Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File: FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier: +Ctf4Amz3N03CXlyOs/hgtsvxlgMgOZLmlCLOGlbMAU=
Subject key identifier: 5F:E1:8F:C4:AF:43:6C:60:66:D4:A7:59:FF:E7:72:58:39:E2:D8:A6
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer: /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial: 0197B6A1BD19E63B07256F4875D05D2329FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number: 0484
Signing time: Sat 28 Jun 2025 13:02:22 +0000
Manifest this update: Sat 28 Jun 2025 13:02:22 +0000
Manifest next update: Sun 29 Jun 2025 13:02:22 +0000
Files and hashes: 1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: fnn3acWoOL6Qt9SlgcI+srryWGafR2a0X7+dLLWpF2o=)
2: o8S7tkvunun9ckbw4BTp3xF4qOg.roa (hash: m5zy4GD9yIfkM+gnTmUFCt3YRr3WAaO9EejYBf8+Bnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:bd:19:e6:3b:07:25:6f:48:75:d0:5d:23:29:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Validity
Not Before: Jun 28 13:02:22 2025 GMT
Not After : Jun 29 13:02:22 2025 GMT
Subject: CN=5fe18fc4af436c6066d4a759ffe7725839e2d8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:a1:03:ad:dc:29:db:66:51:7c:6b:c8:17:
1a:91:52:4b:f8:d3:75:68:cc:db:60:f6:07:b5:f3:
54:66:93:ef:d9:01:59:86:78:d5:d6:93:50:a2:0a:
99:72:b1:7a:b8:be:7d:b9:e6:15:e6:fa:f3:b5:19:
fd:8a:ab:89:0d:53:8f:fd:6a:5a:07:db:0d:56:19:
15:81:4e:ad:34:ef:ba:67:ee:46:79:a3:53:8b:34:
d8:47:4c:f3:57:4a:4f:ee:d3:8e:81:8d:74:40:fc:
5d:6a:38:5b:75:df:95:d0:4b:5f:d4:4f:af:b8:8a:
f4:cc:df:f9:98:82:b9:b0:87:4d:9e:8d:40:a4:8f:
ff:09:0a:38:25:6a:df:20:d4:54:f6:24:8f:30:c5:
92:fb:49:f3:92:d0:db:ef:cf:45:14:c0:79:46:d5:
33:3b:20:18:be:e4:d9:36:8f:ae:60:69:11:25:12:
51:e9:a5:32:6b:65:9c:91:60:0a:bf:c6:72:0b:4b:
92:7f:8c:17:d9:5b:07:65:17:f8:1b:e8:e1:37:8f:
a0:bf:ea:34:32:b4:de:b7:8e:e5:6b:c8:a7:11:aa:
c6:84:fe:06:1a:83:85:b3:4b:80:f0:1a:ea:bd:7f:
3f:c2:4c:9b:1a:48:05:34:b2:fe:58:a1:70:24:8f:
fd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:8F:C4:AF:43:6C:60:66:D4:A7:59:FF:E7:72:58:39:E2:D8:A6
X509v3 Authority Key Identifier:
keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f5:80:a6:79:cf:b7:01:f7:4b:9c:4e:fd:df:b1:da:97:83:
f9:d2:aa:8a:05:38:18:97:56:9c:2c:33:9b:59:ea:7c:d0:60:
8d:e9:a1:c7:13:f8:ba:35:7f:3f:fe:ff:53:36:79:9d:67:0c:
0c:5f:68:25:48:5a:0e:d3:28:83:44:84:ab:c1:17:80:43:43:
71:34:3f:0a:0f:cb:cd:6b:41:ac:2d:b7:a4:19:43:98:58:62:
26:aa:50:99:ce:d6:be:d4:14:b9:a0:00:f4:82:b0:05:d7:92:
3c:6a:d1:d7:0b:7f:13:31:a5:7e:22:b1:a8:5d:96:22:a0:a8:
5d:8e:5a:e7:c0:fb:6b:e6:5a:d5:9b:01:77:30:1b:8f:5b:4a:
71:4d:04:ee:0e:db:b3:62:15:76:a0:c9:47:56:52:e7:f4:5a:
1d:1d:c2:f3:30:87:c1:79:64:4c:93:56:ee:0d:73:eb:e6:4a:
c3:6f:65:8b:92:78:51:d9:5a:ba:96:6f:d5:e9:27:3f:c3:ce:
c3:2f:13:32:30:db:1f:1b:f6:e1:70:fd:12:b5:4b:dd:fe:52:
e3:4b:67:70:86:7e:46:c9:33:7f:96:56:a2:0b:d7:8b:6f:30:
c3:34:70:f4:7a:81:13:75:af:e9:1a:4c:57:c9:23:3d:ab:24:
b8:63:31:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ob0Z5jsHJW9IddBdIyn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTI4YTBlMjQxZmZmN2FhMmU2NGFhMzg4MTU2ZjIyM2Uy
ZDIxNWYwHhcNMjUwNjI4MTMwMjIyWhcNMjUwNjI5MTMwMjIyWjAzMTEwLwYDVQQD
Eyg1ZmUxOGZjNGFmNDM2YzYwNjZkNGE3NTlmZmU3NzI1ODM5ZTJkOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwqhA63cKdtmUXxryBcakVJL+NN1
aMzbYPYHtfNUZpPv2QFZhnjV1pNQogqZcrF6uL59ueYV5vrztRn9iquJDVOP/Wpa
B9sNVhkVgU6tNO+6Z+5GeaNTizTYR0zzV0pP7tOOgY10QPxdajhbdd+V0Etf1E+v
uIr0zN/5mIK5sIdNno1ApI//CQo4JWrfINRU9iSPMMWS+0nzktDb789FFMB5RtUz
OyAYvuTZNo+uYGkRJRJR6aUya2WckWAKv8ZyC0uSf4wX2VsHZRf4G+jhN4+gv+o0
MrTet47la8inEarGhP4GGoOFs0uA8BrqvX8/wkybGkgFNLL+WKFwJI/9swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/hj8SvQ2xgZtSnWf/nclg54timMB8GA1UdIwQY
MBaAFBaiig4kH/96ouZKo4gVbyI+LSFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2Et
ZmIyYTk4M2NjNjZhLzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2EtZmIyYTk4M2NjNjZh
LzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/WApnnP
twH3S5xO/d+x2peD+dKqigU4GJdWnCwzm1nqfNBgjemhxxP4ujV/P/7/UzZ5nWcM
DF9oJUhaDtMog0SEq8EXgENDcTQ/Cg/LzWtBrC23pBlDmFhiJqpQmc7WvtQUuaAA
9IKwBdeSPGrR1wt/EzGlfiKxqF2WIqCoXY5a58D7a+Za1ZsBdzAbj1tKcU0E7g7b
s2IVdqDJR1ZS5/RaHR3C8zCHwXlkTJNW7g1z6+ZKw29li5J4UdlaupZv1eknP8PO
wy8TMjDbHxv24XD9ErVL3f5S40tncIZ+Rskzf5ZWogvXi28wwzRw9HqBE3Wv6RpM
V8kjPaskuGMxnA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:41 2025 by rpki-client