Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
File: Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft (raw, json)
Hash identifier: YswOeVowK30wD0LduisOypHrYrV6w1r5ycjg5RCKQAs=
Subject key identifier: D4:CB:82:F1:E4:4E:E0:9D:9F:49:E5:AF:FE:EB:48:E6:56:C8:FB:AE
Authority key identifier: 17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
Certificate issuer: /CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Certificate serial: 0198D705E880F4E20D53ACC81807DC022B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 13:02:25 +0000
Manifest this update: Sat 23 Aug 2025 13:02:25 +0000
Manifest next update: Sun 24 Aug 2025 13:02:25 +0000
Files and hashes: 1: Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl (hash: jfqay2TMc71EfJliQ38h7KtDREcvFmPtPKMFB+2s9Gw=)
2: sXBgVFkVLsDSLFu0VPEzayMbTVY.roa (hash: 9PH3zbHvy0n97ISInagYoPKrYxbqwVNlm+VRnpV8hJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e8:80:f4:e2:0d:53:ac:c8:18:07:dc:02:2b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Validity
Not Before: Aug 23 13:02:25 2025 GMT
Not After : Aug 24 13:02:25 2025 GMT
Subject: CN=d4cb82f1e44ee09d9f49e5affeeb48e656c8fbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:38:d5:53:d9:92:f1:65:75:b2:09:b7:4e:
54:0d:df:bc:bd:7b:c7:10:71:3a:cc:ea:8f:ea:d2:
df:4a:58:bf:60:eb:b7:b6:04:82:df:62:1d:3d:2a:
c9:a9:ce:7d:7a:2d:59:32:cd:58:4c:f2:83:85:7b:
4f:9e:8d:a9:e6:a5:20:a9:3f:87:d9:6f:fe:f6:b4:
5a:3f:0c:9b:ec:42:54:1c:7e:f9:b4:14:aa:34:83:
ca:1c:cc:1c:13:d7:ad:4b:c0:45:d6:c5:5f:09:a4:
0f:68:c0:96:b5:74:7d:11:b4:72:12:4e:a4:13:4e:
23:44:0b:08:f9:6d:4b:67:51:0d:5c:b3:c1:1a:c4:
c0:95:2e:77:0b:31:77:b5:15:3f:94:fd:b1:00:19:
ed:bc:9a:62:b4:a6:c1:b5:32:d1:1e:99:ac:dc:56:
76:56:fb:64:24:f2:3d:ab:c6:53:6b:6a:1a:c8:d9:
9f:d1:2b:92:98:d6:b1:36:9d:77:a4:b6:dd:f9:23:
72:8e:ab:f4:46:c4:ed:1e:71:b6:38:d1:35:49:80:
e0:dc:54:0b:92:47:62:6c:cd:8b:65:82:b0:c7:34:
f0:c7:dd:16:0f:22:67:de:01:c1:3f:98:12:22:ca:
76:24:bf:ff:8b:98:21:86:e1:ff:a2:24:8b:2b:32:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CB:82:F1:E4:4E:E0:9D:9F:49:E5:AF:FE:EB:48:E6:56:C8:FB:AE
X509v3 Authority Key Identifier:
keyid:17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ff:02:26:e2:d3:15:d8:17:44:3d:df:2c:a0:4f:b6:08:ed:
09:8e:3c:f6:50:1e:0d:01:56:34:70:95:b8:24:cf:c9:a7:0f:
0d:87:cc:be:a1:49:f0:8b:1d:4e:44:11:44:76:3a:7f:56:48:
32:7d:c6:b8:ea:cf:04:1a:a7:70:31:26:39:6b:a3:1e:b7:39:
82:76:89:bd:2c:4e:4c:9e:30:9c:d6:43:f7:1e:02:99:db:81:
ab:49:2b:db:42:01:62:79:4e:8a:7f:2a:ee:97:f1:e5:aa:6b:
b3:d3:1d:0f:ec:bc:d9:54:a0:92:ef:1b:eb:66:68:a8:b3:08:
6b:f4:10:83:69:05:b5:51:d2:79:fb:f5:61:6a:d1:c6:07:b6:
f3:52:e3:3c:c7:17:f7:3e:92:2e:0d:aa:40:53:93:a2:8a:ae:
95:35:2f:8c:a0:97:fd:53:2d:29:1a:fa:f6:c0:eb:3d:cb:be:
65:83:d8:bc:54:b7:a2:65:e3:41:3f:74:57:7d:78:c6:79:d3:
7a:2d:b9:8d:bb:07:54:f4:50:5a:21:a6:e1:21:da:75:a2:91:
ed:e7:f1:13:06:6c:e7:97:dc:74:5b:69:45:ea:c6:ea:e6:ce:
86:00:92:0a:bd:01:93:1f:e0:c7:9c:bb:c7:94:eb:4c:15:d9:
eb:b5:80:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:19:23 2025 by rpki-client