Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier: IHuqdBSRrHXamwQPDJzDusje9qkas8F/7bh13q58miI=
Subject key identifier: D7:E8:98:5E:D3:D3:87:03:1D:84:C9:81:A6:AA:95:D5:EA:44:C4:00
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial: 0197B6D73341CD653A22A6DFE618F309A62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number: 0171
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: 3d3BF8VOE6XO8ajIzccLGA+5oBm4+t7eMCGST3+Bdq8=)
2: VjoP5kM-KwhZcj01jM3hl-6r6UA.roa (hash: vqqeCugYqbCnSBb7Wp1fy/fzybkRWWHMWjjnU8HbuEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:33:41:cd:65:3a:22:a6:df:e6:18:f3:09:a6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=d7e8985ed3d387031d84c981a6aa95d5ea44c400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:f7:e1:cf:f4:0b:44:25:72:a4:20:36:8b:
88:df:8e:8a:ae:60:14:a2:70:79:06:6d:34:88:ce:
cd:bd:e0:4e:1f:f1:e9:fa:ea:fe:6e:a8:20:11:08:
60:47:55:b1:91:b3:07:d1:9c:93:90:ef:57:4f:2f:
be:b2:f2:1c:8f:1b:79:d8:d3:63:34:6a:c7:ff:5b:
cc:8b:53:ea:c6:32:f0:89:c5:1b:da:78:da:4c:36:
a7:c7:e6:ad:07:0f:ca:cf:f0:99:6a:88:c0:62:48:
71:cd:2f:eb:b8:a6:74:5c:69:4e:ca:65:a7:47:d1:
ce:cb:97:c5:3d:72:b9:4e:66:0a:10:af:1f:99:cc:
41:5e:95:54:f6:0a:dd:dd:cf:53:bc:4c:8f:c2:79:
95:2c:8f:fb:2d:c5:76:e5:83:7f:f0:68:52:ca:4c:
9f:47:81:19:0a:0a:a8:39:1a:67:21:c3:5e:9b:16:
fb:37:b5:51:19:a9:c5:f2:6d:e2:bc:38:7e:02:f6:
a3:56:af:db:25:55:2b:f4:60:45:6f:39:04:cb:2c:
df:df:ee:ea:bc:88:24:3b:74:67:4a:bc:39:8a:68:
5a:86:fa:04:09:a8:b7:8f:2a:35:6a:ff:ca:70:79:
96:ca:a6:7d:0c:e6:df:5a:43:2f:e6:61:1e:f3:c6:
75:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E8:98:5E:D3:D3:87:03:1D:84:C9:81:A6:AA:95:D5:EA:44:C4:00
X509v3 Authority Key Identifier:
keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9a:64:de:3f:99:2e:79:7d:18:c9:86:f0:60:f6:0f:d5:9f:
6a:80:2c:fa:a5:bd:9e:f8:08:9e:03:f4:90:47:bf:d2:df:ae:
9f:02:fb:9d:60:2d:c5:27:20:f3:3a:ba:0e:fe:90:ba:64:e1:
e4:b6:d0:0e:57:18:27:47:26:c0:bf:5a:8e:2e:55:a0:b4:c6:
88:09:57:43:e1:aa:bb:28:ec:f2:de:a4:23:cb:b8:25:57:a1:
c7:0d:8d:f2:f8:a6:39:f1:77:dc:7e:f9:b1:41:4c:48:f5:d1:
9d:5f:93:52:f1:f1:4f:69:b2:1c:58:9c:b0:69:f9:1a:e8:59:
09:bb:1a:a4:39:ff:5f:27:8f:34:61:9a:a2:dc:0b:47:ac:8c:
f3:1d:09:50:3c:c8:2b:85:84:e7:ac:6e:53:63:02:59:3d:b4:
7a:dd:9d:88:51:43:a5:50:25:e8:ee:1e:5f:7e:32:fa:50:fa:
64:2c:18:d2:e6:a3:43:96:42:8b:a5:36:53:a2:34:c9:80:20:
48:2c:75:b8:00:ae:54:77:2b:e5:04:9c:4a:67:ef:29:e7:d7:
12:a1:48:ac:02:b4:ad:23:79:50:f7:e3:b0:2c:52:61:9b:9c:
35:b0:3f:f8:99:08:e2:98:81:8a:00:4f:88:69:56:a6:f5:ad:
0f:a6:f1:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21zNBzWU6Iqbf5hjzCaYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YWY4ZmZhNjQ0ZTQwNDFmZGFkMGZjOTZkNjI3MmNiNDAx
N2E4YjAwHhcNMjUwNjI4MTQwMDQ2WhcNMjUwNjI5MTQwMDQ2WjAzMTEwLwYDVQQD
EyhkN2U4OTg1ZWQzZDM4NzAzMWQ4NGM5ODFhNmFhOTVkNWVhNDRjNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVf34c/0C0QlcqQgNouI346KrmAU
onB5Bm00iM7NveBOH/Hp+ur+bqggEQhgR1WxkbMH0ZyTkO9XTy++svIcjxt52NNj
NGrH/1vMi1PqxjLwicUb2njaTDanx+atBw/Kz/CZaojAYkhxzS/ruKZ0XGlOymWn
R9HOy5fFPXK5TmYKEK8fmcxBXpVU9grd3c9TvEyPwnmVLI/7LcV25YN/8GhSykyf
R4EZCgqoORpnIcNemxb7N7VRGanF8m3ivDh+AvajVq/bJVUr9GBFbzkEyyzf3+7q
vIgkO3RnSrw5imhahvoECai3jyo1av/KcHmWyqZ9DObfWkMv5mEe88Z1OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfomF7T04cDHYTJgaaqldXqRMQAMB8GA1UdIwQY
MBaAFBavj/pkTkBB/a0PyW1icstAF6iwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnEtUC1tUk9RRUg5clFfSmJXSnl5MEFYcUxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYWEwM2QtZDc0Yi00Y2ZjLWEyM2It
NWExNDM3MjQ1N2Y1LzEvRnEtUC1tUk9RRUg5clFfSmJXSnl5MEFYcUxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kYWEwM2QtZDc0Yi00Y2ZjLWEyM2ItNWExNDM3MjQ1N2Y1
LzEvRnEtUC1tUk9RRUg5clFfSmJXSnl5MEFYcUxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmppk3j+Z
Lnl9GMmG8GD2D9WfaoAs+qW9nvgIngP0kEe/0t+unwL7nWAtxScg8zq6Dv6QumTh
5LbQDlcYJ0cmwL9aji5VoLTGiAlXQ+Gquyjs8t6kI8u4JVehxw2N8vimOfF33H75
sUFMSPXRnV+TUvHxT2myHFicsGn5GuhZCbsapDn/XyePNGGaotwLR6yM8x0JUDzI
K4WE56xuU2MCWT20et2diFFDpVAl6O4eX34y+lD6ZCwY0uajQ5ZCi6U2U6I0yYAg
SCx1uACuVHcr5QScSmfvKefXEqFIrAK0rSN5UPfjsCxSYZucNbA/+JkI4piBigBP
iGlWpvWtD6bxIg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:52 2025 by rpki-client