Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json)
Hash identifier: 3KYPktEqujh4HyXWXnciL9jwe637xbDBV3Tg4pPXQE4=
Subject key identifier: 02:37:2B:CD:89:9F:8D:4E:BE:B1:43:29:AF:BB:91:E6:49:FA:49:03
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial: 0199FB7C7CAC1A7B2F6E09A12228C531D701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 08:01:03 +0000
Manifest this update: Sun 19 Oct 2025 08:01:03 +0000
Manifest next update: Mon 20 Oct 2025 08:01:03 +0000
Files and hashes: 1: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: X7MstS0kKrKfhO/4MFBmu2K+3/ObArE9mnxgx5NGtcU=)
2: vnzMzh2cQHm0Lys-suLZiDHDQ8A.roa (hash: R9SbPATXxScQWUAkTRPu9oq7L8jHGUzOG3svKZG10/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7c:ac:1a:7b:2f:6e:09:a1:22:28:c5:31:d7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Validity
Not Before: Oct 19 08:01:03 2025 GMT
Not After : Oct 20 08:01:03 2025 GMT
Subject: CN=02372bcd899f8d4ebeb14329afbb91e649fa4903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:c7:c9:a7:61:ba:99:02:43:98:6d:05:65:
e5:70:bc:c4:9f:fb:eb:e7:a1:a0:a9:e2:86:b9:d9:
ce:3c:07:17:73:05:dd:66:45:c1:57:e3:19:b7:cc:
fd:34:1e:d3:8c:13:08:10:48:98:e8:21:c2:80:c4:
4d:c1:ab:9f:fa:0c:a3:25:30:d2:f6:37:30:de:8d:
7c:02:16:73:84:67:da:c4:c9:f1:d9:d4:86:64:41:
18:14:81:5e:00:f9:76:2f:b2:ca:a2:17:f6:12:95:
49:71:6b:02:d1:be:4d:7f:e6:b9:b2:3c:af:c1:5b:
90:8e:fc:10:65:3d:60:6a:f4:1c:9a:ee:d6:55:55:
28:4d:a8:9f:76:01:ad:5b:7b:37:13:26:f0:6e:14:
08:b0:fe:0b:f3:4e:cb:62:aa:56:4b:00:4c:3a:e3:
80:69:bc:10:16:6f:4d:2d:d5:20:27:41:3f:91:6d:
35:e4:41:f7:40:98:e0:26:bb:49:9c:f0:09:e7:af:
4f:6e:87:70:70:a9:ed:cc:cc:b1:1a:2c:a9:15:ad:
55:c7:d1:07:e6:62:4d:52:1c:b0:73:18:e9:ff:e4:
b2:4d:b0:94:cf:b0:99:48:43:3e:80:2e:50:90:78:
c3:a2:13:9f:01:f9:3a:a8:d3:99:ae:81:30:51:ae:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:37:2B:CD:89:9F:8D:4E:BE:B1:43:29:AF:BB:91:E6:49:FA:49:03
X509v3 Authority Key Identifier:
keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6b:2f:47:20:6d:28:bb:f4:dc:55:bd:a1:a2:04:58:b9:38:
15:e4:2a:a1:60:7b:80:12:f2:6f:75:0c:22:3d:3a:1e:46:87:
4e:d9:09:b7:70:ca:c4:f4:33:ea:0b:63:17:5d:0d:65:62:b0:
11:2c:14:b2:2c:ae:41:be:f7:7a:35:cd:3b:e9:46:6a:3b:aa:
81:7c:ff:79:5c:8e:b0:10:24:b7:73:ba:dc:02:da:b0:0d:47:
da:65:c5:10:94:99:28:b5:74:a1:11:1e:88:cd:f1:19:85:0d:
08:a4:8a:39:91:74:c8:71:a3:6b:93:13:2a:11:ef:be:7d:1e:
69:87:1f:04:f1:4f:e6:48:3d:ac:00:be:26:e6:a5:75:51:c0:
bd:eb:81:6e:e3:34:21:34:70:19:ff:96:c6:b0:73:90:01:9a:
79:ad:e9:95:30:40:fa:2f:d1:3a:ce:2b:fb:6b:fc:13:11:cb:
8c:22:c4:8d:3e:67:10:2d:b1:1f:ad:7f:23:8b:55:2f:5a:12:
b3:a2:5d:23:8f:11:29:4f:c3:12:56:b1:4f:82:88:7d:d6:98:
32:20:f7:cd:3f:82:ae:4b:c2:1c:00:0a:2f:10:b2:f0:58:d3:
49:76:98:3a:b6:dd:f5:97:ba:11:2f:77:31:17:dd:c6:10:6a:
81:8d:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:36 2025 by rpki-client