Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File: fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier: 36FLLw25LFjlgHgbOurJG/9XUvDfmiEd5YmQBlFHtvQ=
Subject key identifier: CD:31:97:01:FB:FA:D6:E8:78:BE:62:40:F5:88:37:C9:CA:7C:CC:25
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer: /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial: 0197B70E525BF1014B5D270BDAA440A6F9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number: 029C
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: 82ywaE3JFKydhCtiLwP3kX3cHw4.roa (hash: HxQsJBHdoQOXXDmtm1dRn8dN912bmzuv+pkYTIzf//Q=)
2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: FmJb7soXYF7CE0XWtnjZaN/eTC2kAQyVOseEs7I9V0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:52:5b:f1:01:4b:5d:27:0b:da:a4:40:a6:f9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=cd319701fbfad6e878be6240f58837c9ca7ccc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:28:83:06:48:4f:4b:56:30:89:ac:ec:23:
79:57:d8:9d:aa:50:d3:5d:b3:56:7e:19:ab:ec:0c:
e9:85:64:d8:a6:1b:58:d3:2a:37:30:7c:fc:0e:a2:
1d:2e:90:95:0f:01:51:3d:88:94:b9:86:7d:09:15:
d8:2d:f0:d7:cf:31:de:28:ca:a8:f3:9a:f1:20:33:
b8:c2:f0:ee:c1:28:45:29:87:31:22:d3:32:d8:0f:
2c:91:04:59:36:54:10:76:e9:26:a2:8c:53:da:a4:
8a:29:b8:8a:69:cd:3e:3e:1b:c4:dd:47:aa:df:a9:
6e:9d:29:e6:b0:b4:9e:3a:9f:56:43:b6:cc:1c:5a:
f0:70:af:04:06:1b:c7:ee:12:2c:90:cb:4c:07:74:
4e:d2:07:b8:f5:27:60:75:07:0a:f1:b6:89:84:bc:
f7:41:2d:0e:9c:48:2c:81:5d:f0:cf:7e:8f:c5:97:
2a:f2:38:24:02:fd:fb:db:59:d4:26:b2:e3:c3:50:
7a:92:d8:05:72:ce:14:30:e7:8d:d7:dc:7e:ea:8e:
52:ec:aa:36:7a:52:22:60:3d:3b:1f:b0:ca:4e:78:
2d:e3:7c:45:3c:8c:4c:df:85:58:da:34:8d:93:c3:
b7:1d:30:40:76:ed:3e:ca:e5:35:8b:4b:f4:c9:c4:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:31:97:01:FB:FA:D6:E8:78:BE:62:40:F5:88:37:C9:CA:7C:CC:25
X509v3 Authority Key Identifier:
keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:53:ff:36:50:f3:af:19:3f:3e:91:a6:02:64:25:88:11:11:
4b:45:08:00:c8:e2:42:3a:8b:23:00:7e:be:2f:f8:70:c8:51:
7c:7b:94:1f:60:31:b0:e1:3a:1d:fd:2a:78:87:d7:48:96:f5:
ae:e3:8b:a4:5c:22:59:30:27:53:fa:fe:aa:d1:42:1c:f2:11:
c6:c8:0c:1a:04:44:eb:33:4f:35:3e:ed:57:db:ad:50:d8:74:
a7:c2:0e:71:73:8a:19:55:e1:be:7d:bd:c2:2a:e9:b3:44:69:
bc:ce:f9:0d:44:1e:e1:b3:28:4f:f2:cf:2a:df:ca:88:44:3f:
33:7b:ff:0c:94:e8:79:2a:fe:b4:f1:0b:3a:1a:c6:74:e3:a4:
db:c9:b8:da:44:81:c8:4e:b4:3b:7f:ab:77:bb:0d:5e:e1:d1:
0a:88:bb:eb:d7:0c:eb:5c:a9:70:2c:5e:85:a3:d8:f4:cb:ef:
88:fc:ed:32:a6:93:e0:c1:c0:fb:88:16:91:9f:65:82:f6:82:
0a:f6:9e:95:ed:e7:67:37:b2:f6:56:48:ca:cb:96:00:7d:84:
7d:c9:f1:05:45:93:10:95:5a:74:c6:0d:f4:fe:e6:b3:aa:95:
5c:30:81:25:b6:0d:34:72:09:95:32:99:77:66:05:c7:fc:a3:
74:70:0b:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DlJb8QFLXScL2qRApvntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYWM2NmZjMjIzMWNiMjY1NmU3NTMzNWExZmQ2Njc3MWY1
N2E5Y2MwHhcNMjUwNjI4MTUwMDU4WhcNMjUwNjI5MTUwMDU4WjAzMTEwLwYDVQQD
EyhjZDMxOTcwMWZiZmFkNmU4NzhiZTYyNDBmNTg4MzdjOWNhN2NjYzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMYogwZIT0tWMIms7CN5V9idqlDT
XbNWfhmr7AzphWTYphtY0yo3MHz8DqIdLpCVDwFRPYiUuYZ9CRXYLfDXzzHeKMqo
85rxIDO4wvDuwShFKYcxItMy2A8skQRZNlQQdukmooxT2qSKKbiKac0+PhvE3Ueq
36lunSnmsLSeOp9WQ7bMHFrwcK8EBhvH7hIskMtMB3RO0ge49SdgdQcK8baJhLz3
QS0OnEgsgV3wz36PxZcq8jgkAv3721nUJrLjw1B6ktgFcs4UMOeN19x+6o5S7Ko2
elIiYD07H7DKTngt43xFPIxM34VY2jSNk8O3HTBAdu0+yuU1i0v0ycTgPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0xlwH7+tboeL5iQPWIN8nKfMwlMB8GA1UdIwQY
MBaAFH6sZvwiMcsmVudTNaH9ZncfV6nMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUt
NDZjZTVjODI0MWRiLzEvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUtNDZjZTVjODI0MWRi
LzEvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1P/NlDz
rxk/PpGmAmQliBERS0UIAMjiQjqLIwB+vi/4cMhRfHuUH2AxsOE6Hf0qeIfXSJb1
ruOLpFwiWTAnU/r+qtFCHPIRxsgMGgRE6zNPNT7tV9utUNh0p8IOcXOKGVXhvn29
wirps0RpvM75DUQe4bMoT/LPKt/KiEQ/M3v/DJToeSr+tPELOhrGdOOk28m42kSB
yE60O3+rd7sNXuHRCoi769cM61ypcCxehaPY9MvviPztMqaT4MHA+4gWkZ9lgvaC
Cvaele3nZzey9lZIysuWAH2EfcnxBUWTEJVadMYN9P7ms6qVXDCBJbYNNHIJlTKZ
d2YFx/yjdHALnw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:29 2025 by rpki-client