:ed:07:5d:c8:50:fa:69:29:ea:a3:e7:
28:e1:e2:75:a6:00:5a:f8:0e:05:02:b1:ec:01:a4:29:d4:1b:
50:3f:70:a5:3e:28:1c:f1:27:f8:ec:4e:90:49:3c:67:2a:4f:
1e:1a:71:cc:9c:2f:34:11:48:77:fc:3f:98:8d:50:fe:e2:49:
d8:0b:41:28:24:0d:f1:19:e1:c8:df:bb:88:e9:01:6a:b5:42:
6b:0a:91:f9:c5:d0:c8:91:4d:44:38:e9:23:81:67:2c:40:b8:
e9:77:7a:76:59:1d:56:c1:6a:e2:ed:51:19:9f:b8:98:2e:6d:
10:cb:dd:5e:33:d0:3b:1a:f8:8c:39:7d:79:97:05:6d:29:25:
4d:f1:65:6a:8c:8e:a8:b4:95:10:9e:99:4b:23:16:72:90:3c:
09:83:cc:52:aa:42:d7:5b:5e:87:0c:c9:52:bd:f7:c2:f6:02:
3c:84:04:22:e7:a1:da:45:f0:db:ed:e0:75:fc:39:c7:b1:f0:
e1:51:5d:6c:35:c0:36:d3:3d:89:1c:bd:71:25:b6:1f:08:17:
35:84:a2:29:af:96:39:3c:07:c0:d3:fa:39:d2:47:06:5f:a5:
08:8e:f5:52:04:8c:c3:38:e2:70:4e:7b:71:04:1c:ca:b8:e8:
35:ed:aa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:55:58 2025 by rpki-client