Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
File: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json)
Hash identifier: NANETNoa0bQQJTyD10wg3HTbxloA0WpbnSHGorMxk5g=
Subject key identifier: 31:6A:17:75:00:A8:21:FF:4A:29:BD:91:52:FC:71:F4:91:B4:29:BB
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial: 0198D8F2DDDED2391E3E9BF469099B716709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
Manifest number: 1659
Signing time: Sat 23 Aug 2025 22:00:51 +0000
Manifest this update: Sat 23 Aug 2025 22:00:51 +0000
Manifest next update: Sun 24 Aug 2025 22:00:51 +0000
Files and hashes: 1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: gxnhrbocpWc2W43jx8WXMdvne+N5mzpj3gDm3Yv/s2A=)
2: Z2kf7ln5mON3RHAZZX2xlotTAOE.roa (hash: /p6n62hmOZyxXSovbXHriP4ZXMHiDPYL78NiQIEPOF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:dd:de:d2:39:1e:3e:9b:f4:69:09:9b:71:67:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Validity
Not Before: Aug 23 22:00:51 2025 GMT
Not After : Aug 24 22:00:51 2025 GMT
Subject: CN=316a177500a821ff4a29bd9152fc71f491b429bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:30:46:04:f4:1e:d8:b8:fe:a6:ae:19:08:56:
4b:81:06:a4:95:bf:a4:7f:b8:90:31:c1:95:00:99:
b8:44:0d:08:e8:19:bf:80:85:28:d3:ba:14:6f:82:
10:9e:0c:59:ea:52:a4:b0:67:d6:cb:a1:9b:1b:b9:
90:2d:35:e9:99:35:4a:25:5e:f3:65:89:41:d5:8a:
3d:f0:a5:72:3d:4b:84:e9:cd:b8:86:ee:7d:3d:02:
e4:29:33:b8:47:18:92:be:06:9b:39:3b:73:87:09:
8c:83:9e:c4:cc:05:45:fa:07:43:d6:08:25:95:99:
d0:81:2b:52:ae:29:ef:3d:97:15:55:75:aa:06:37:
75:d7:f2:39:38:b1:c3:64:b3:71:7f:4c:b8:65:d5:
ff:38:36:15:48:2e:f7:b7:b4:69:4d:97:5d:aa:04:
1c:f0:d6:21:b0:db:e6:3b:8e:d4:7f:e4:22:0d:6c:
6a:63:0d:d0:84:49:2b:24:18:34:7e:f0:b2:e3:c1:
c3:8b:6c:dd:5f:ec:34:a8:7a:7b:dc:1b:7c:9d:31:
36:4e:fb:f7:e0:ab:41:50:e1:a7:d7:77:a7:d4:be:
09:ad:a9:69:1b:af:cf:da:25:3b:fd:41:22:16:72:
c6:c6:3c:f5:0d:ba:67:fb:45:fc:54:be:38:b9:76:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6A:17:75:00:A8:21:FF:4A:29:BD:91:52:FC:71:F4:91:B4:29:BB
X509v3 Authority Key Identifier:
keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6e:49:f9:ca:a9:1c:fe:34:3a:ea:18:88:b8:6f:4e:16:c5:
1c:fd:d3:c7:7a:19:00:c0:8e:3b:98:0c:2f:06:24:26:31:bd:
53:69:b4:f3:16:16:28:3b:fe:12:2e:ca:88:31:04:c6:3c:d2:
98:83:6c:43:eb:7f:6b:b5:d0:bc:8e:89:bb:5e:e9:e5:24:e5:
79:9b:f9:80:5f:cc:c2:12:1c:80:4d:84:c1:84:ff:f5:0a:5e:
e8:84:4c:2c:af:2f:44:ca:c4:2b:b0:08:80:02:79:87:da:ee:
82:48:a1:48:6e:4f:fb:73:10:53:24:78:8b:1d:32:66:b2:f4:
50:f1:5e:e6:1a:10:43:7a:0f:7b:da:85:2a:40:2c:47:f8:14:
37:b5:23:ea:a8:f5:bd:e0:83:b5:7d:79:c1:e4:e2:a0:14:6b:
7a:40:be:2f:07:5e:6f:91:d0:76:f1:84:82:8f:2b:fd:b7:70:
15:f8:0d:c8:9b:53:bd:17:77:2f:e5:a9:75:74:c1:45:0d:18:
6d:34:08:90:39:2d:d8:f3:70:9c:24:e5:54:e0:43:c0:ea:00:
5d:7a:19:40:68:3b:16:61:47:e2:33:e2:bf:ea:38:92:58:9a:
12:5e:a2:40:c6:a2:29:59:9b:86:a9:ff:7f:89:5d:98:83:5e:
f7:17:fc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:30:05 2025 by rpki-client