Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: +3AXt/XivmoPqpZmfT88qSeqR/Uyn0ncrH3XLiSlf5c=
Subject key identifier: 6E:6C:1D:A1:82:CE:4F:B1:93:38:83:E2:B5:67:9D:28:DD:86:B9:CC
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 0198D6606EE9FB51DA354B3D8588864FC907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 10:01:40 +0000
Manifest this update: Sat 23 Aug 2025 10:01:40 +0000
Manifest next update: Sun 24 Aug 2025 10:01:40 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: HTw4bnSXxw3nJj4UyLvmPtfVp2Xh4L0S/x3knp6hJvA=)
2: tuMifPTkCbCL7ajrwo0EzPnXWPw.roa (hash: jC33EY0cA4p2GJTzlFhrTlf/kii333WPsx2l9xMoLj4=)
3: xrGACS-1hAxmap4Rb-Oc9S070js.roa (hash: mptaEeEJPbcTmStEp7RBmFaS5iUHgb9cGp/H5Fm+PGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6e:e9:fb:51:da:35:4b:3d:85:88:86:4f:c9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Aug 23 10:01:40 2025 GMT
Not After : Aug 24 10:01:40 2025 GMT
Subject: CN=6e6c1da182ce4fb1933883e2b5679d28dd86b9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:e2:d6:f9:1b:15:c8:58:0c:1b:14:c9:5b:
ce:9c:49:a5:59:19:c2:60:3f:86:06:cb:50:18:ab:
4f:9d:28:8a:88:bb:f9:d4:87:29:41:53:c8:c4:13:
ea:81:9f:b0:e7:90:6d:1d:6b:d5:47:53:9e:b2:49:
47:3b:dd:28:81:05:00:61:ff:ad:f4:a3:e9:39:4f:
79:32:0c:5a:31:bc:d2:c5:8d:9a:6a:09:75:75:3f:
33:24:e9:ff:83:64:ec:c0:c1:0f:4b:e8:d4:6f:52:
ed:5e:ef:e5:f0:93:fa:1f:b4:79:ce:3a:55:12:db:
bd:07:bc:f2:77:d1:11:e3:13:82:34:d6:2a:9d:b3:
c9:58:27:86:30:d6:c3:ad:58:ae:25:52:c5:ea:03:
bf:3f:28:0a:f9:ad:be:b9:71:cd:b3:a4:f9:49:d6:
7b:f5:8e:fa:62:c1:46:b5:46:f3:ac:cc:d2:ba:c3:
0e:c5:4e:2e:40:5c:f6:cd:d2:b6:bc:c0:ff:78:7b:
ca:bf:93:60:07:c3:d4:77:d2:ce:d3:88:fc:34:e8:
83:69:01:b9:95:d5:fa:f4:0d:9b:ac:84:ff:26:1f:
6c:ae:30:ad:9e:a1:2d:71:a1:41:17:96:95:55:0a:
d3:71:e0:33:0b:e5:ce:f9:29:5f:0a:cd:dc:0c:44:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6C:1D:A1:82:CE:4F:B1:93:38:83:E2:B5:67:9D:28:DD:86:B9:CC
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e1:5a:42:91:34:8a:74:ed:cb:74:56:a1:f5:f6:0b:f7:94:
57:40:0e:69:0a:54:eb:02:82:9a:33:bf:01:a8:e0:3f:c8:34:
cf:44:d5:54:f4:a8:4e:91:07:c9:5e:59:ce:48:b4:c8:32:95:
0f:1b:16:5c:5e:21:11:86:c4:2c:c6:31:04:67:9a:29:bd:b1:
f4:d9:03:73:0e:ec:2a:0d:30:2a:aa:d6:ea:16:78:68:ee:50:
fd:66:5a:91:bd:83:c5:1d:96:c4:7d:cc:d1:a7:e2:32:9c:97:
ae:56:39:41:a9:71:94:dd:4a:6c:4c:47:4c:57:f6:b5:2e:0c:
38:71:27:e7:21:2d:8a:85:6b:b0:86:54:77:06:78:b6:f5:19:
0b:29:e7:f2:b6:d3:4e:60:84:2c:10:f1:2b:3e:c1:41:13:08:
36:c1:e6:3b:a1:8e:09:20:25:1e:f5:6a:f8:d2:71:b0:df:42:
ca:44:02:e8:db:c0:5d:9d:71:13:f7:16:15:75:ab:6d:41:ec:
a6:3a:cf:af:ac:98:fe:20:c6:c1:48:55:79:0e:bc:10:46:19:
9e:47:ce:de:cf:a2:db:c5:29:46:49:4b:7b:88:07:71:86:6a:
39:1c:4c:43:ab:b6:70:7b:ed:1b:e9:17:6d:2e:62:ad:f9:b3:
9a:69:35:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:45 2025 by rpki-client