Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
File: FqMhIVpNNe0imLBzlx20CIZP02I.mft (raw, json)
Hash identifier: YPlcSQ9/XHbIRbnxjK/3rB5MsYitMTcSnC3F3TWNg+A=
Subject key identifier: 42:79:15:97:FC:B3:CC:5A:85:D0:5A:BA:E8:EC:CB:6B:7C:F6:68:86
Authority key identifier: 16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
Certificate issuer: /CN=16a321215a4d35ed2298b073971db408864fd362
Certificate serial: 0198D54EBD24650F2A69C73D3B675EA561D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
Manifest number: 0E72
Signing time: Sat 23 Aug 2025 05:02:43 +0000
Manifest this update: Sat 23 Aug 2025 05:02:43 +0000
Manifest next update: Sun 24 Aug 2025 05:02:43 +0000
Files and hashes: 1: FqMhIVpNNe0imLBzlx20CIZP02I.crl (hash: E/oh83Z+b08H5Ti9JQ9qzXd0nt/LOo/tGGcSCbAqBVk=)
2: q9FXpjO7WYpYF_PuEvxdIBNk31U.roa (hash: eU80FRwYJKXcKKPdsKCtTdJX7dfta5v66z6KC/V+tqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bd:24:65:0f:2a:69:c7:3d:3b:67:5e:a5:61:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a321215a4d35ed2298b073971db408864fd362
Validity
Not Before: Aug 23 05:02:43 2025 GMT
Not After : Aug 24 05:02:43 2025 GMT
Subject: CN=42791597fcb3cc5a85d05abae8eccb6b7cf66886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:dc:9c:e1:ec:d3:f3:a8:84:46:af:86:97:
3f:4e:62:e2:5a:d1:ff:84:b4:6e:6f:c4:20:d7:ac:
67:7f:63:c1:c3:66:0a:c8:14:02:0a:0c:33:f3:fe:
28:66:4c:45:0f:bb:1c:7b:90:bc:45:88:99:7d:f2:
1c:57:11:d5:c9:d9:ff:7a:be:0d:0b:a8:f2:70:e8:
c8:d0:f7:f5:b8:ae:c6:36:43:45:08:f3:cd:bb:b2:
0e:29:a3:36:d9:2f:23:f8:61:7d:c5:6d:25:3f:cc:
20:29:b7:ab:72:73:60:0f:db:02:51:6d:2f:a5:be:
e0:28:e7:ae:f1:fb:e6:79:e7:b2:97:54:14:77:30:
ab:bd:bd:03:5f:41:4c:51:0d:5b:eb:25:96:87:17:
98:d9:df:9c:0d:c7:d6:e4:5f:19:fd:45:c3:2a:1e:
61:1a:9f:12:56:ec:c8:ad:e2:5f:bc:72:fe:85:bb:
25:3a:18:1d:a2:cf:ad:f2:da:d5:1a:a7:76:85:e8:
7d:b7:55:41:e3:0a:5c:9d:08:d4:76:3a:24:fe:7c:
0b:af:de:a6:cd:79:e3:c7:4f:b6:da:2a:fb:e4:bc:
57:60:34:20:e3:7f:4b:e9:e5:90:78:99:d3:1d:4f:
8a:6c:56:c3:ed:8b:ba:76:48:20:7f:20:d3:8f:86:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:79:15:97:FC:B3:CC:5A:85:D0:5A:BA:E8:EC:CB:6B:7C:F6:68:86
X509v3 Authority Key Identifier:
keyid:16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a4:be:f5:bd:3e:01:2b:00:ab:14:e7:42:71:44:0b:36:48:
56:5a:9a:46:63:8f:c7:52:a9:09:9f:19:03:02:4d:5f:79:fb:
69:19:55:da:0b:64:0d:45:8d:cd:09:4b:47:44:78:7a:27:28:
b3:ce:f9:4d:a5:84:62:9e:08:24:a9:14:2b:e4:2c:ba:d9:b7:
30:2d:13:4c:5b:56:8a:e6:31:a5:6a:43:fc:e2:76:fb:71:d4:
b9:4f:8c:93:e9:de:72:9b:73:1f:cb:6a:aa:17:cc:9c:1d:37:
58:7e:cc:85:b9:e0:13:1f:34:f5:d8:43:1d:ab:78:1e:6b:d3:
38:82:ef:55:1c:7d:d9:23:30:1a:e0:cc:01:d0:0d:3c:75:62:
3d:1b:e4:73:2e:67:63:ae:2d:c6:a0:28:45:50:f5:87:42:d4:
37:19:8b:61:96:e8:4b:8d:d3:50:80:b0:93:a4:47:e6:01:2f:
a5:f3:e2:46:f9:c0:5c:45:52:9c:f7:29:d5:4a:54:44:09:54:
48:bd:0e:ba:08:1c:c2:8e:31:a6:88:cc:cb:1a:5f:01:de:65:
a9:0e:74:f4:41:ce:4e:9a:a5:6b:f4:b9:65:b3:5a:d5:a0:b3:
6b:b0:48:c1:24:da:28:f8:ea:3e:7c:2a:d1:12:11:cf:8c:ac:
73:66:56:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:06 2025 by rpki-client