Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier: u5BIxnhvAUUIPZmVgiw2lfdfs9wpVCICf0ezFJirbIU=
Subject key identifier: EA:09:BC:94:F8:04:BC:B4:81:DD:CF:7D:A3:85:CF:11:1C:2B:E7:E9
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial: 01987418CE3A283C93152796831A1B303E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number: 01D3
Signing time: Mon 04 Aug 2025 08:00:39 +0000
Manifest this update: Mon 04 Aug 2025 08:00:39 +0000
Manifest next update: Tue 05 Aug 2025 08:00:39 +0000
Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: ssWMsbQWByfukHXME3I996d3qpGORiS/C0gh3OALc/E=)
2: VjoP5kM-KwhZcj01jM3hl-6r6UA.roa (hash: vqqeCugYqbCnSBb7Wp1fy/fzybkRWWHMWjjnU8HbuEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:ce:3a:28:3c:93:15:27:96:83:1a:1b:30:3e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Validity
Not Before: Aug 4 08:00:39 2025 GMT
Not After : Aug 5 08:00:39 2025 GMT
Subject: CN=ea09bc94f804bcb481ddcf7da385cf111c2be7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:ae:c9:c5:ed:e2:59:a2:41:97:6f:40:12:
85:c3:71:71:e3:9b:74:47:a0:a2:38:21:69:8a:68:
f8:9d:50:74:0e:d2:44:a6:a5:1e:a0:e6:50:01:0d:
f6:5c:f5:02:60:1f:91:cb:73:ae:02:b1:78:b0:dd:
3c:38:6f:2c:ec:0e:72:1c:b3:22:76:8e:6a:5e:f0:
98:d4:53:65:e0:2f:79:04:b3:a5:58:f7:2d:d9:a5:
e6:d2:29:fb:eb:15:e4:ab:97:02:bf:23:fc:70:2f:
c2:43:af:6f:1b:55:9d:9e:a7:4e:f1:47:0a:70:4b:
0b:eb:a0:fa:12:59:a3:70:e8:7a:46:19:3a:39:6e:
0e:c6:e8:b4:a3:fb:f7:ec:7d:b5:bb:9c:61:c7:c7:
cf:0b:34:dc:82:44:ff:b2:fc:de:16:93:5f:ac:11:
0e:4d:e5:04:b8:a9:e6:7a:84:53:d9:93:53:00:9b:
ca:2f:f0:61:6c:77:43:03:93:aa:43:8a:65:c6:20:
4c:f7:4c:27:8d:98:b9:b6:30:e1:8a:10:80:f0:4d:
4a:d9:dd:7c:e2:e0:92:15:5b:fa:91:bd:91:5c:ad:
6a:1b:88:60:b8:ca:ff:70:0c:98:0f:20:77:74:ec:
55:d3:1e:04:29:31:3b:38:d5:fb:e4:18:a6:00:8f:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:09:BC:94:F8:04:BC:B4:81:DD:CF:7D:A3:85:CF:11:1C:2B:E7:E9
X509v3 Authority Key Identifier:
keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:fd:76:21:ee:05:4b:c4:82:b9:a9:8b:a7:83:70:32:b9:5b:
9d:f7:2f:82:52:ab:70:a7:ea:e0:a5:f2:3e:ad:ac:de:c2:5e:
1b:5f:78:87:bb:b7:8b:42:b8:b3:4c:85:07:a9:d9:ef:83:7d:
1d:28:98:9c:b2:cf:36:e6:6b:9d:87:31:2f:86:bc:fd:0d:5c:
c4:c0:4f:81:f4:9c:8a:4d:7f:ab:fc:da:17:2d:af:ee:c9:17:
aa:e7:3a:37:9a:ab:fd:06:4c:11:75:7c:f7:cb:b7:24:5b:98:
e6:ad:de:54:ff:d6:30:b7:71:5d:ea:c3:fb:39:8d:94:eb:2a:
e4:66:6e:e9:b0:95:4f:50:6d:de:da:fb:2a:7e:60:4a:48:7d:
98:88:32:c8:dd:8f:40:de:2d:c2:26:d0:4b:42:fa:67:b2:42:
21:b5:aa:37:f6:51:5a:80:07:48:46:a1:79:2c:43:72:53:2a:
16:13:34:4c:9e:d5:b7:bb:72:5f:df:44:16:05:40:fa:a5:48:
bb:e0:de:f8:77:47:fa:b5:a0:6b:af:3e:94:16:51:a1:54:60:
9c:05:23:78:13:69:33:62:6e:93:b1:09:fa:5c:f4:86:44:9f:
41:74:2f:50:c5:d3:7d:55:23:94:2d:4e:a9:0c:96:bf:37:55:
54:b2:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:01 2025 by rpki-client