Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier: ahfuWypXEi8egGun9grmpRhiWaDca9nuQALnWZ55LJI=
Subject key identifier: AB:E4:9E:F7:4D:C2:06:00:05:94:B5:CE:9B:05:4F:59:08:55:C6:CE
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial: 0199FBEB3AC8DAAD423B20DE74DAAE8E5416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number: 029E
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: syHAhXnPc5cPKyiEiAeQblecrx2g90QzaQQXHaxVIEM=)
2: VjoP5kM-KwhZcj01jM3hl-6r6UA.roa (hash: vqqeCugYqbCnSBb7Wp1fy/fzybkRWWHMWjjnU8HbuEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3a:c8:da:ad:42:3b:20:de:74:da:ae:8e:54:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=abe49ef74dc206000594b5ce9b054f590855c6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:65:e2:52:7b:99:65:ae:ea:52:78:c6:b3:
b9:a4:9a:a1:49:61:49:be:1a:54:ed:60:ca:20:98:
68:df:f8:11:54:08:25:9d:bf:62:ea:aa:0c:76:9c:
a0:ff:31:e7:cc:80:db:70:06:02:e2:55:af:61:4f:
99:1d:89:48:c2:ce:f8:cc:de:e6:07:9e:15:1f:a3:
a6:bf:1a:bc:3c:e9:ac:82:b8:d5:94:90:e8:52:21:
c1:b6:3e:76:ea:2e:7f:38:66:08:17:f3:08:ed:87:
c4:de:6e:5a:71:5d:55:51:ca:c0:a2:5d:28:77:d0:
b3:22:b3:ac:a5:2d:05:07:13:3c:a2:e7:7e:39:7c:
e0:0d:d1:df:da:40:12:0f:e6:10:ac:ec:9c:2b:5e:
e9:1a:9d:27:bc:ce:8e:88:06:0e:41:00:33:2e:6e:
68:bc:7f:a9:07:2a:97:27:a1:a6:35:a7:6b:6c:fa:
79:d5:a2:c9:c5:23:7e:78:11:a9:17:db:4a:29:5e:
30:83:2e:fd:f7:29:4b:35:6f:19:be:ee:b1:95:e5:
9d:74:45:89:74:7a:3f:9c:33:d5:94:0f:27:d0:b9:
77:b7:e7:17:52:48:8e:90:8c:5b:28:5b:e0:cf:30:
39:6f:13:25:d0:09:b5:b5:f4:04:e2:24:17:57:7f:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E4:9E:F7:4D:C2:06:00:05:94:B5:CE:9B:05:4F:59:08:55:C6:CE
X509v3 Authority Key Identifier:
keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:04:b1:9f:bc:8e:7d:9c:19:ea:e7:98:b7:cf:a0:76:7a:6b:
3d:97:50:a5:bd:b1:1e:14:d4:72:eb:a6:36:2b:5c:f7:98:51:
9e:81:61:54:aa:0d:97:d0:29:84:c6:a7:ae:d3:59:d1:54:5b:
19:26:e5:73:b7:f9:67:5a:86:8d:d3:6b:58:25:a0:11:7b:75:
0f:18:35:7c:cc:c6:21:76:e6:38:a9:72:96:d6:76:5c:62:83:
f3:ce:d9:a6:0d:60:b1:36:d0:e3:99:b3:0e:e3:4c:c1:0a:ec:
f9:29:89:80:af:4d:2e:7c:73:67:42:e3:15:0c:f6:ef:47:be:
04:16:36:4b:13:79:e4:d8:be:45:98:1c:e7:79:12:a6:8f:e8:
8f:49:27:13:85:be:f0:9c:e4:0d:02:52:f8:ac:22:35:ef:1a:
8b:d2:f5:2c:74:d5:6c:4f:43:11:8d:08:77:38:e7:61:4d:73:
1d:24:6a:e1:fc:1d:3f:2e:27:64:4d:a1:97:00:05:7a:85:b7:
aa:72:ad:f3:e3:74:c2:58:07:83:a2:21:9b:26:8c:40:91:10:
bd:45:41:72:40:b3:7b:99:0c:e1:f9:38:a2:5e:d1:db:fd:45:
0e:50:0a:f3:d9:bd:a3:66:bc:32:f6:92:3a:36:5c:53:3f:7c:
21:1e:27:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zrI2q1COyDedNqujlQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YWY4ZmZhNjQ0ZTQwNDFmZGFkMGZjOTZkNjI3MmNiNDAx
N2E4YjAwHhcNMjUxMDE5MTAwMjAxWhcNMjUxMDIwMTAwMjAxWjAzMTEwLwYDVQQD
EyhhYmU0OWVmNzRkYzIwNjAwMDU5NGI1Y2U5YjA1NGY1OTA4NTVjNmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc1l4lJ7mWWu6lJ4xrO5pJqhSWFJ
vhpU7WDKIJho3/gRVAglnb9i6qoMdpyg/zHnzIDbcAYC4lWvYU+ZHYlIws74zN7m
B54VH6Omvxq8POmsgrjVlJDoUiHBtj526i5/OGYIF/MI7YfE3m5acV1VUcrAol0o
d9CzIrOspS0FBxM8oud+OXzgDdHf2kASD+YQrOycK17pGp0nvM6OiAYOQQAzLm5o
vH+pByqXJ6GmNadrbPp51aLJxSN+eBGpF9tKKV4wgy799ylLNW8Zvu6xleWddEWJ
dHo/nDPVlA8n0Ll3t+cXUkiOkIxbKFvgzzA5bxMl0Am1tfQE4iQXV388sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvknvdNwgYABZS1zpsFT1kIVcbOMB8GA1UdIwQY
MBaAFBavj/pkTkBB/a0PyW1icstAF6iwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnEtUC1tUk9RRUg5clFfSmJXSnl5MEFYcUxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYWEwM2QtZDc0Yi00Y2ZjLWEyM2It
NWExNDM3MjQ1N2Y1LzEvRnEtUC1tUk9RRUg5clFfSmJXSnl5MEFYcUxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kYWEwM2QtZDc0Yi00Y2ZjLWEyM2ItNWExNDM3MjQ1N2Y1
LzEvRnEtUC1tUk9RRUg5clFfSmJXSnl5MEFYcUxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwSxn7yO
fZwZ6ueYt8+gdnprPZdQpb2xHhTUcuumNitc95hRnoFhVKoNl9AphManrtNZ0VRb
GSblc7f5Z1qGjdNrWCWgEXt1Dxg1fMzGIXbmOKlyltZ2XGKD887Zpg1gsTbQ45mz
DuNMwQrs+SmJgK9NLnxzZ0LjFQz270e+BBY2SxN55Ni+RZgc53kSpo/oj0knE4W+
8JzkDQJS+KwiNe8ai9L1LHTVbE9DEY0IdzjnYU1zHSRq4fwdPy4nZE2hlwAFeoW3
qnKt8+N0wlgHg6IhmyaMQJEQvUVBckCze5kM4fk4ol7R2/1FDlAK89m9o2a8MvaS
OjZcUz98IR4n/w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:10:29 2025 by rpki-client