Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
File: FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft (raw, json)
Hash identifier: ezqaysN8wq61m5BaNoU1xPrJnsxz8MIWVBTuxR0RAVM=
Subject key identifier: F9:49:F5:67:A8:89:2E:C6:E9:6A:2C:76:20:1F:7C:9D:58:90:6C:47
Authority key identifier: 15:0B:7F:F9:BC:19:62:EB:CE:C0:BE:43:5C:CC:27:2D:75:1A:1C:16
Certificate issuer: /CN=150b7ff9bc1962ebcec0be435ccc272d751a1c16
Certificate serial: 0198D698A0F36B08C6C55F3F9AE1686F0FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:03:03 +0000
Manifest this update: Sat 23 Aug 2025 11:03:03 +0000
Manifest next update: Sun 24 Aug 2025 11:03:03 +0000
Files and hashes: 1: FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl (hash: AyTAYQPjxYnnISZo0nmGcCDTQES1jdLUBnhNjUGFWiM=)
2: PyQ8fu5pDLbvLBuzcMMxIAkMsmo.roa (hash: mZg5dPb6uDIAF/lQgfs5kl+MW8uT39zjW3CSCFzbS/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:a0:f3:6b:08:c6:c5:5f:3f:9a:e1:68:6f:0f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150b7ff9bc1962ebcec0be435ccc272d751a1c16
Validity
Not Before: Aug 23 11:03:03 2025 GMT
Not After : Aug 24 11:03:03 2025 GMT
Subject: CN=f949f567a8892ec6e96a2c76201f7c9d58906c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:90:bd:42:f1:a7:dc:4d:ed:ff:d2:8b:a3:
8a:db:2d:7e:4d:32:6d:6b:2c:bf:cb:e0:2c:02:ad:
ce:ec:d6:ad:a7:7c:96:9a:a1:3c:0c:d7:4f:b0:53:
51:e8:a1:92:88:cf:23:ec:b8:22:31:30:7b:58:e4:
53:8d:6d:2a:f3:78:d0:cb:a5:08:ce:22:42:47:0d:
5d:cc:ca:f0:bd:9b:2b:25:9d:42:13:27:da:a3:ae:
f9:65:8a:6f:14:4c:c8:5c:f1:dc:21:f7:ee:f6:29:
83:a9:ac:2e:f9:5b:46:25:64:cd:13:55:d2:62:0b:
9c:6b:58:bf:d9:47:a8:7c:05:c2:80:b3:79:37:b0:
13:b1:e9:54:f1:69:ea:68:ad:f9:d5:99:d6:dd:78:
7d:c2:57:b9:bd:a6:14:19:4b:2b:9e:85:d5:53:f0:
3f:9f:7f:90:8d:27:4c:82:54:c7:c4:43:f2:ab:5a:
10:eb:03:c8:8d:2a:30:ad:d5:04:9a:d4:46:59:91:
68:af:95:28:30:73:3d:39:d8:c3:0b:96:aa:64:37:
73:e7:88:cb:84:91:bb:88:63:2e:f4:73:18:a2:a2:
88:b3:72:bb:bb:c3:7d:2b:f4:4e:aa:1f:f8:ea:2c:
bb:52:bd:5a:b7:83:aa:dd:fa:19:bd:b4:f2:9e:3d:
6c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:49:F5:67:A8:89:2E:C6:E9:6A:2C:76:20:1F:7C:9D:58:90:6C:47
X509v3 Authority Key Identifier:
keyid:15:0B:7F:F9:BC:19:62:EB:CE:C0:BE:43:5C:CC:27:2D:75:1A:1C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:25:e7:07:6b:77:89:0a:e1:bb:44:e6:19:64:43:9b:5a:6b:
24:e4:53:db:f3:ba:5e:20:f2:5c:54:74:0d:77:dd:58:35:fe:
f1:b8:7f:29:75:9b:e3:b0:e0:ff:79:a1:2e:8b:b3:10:85:41:
1e:c5:56:13:76:67:ab:40:8d:79:1c:3e:1c:ce:5d:ea:4b:c5:
be:43:18:12:33:68:f1:24:3b:7a:2d:d7:32:e6:38:8e:af:09:
49:93:e6:37:0d:4a:97:5d:8e:81:ee:f9:1b:86:d0:05:03:6f:
d9:2b:0d:bd:d6:67:a7:d1:26:f6:6a:11:3d:7f:01:07:d1:f5:
57:8c:3b:c5:9e:17:2e:03:8f:ba:f7:03:b6:3c:d9:19:35:a2:
9c:0d:bb:e6:f0:a0:9d:23:24:96:59:07:7f:b7:39:05:10:d8:
19:de:5c:45:df:27:47:5f:33:20:4c:09:9d:59:9e:c9:6f:0e:
b9:1e:04:a1:cf:7c:b2:a9:91:52:4f:37:e3:e5:1d:65:75:5f:
51:66:35:bb:b3:36:6a:42:d4:6c:3b:35:e5:a4:97:c7:d8:61:
a8:8c:87:1b:56:fa:b6:67:94:1b:77:69:51:31:d9:7e:0c:63:
e6:f7:26:91:8d:68:56:5b:a3:02:74:1f:33:9a:51:41:08:63:
9e:e2:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:59 2025 by rpki-client