Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
File: FqBO4EsSgj6FP_JD02VR5M5oOnM.mft (raw, json)
Hash identifier: diAZmrIsP05Zas4S3j+bZCz+kjsOyLLyyLY29Hniq2A=
Subject key identifier: 4A:C6:0F:A1:C7:34:DA:D5:81:2B:35:03:3E:F4:56:5E:54:70:99:CA
Authority key identifier: 16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
Certificate issuer: /CN=16a04ee04b12823e853ff243d36551e4ce683a73
Certificate serial: 019A4E4FF47390FF8C399ECF0A460D9B76CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 10:00:54 +0000
Manifest this update: Tue 04 Nov 2025 10:00:54 +0000
Manifest next update: Wed 05 Nov 2025 10:00:54 +0000
Files and hashes: 1: 7yvWMV7T5eN6efasr2rdxP4qnTg.roa (hash: IQLAVcCJbXWjx9lqcgGZjEbAOQis8qmzfLoEHM8bDrs=)
2: FqBO4EsSgj6FP_JD02VR5M5oOnM.crl (hash: X5qYX1BjIJUSZf69sevHIxLnbwFumFSLQNTE9in20Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:f4:73:90:ff:8c:39:9e:cf:0a:46:0d:9b:76:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a04ee04b12823e853ff243d36551e4ce683a73
Validity
Not Before: Nov 4 10:00:54 2025 GMT
Not After : Nov 5 10:00:54 2025 GMT
Subject: CN=4ac60fa1c734dad5812b35033ef4565e547099ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:48:9d:2d:9f:a8:da:7e:06:52:f7:91:c4:
bd:a1:af:bd:07:f2:99:66:2f:01:b1:79:aa:df:4a:
da:e9:92:26:ba:2b:0b:c9:f1:f2:f3:16:a5:a2:cf:
ae:4d:e6:3c:e4:c9:75:ec:37:9a:11:d4:5c:da:84:
54:f1:2a:7b:36:ae:0f:dc:f7:33:73:cd:8e:29:05:
a1:93:5d:95:95:f7:c8:db:32:d9:37:fd:b0:bb:6c:
9a:64:2e:2f:43:14:e4:09:41:b7:e7:0b:33:54:64:
56:a7:81:5f:3d:03:bc:f1:71:86:17:d3:b3:02:68:
1a:64:de:ab:0f:96:11:0d:55:9f:2a:57:de:b8:42:
58:28:ab:13:6f:07:c5:7d:9a:fb:bf:82:df:f6:7a:
77:0d:a0:58:e5:a5:cb:e0:cf:8a:b6:dc:4f:59:e1:
7f:ce:c5:a3:ff:41:2c:d5:59:e8:d9:23:67:ed:9e:
e2:57:e3:8c:93:94:c4:f0:66:32:53:71:60:7b:77:
bc:ed:ae:43:11:e4:74:61:64:f3:df:ac:26:62:bb:
37:12:bc:8d:d3:69:fc:4e:e1:7b:12:e2:d3:56:19:
03:ed:64:4c:f6:f4:62:e0:17:93:c5:6c:de:ff:a2:
0b:ba:b9:ed:02:de:43:75:d7:93:6d:9a:71:4e:41:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C6:0F:A1:C7:34:DA:D5:81:2B:35:03:3E:F4:56:5E:54:70:99:CA
X509v3 Authority Key Identifier:
keyid:16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:66:95:d3:ed:ac:55:45:56:f3:36:e0:97:d5:73:d6:c2:f5:
8a:dd:6d:8c:3c:1d:12:83:9d:e9:92:67:33:1d:e8:be:db:af:
99:b6:40:fe:52:38:c7:f3:5f:7c:88:c2:14:e2:98:e5:8c:7c:
07:60:52:17:7e:fe:7b:1b:a2:25:6a:9f:bf:17:4e:ee:f1:9c:
30:ff:29:ec:3d:4e:e2:c6:10:01:7d:04:7d:35:4e:5a:41:74:
93:d2:1c:0b:ad:6e:4a:01:0c:e8:86:12:8b:39:a2:9d:dd:e1:
aa:2d:93:95:ef:1c:1b:97:8a:7c:e6:91:a1:b1:81:18:78:fd:
d2:6d:b3:8e:2c:cd:e8:87:41:f7:5e:01:32:d4:71:13:27:b0:
00:fc:b5:91:cc:1b:ee:79:f7:4d:7f:c2:6e:95:28:bb:e6:87:
84:98:e8:12:8c:c0:2c:df:67:b6:ac:ad:09:88:8c:29:8d:bf:
dc:94:84:27:2d:83:50:ae:ec:64:e5:1a:24:65:0b:a2:04:53:
b1:78:61:80:8a:e6:dd:43:2a:67:37:f5:90:92:62:6b:36:4e:
b0:0f:96:6c:44:aa:54:49:a2:91:05:87:a4:e5:7f:a0:9e:82:
ff:ec:06:23:46:2d:3b:b2:f7:c8:2f:40:1c:49:88:40:89:03:
4f:17:90:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:59 2025 by rpki-client