Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
File: fqigEMxtfJMg4BLqHR424KdhwTg.mft (raw, json)
Hash identifier: yHvqR8rOF/YYeGwSgqHSHWqgk7LCxwjHPOxyFgQr0iU=
Subject key identifier: 34:AE:9D:B5:41:75:F4:96:9F:DB:62:0E:B8:49:06:58:81:37:65:DD
Authority key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
Certificate issuer: /CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Certificate serial: 0198936CEB7422ED432CD5FDE01AD68E2BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
Manifest number: 0606
Signing time: Sun 10 Aug 2025 10:00:45 +0000
Manifest this update: Sun 10 Aug 2025 10:00:45 +0000
Manifest next update: Mon 11 Aug 2025 10:00:45 +0000
Files and hashes: 1: fqigEMxtfJMg4BLqHR424KdhwTg.crl (hash: P20vUzAh00c+SKKTlLFXB1uwYGp0PHANKuG9RTt405s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:eb:74:22:ed:43:2c:d5:fd:e0:1a:d6:8e:2b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Validity
Not Before: Aug 10 10:00:45 2025 GMT
Not After : Aug 11 10:00:45 2025 GMT
Subject: CN=34ae9db54175f4969fdb620eb8490658813765dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:f5:a8:e6:28:4f:0a:45:56:e0:25:a2:22:
87:ae:60:82:dc:8d:15:61:63:16:30:44:3d:e1:ea:
f9:d8:98:b4:2d:c9:48:db:2d:dc:ba:1e:a2:14:9d:
24:82:26:c2:9a:f7:bf:bc:7a:37:33:94:ae:8c:65:
e0:01:a2:df:55:c9:62:ac:88:dc:2d:89:a0:14:24:
f0:03:4d:3e:85:89:44:e0:9b:10:60:2d:94:7d:41:
ab:b3:12:c1:98:d1:00:bb:ac:12:e1:d0:43:15:4e:
6c:18:c8:8c:de:fc:00:76:87:7a:aa:8e:c9:ee:b3:
95:ae:f9:1f:a6:a7:0e:7c:11:ef:54:a6:d4:d3:5a:
05:3e:1b:64:84:9c:74:ba:64:61:21:3b:fa:82:6a:
4d:66:33:a6:d9:f9:25:02:2f:03:a7:9d:96:86:ba:
a9:93:25:6b:4f:24:e1:69:8e:1c:93:52:50:3c:74:
33:2a:2f:e3:77:e2:11:5f:7b:4a:01:b2:f8:80:09:
ee:55:42:77:95:7e:88:9f:df:2b:ea:d9:e4:22:99:
e3:d7:46:37:8a:ae:ff:4b:3a:23:8c:ba:26:94:a3:
23:41:50:b4:29:3d:7c:15:35:69:02:70:e6:5b:1d:
37:69:f6:39:42:de:80:52:f3:80:c8:45:55:00:9b:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AE:9D:B5:41:75:F4:96:9F:DB:62:0E:B8:49:06:58:81:37:65:DD
X509v3 Authority Key Identifier:
keyid:7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6c:f2:04:81:b1:b6:c3:af:32:c1:d4:48:85:a6:7e:1f:c4:
fd:8f:71:97:ff:5f:04:76:ff:1f:28:a0:a1:9c:21:0d:81:67:
29:d5:a4:bf:31:33:8f:c2:60:fc:b1:ab:c0:b6:38:70:75:11:
54:4a:56:57:73:e4:c7:a9:aa:96:c5:03:50:8d:e6:df:9d:55:
b4:a3:56:d1:89:f6:5b:4b:25:67:9f:19:97:33:b8:29:54:d0:
bb:8b:fa:cd:50:40:e8:1b:43:02:3a:56:4b:fa:aa:58:1c:e4:
74:41:53:61:07:25:8b:67:5b:13:6f:7e:1c:f6:5d:78:74:1c:
d5:76:d7:70:03:2f:c3:fc:3d:f4:e1:01:5a:95:67:c9:c2:e6:
23:86:d6:84:3c:9c:fe:01:01:99:58:91:18:28:85:b1:cb:ae:
74:bd:e4:93:32:c0:f3:4d:4e:f9:b7:e5:6b:d6:fa:c1:64:df:
30:c6:6a:a2:b1:fe:9d:15:fe:ce:e5:12:fc:fc:32:e7:03:77:
76:58:d6:51:ec:3a:ba:0a:e9:03:46:3a:0e:00:f6:5e:83:fa:
4d:a2:fe:9f:48:e4:26:2e:f6:b8:f6:cf:d8:4f:61:7b:99:af:
fa:24:bf:3f:ec:e2:96:3e:ed:d0:a3:07:94:91:ec:d3:48:bd:
17:5d:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:27 2025 by rpki-client