Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
File: FqX_fn4arzjlmWnWCYBKOz8Fvog.mft (raw, json)
Hash identifier: HptR8ZQEsLWJM4ROrSV2p8FOxpCxjTVlr/wSZ3ACshQ=
Subject key identifier: 6C:A3:C2:75:EA:4D:79:F1:3B:9F:7B:D3:18:F2:D6:84:DD:AD:81:26
Authority key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
Certificate issuer: /CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Certificate serial: 0198D6CDBB25AC2EEFF0709948962B2C02DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
Manifest number: 0491
Signing time: Sat 23 Aug 2025 12:01:03 +0000
Manifest this update: Sat 23 Aug 2025 12:01:03 +0000
Manifest next update: Sun 24 Aug 2025 12:01:03 +0000
Files and hashes: 1: FqX_fn4arzjlmWnWCYBKOz8Fvog.crl (hash: Sjaej7jcHuxO2aUPBw/df91n4Ny1549delNkrd++eSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:bb:25:ac:2e:ef:f0:70:99:48:96:2b:2c:02:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Validity
Not Before: Aug 23 12:01:03 2025 GMT
Not After : Aug 24 12:01:03 2025 GMT
Subject: CN=6ca3c275ea4d79f13b9f7bd318f2d684ddad8126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:78:74:24:ed:1d:9c:58:54:ac:bd:f6:68:
59:30:fe:6f:91:38:2d:fb:a0:5f:0f:bc:cc:a6:99:
b0:87:e1:e3:a7:37:bb:f2:e3:35:c9:07:fe:96:17:
f9:f2:24:86:60:10:f4:e0:e7:bf:46:e4:d5:50:9c:
dc:85:f1:ca:9d:03:82:b4:34:c9:a3:4b:49:c6:32:
22:b0:1c:5a:65:de:52:f8:cf:fd:f9:1c:ad:7e:8a:
7f:e6:c1:90:55:58:dd:8b:48:25:37:c6:30:e3:e6:
d5:44:60:0c:98:e5:97:6f:86:17:5a:4b:26:df:cc:
dd:b3:4e:24:78:56:0c:78:e6:49:f2:41:f0:63:81:
43:d2:fc:76:e1:3e:a6:87:e0:71:14:dd:2d:69:a3:
bb:af:23:20:de:14:a9:64:70:61:20:4d:f7:ae:d5:
25:25:56:cf:de:06:1a:60:9f:6f:fd:98:79:ab:e5:
9a:e4:32:96:5d:1c:72:8f:cd:fd:9d:db:d1:94:9e:
cd:43:dd:60:a1:ce:60:46:a3:70:53:e4:c1:bc:52:
07:06:d9:e2:7a:47:f0:cb:c1:8f:99:a5:b6:0d:ae:
b6:6c:f7:48:11:ec:36:7b:36:27:27:0f:60:dc:05:
20:5b:f5:8b:4e:13:9d:1e:97:69:b2:cb:3d:c3:e6:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A3:C2:75:EA:4D:79:F1:3B:9F:7B:D3:18:F2:D6:84:DD:AD:81:26
X509v3 Authority Key Identifier:
keyid:16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ba:7d:f2:22:f1:de:e8:48:3a:e6:bd:01:87:97:38:dd:c2:
4a:01:f2:06:64:d4:ca:42:08:73:98:5d:36:c1:70:ad:8f:d1:
c9:11:ea:e2:01:06:99:35:71:37:3f:69:2a:d0:3c:be:f1:b9:
66:48:ac:4b:93:09:c9:6b:d3:4b:30:6b:8e:46:8b:23:d1:0c:
fc:b2:32:94:3f:43:a0:9f:e0:a2:74:be:fc:1b:bb:81:31:fa:
b9:49:e0:d6:ee:f2:33:6f:8a:6a:24:51:2a:59:74:88:73:fb:
1c:a9:3e:95:19:0c:f4:54:31:aa:a0:ef:fe:7e:bd:c3:91:41:
53:79:c6:a6:4c:25:c1:ab:98:e9:0a:4c:09:18:1e:01:98:89:
41:51:4c:e3:1a:14:51:d4:1f:7f:74:44:8a:4f:b6:59:8f:74:
ae:21:fc:bf:08:ee:8f:a1:3a:d2:e1:3b:9e:54:96:1d:37:b7:
dd:fb:e6:20:b6:3e:c4:3a:e1:3c:33:1e:05:bf:a0:bd:ec:55:
16:e1:93:47:31:b1:14:e1:e7:e1:44:00:0a:ba:ab:19:2e:0b:
4a:60:27:fa:8f:69:9f:c4:9c:28:c3:3c:3f:d1:d3:dd:b6:e2:
07:5a:f0:cb:37:88:90:c3:72:df:d5:8d:2c:32:88:8e:d8:fc:
04:99:5b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:46 2025 by rpki-client