Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
File: Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft (raw, json)
Hash identifier: 4Ot8IiaPUscC8poh6XyNU8HtSQrpOesJTc3kRHII/f0=
Subject key identifier: B3:A9:3B:06:B8:93:D8:5A:54:72:D1:FE:E6:9F:A7:E2:0C:4C:FF:BF
Authority key identifier: 16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
Certificate issuer: /CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Certificate serial: 0197B7455B1DE14E5C14749600D86DBC74EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
Manifest number: 1543
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl (hash: 6VMLvf6deNTuPQvol/bY9x9IM/PuNEiVC1uWBXfGY4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5b:1d:e1:4e:5c:14:74:96:00:d8:6d:bc:74:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=b3a93b06b893d85a5472d1fee69fa7e20c4cffbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:88:b4:aa:a9:50:20:fe:3d:66:af:b3:a9:
3c:16:8e:57:94:cd:f5:95:f0:5c:5a:0b:eb:c0:b8:
27:ae:93:13:64:cc:fa:0a:a1:ee:b9:be:52:b9:b6:
fa:72:12:8b:7f:d8:e2:a2:90:21:34:50:3c:92:ad:
b7:52:6f:b0:19:2d:d1:5f:9a:3f:c9:c9:52:b6:27:
c9:8c:bc:f0:b3:35:a6:1a:e8:5a:06:d0:cd:96:b4:
f6:c1:1e:10:8b:27:6a:18:aa:49:c9:d4:c1:1d:63:
c6:cf:83:2e:b6:63:07:fc:84:9d:41:d8:2d:6c:58:
2e:42:c1:16:b0:20:15:af:12:9b:f3:72:23:53:93:
d4:54:49:d9:5a:f1:86:6c:ac:ba:15:7c:8e:43:c6:
aa:df:d0:25:2d:51:33:1a:e1:39:39:c9:79:7a:a3:
40:03:e0:bc:28:a8:e3:96:01:d5:a6:63:3b:03:6f:
77:e1:45:ff:cb:c7:13:e9:16:ea:61:ab:7a:e0:95:
cb:a1:6a:a5:e3:4c:75:37:50:3e:4d:6e:55:bc:74:
8e:0f:5b:74:6c:78:26:23:a7:0a:4b:48:55:f6:f1:
bc:85:13:b3:5e:d8:35:fc:ae:e5:a6:50:ac:92:85:
67:32:45:ba:6b:a1:a7:d9:3d:2b:9a:fb:a0:8e:0d:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A9:3B:06:B8:93:D8:5A:54:72:D1:FE:E6:9F:A7:E2:0C:4C:FF:BF
X509v3 Authority Key Identifier:
keyid:16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6b:2d:8a:bc:c9:37:5a:d4:59:37:b8:2c:1f:59:57:92:7b:
a4:dc:52:1e:d7:94:69:6e:3c:66:f7:e8:d1:7d:d9:e1:44:6e:
58:9c:c6:1f:aa:13:32:27:2c:ac:6a:54:4a:58:65:a5:c6:74:
2a:e9:3c:8a:3e:36:19:6f:00:78:8b:19:12:49:e5:c5:ab:46:
b7:9f:5d:9a:43:9c:cc:14:32:ac:f6:91:29:4f:72:72:90:ea:
dc:ae:f2:60:d8:ae:5d:49:60:d9:d3:4a:95:80:e3:13:22:63:
cb:c5:49:6c:70:71:af:da:cb:4e:32:f4:c0:f3:31:0b:10:0b:
c6:0a:39:cb:26:ad:d1:30:d4:e9:b7:d8:83:29:03:39:cb:e6:
e9:d4:ad:6a:2a:1a:98:6b:b6:88:d2:59:9f:a3:dc:8d:ae:59:
95:70:78:5e:8e:c9:c2:89:9b:dc:6d:e5:a5:27:d2:5f:88:54:
67:8b:8f:65:65:35:0d:f5:e0:eb:33:10:2d:e8:44:7b:1a:40:
80:ff:ba:48:50:e8:0d:76:e4:1d:d2:67:d1:4b:68:2b:9a:81:
03:64:bd:64:ca:78:3e:c2:ec:50:a4:3d:04:ab:5f:36:b9:e8:
5c:e2:13:b3:57:f4:52:58:64:ec:e3:9c:4b:e1:68:e4:be:4c:
2d:a6:23:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:50 2025 by rpki-client