Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json)
Hash identifier: 4j6GXW3zGBpNlZBc0a0Q6KVFfUP8UmW8oj/C1A1Wh+A=
Subject key identifier: 55:5B:F8:C7:4F:FD:32:98:B7:2C:FC:1E:37:83:7B:D6:AB:55:2F:6D
Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Certificate serial: 019A4E18C916FC386E6E77129426FAC1DA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
Manifest number: 0691
Signing time: Tue 04 Nov 2025 09:00:38 +0000
Manifest this update: Tue 04 Nov 2025 09:00:38 +0000
Manifest next update: Wed 05 Nov 2025 09:00:38 +0000
Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: IrcRp6D+ArEfJXffcKmhN6gP5REKYCgpfDssUyvEEEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c9:16:fc:38:6e:6e:77:12:94:26:fa:c1:da:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Validity
Not Before: Nov 4 09:00:38 2025 GMT
Not After : Nov 5 09:00:38 2025 GMT
Subject: CN=555bf8c74ffd3298b72cfc1e37837bd6ab552f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:a1:e1:87:1e:27:fa:b5:1c:f1:74:39:ef:
8d:7c:eb:f6:f8:0a:82:34:11:04:cf:56:8a:2c:e1:
ba:87:c6:b5:49:59:97:ae:bf:d1:4d:e4:b2:23:3a:
a0:c1:75:14:68:b1:75:7b:d9:6b:35:a3:87:6c:64:
44:15:c9:ee:b4:14:51:14:cd:85:6c:be:8c:11:63:
e9:62:52:a4:7e:bd:98:cb:51:6b:de:3a:d4:7d:f3:
38:e2:c8:3c:6f:93:ec:01:be:6e:23:c2:3c:f7:83:
99:21:1d:7f:f5:6a:2c:e8:a4:d3:5a:db:5c:ac:20:
c7:25:30:18:48:a4:ca:0d:3c:b2:d7:9a:4e:7b:65:
71:38:eb:98:b1:df:9c:c6:92:5d:3a:07:8b:ed:66:
32:8d:cb:63:dd:06:89:cf:4e:f6:15:7c:20:79:08:
56:7b:49:2f:e2:50:23:32:3c:24:92:c2:f1:a0:74:
2a:11:89:49:79:ad:4a:a7:84:1e:77:bc:2b:3b:17:
05:ca:57:50:1a:a5:dc:b2:97:e9:1c:a8:5a:e6:40:
5c:07:71:31:93:f1:bd:cc:d6:53:84:79:5c:7c:ed:
5d:8c:55:5b:57:55:87:8e:5c:66:ee:b8:19:b5:8a:
8b:20:3c:a2:fc:ac:58:9d:7a:71:50:08:fc:bc:9f:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5B:F8:C7:4F:FD:32:98:B7:2C:FC:1E:37:83:7B:D6:AB:55:2F:6D
X509v3 Authority Key Identifier:
keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d3:20:b8:15:52:26:4a:11:55:72:37:6b:73:87:83:23:9b:
d4:bd:2a:77:a6:71:01:1e:80:87:ac:3d:d2:9b:42:36:3f:16:
06:3b:16:bd:ab:f5:b5:5d:7b:5c:9a:3c:5e:04:b6:a9:a2:89:
ce:0c:47:b0:27:b0:a5:b5:2a:f8:3c:5e:65:5b:74:2d:f4:9c:
a7:55:c5:c1:ca:96:15:21:3d:e8:c1:dc:e6:18:28:58:5d:1e:
7a:ec:cb:c4:5e:16:32:50:6c:fb:a0:bf:6e:e0:f5:c6:73:c0:
01:c2:81:20:07:fa:2f:ec:1a:fc:1c:f1:dc:40:ef:e1:11:dc:
a4:bf:bb:0c:da:9c:55:a4:a6:19:4c:4b:91:18:8d:72:5b:16:
81:e9:26:d6:4c:44:e5:02:a9:6d:23:e7:4f:e4:92:be:a2:53:
89:fd:b1:45:c3:7b:9c:1b:ed:15:7e:9a:52:83:bd:42:a2:ff:
0a:84:9b:04:51:54:a2:05:2f:f9:26:ab:e9:97:23:9b:0b:23:
3b:06:64:1f:2a:27:03:0a:61:89:6d:4e:33:3b:d0:a1:b8:c0:
7c:f5:b7:9f:d2:08:8a:13:2d:7c:27:84:30:27:9d:73:bc:db:
5a:fb:58:2c:86:07:1d:90:c7:17:7e:7d:a1:b1:df:37:56:32:
b2:fb:4d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:12 2025 by rpki-client