Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier: Am+Bbpkfrh5JT5WnfbpnCfldh8fIqCoA+yvnyzN0NE0=
Subject key identifier: 68:3A:49:7B:B6:BD:CD:1F:80:7A:5C:58:3C:67:16:7C:6D:02:91:62
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial: 019A52D1797CEE32DA71C9F662A50452862D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number: 02CB
Signing time: Wed 05 Nov 2025 07:00:50 +0000
Manifest this update: Wed 05 Nov 2025 07:00:50 +0000
Manifest next update: Thu 06 Nov 2025 07:00:50 +0000
Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: Qajlk/lwi9g1+v0yUMfdG5kwv3mnZisQKl/GUEkIkxk=)
2: VjoP5kM-KwhZcj01jM3hl-6r6UA.roa (hash: vqqeCugYqbCnSBb7Wp1fy/fzybkRWWHMWjjnU8HbuEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:79:7c:ee:32:da:71:c9:f6:62:a5:04:52:86:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Validity
Not Before: Nov 5 07:00:50 2025 GMT
Not After : Nov 6 07:00:50 2025 GMT
Subject: CN=683a497bb6bdcd1f807a5c583c67167c6d029162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:b3:98:8b:87:6b:e9:99:35:a7:38:5e:e7:
ce:dc:de:22:a9:27:56:4b:65:07:98:08:e2:62:69:
5e:38:9a:f1:e1:e3:92:e5:08:c6:a3:9c:d3:aa:20:
34:e5:04:61:be:a5:0a:84:79:75:fa:2d:99:ec:67:
5f:d7:5d:26:06:9f:43:16:d3:bc:3b:48:42:0b:df:
2c:3f:e9:a9:45:4a:62:56:44:50:72:46:ae:83:f3:
12:f1:6c:e1:ee:dc:8a:93:8c:69:e0:6f:67:0f:6e:
ad:81:f9:05:51:ce:21:eb:ab:f4:1d:4f:31:72:ed:
c9:43:7d:45:e6:b6:7f:2b:ba:3f:18:0f:d3:e2:cf:
1c:30:a9:69:68:ba:59:f2:90:0d:7a:f5:d8:bc:2c:
2c:69:77:d6:a7:c3:49:9a:d6:1a:21:55:c7:7d:d0:
89:c1:c3:65:ec:ea:6c:a5:f8:55:bc:b1:4a:3e:4f:
1e:bb:19:8e:5c:de:91:ee:38:c6:b1:b7:8d:ef:c3:
e0:13:ef:78:13:39:97:cf:68:dd:d6:f8:fc:64:f4:
f3:14:ab:77:b5:cc:5a:07:5a:ff:1b:d6:1d:87:3e:
c1:aa:db:6e:76:6b:68:c6:ed:f7:ec:da:5f:30:e2:
8c:3d:94:39:3c:77:ba:f7:8e:0f:de:72:be:a9:29:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3A:49:7B:B6:BD:CD:1F:80:7A:5C:58:3C:67:16:7C:6D:02:91:62
X509v3 Authority Key Identifier:
keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:42:8c:6f:14:e6:8c:4f:4c:ea:45:6d:cf:41:a1:79:51:7f:
04:1b:f4:e9:3f:dc:b9:91:5e:28:5f:c6:f6:87:16:cd:cc:88:
0e:b7:c5:6a:32:bf:e4:7f:12:5a:71:d2:db:00:fc:78:11:fb:
a1:58:5a:05:f1:7f:84:9a:50:af:52:68:e4:47:aa:b4:82:46:
a9:c0:87:1c:4a:5d:0f:9b:c1:1e:5a:66:25:2f:7f:6d:19:7f:
fe:cc:ea:69:b7:e3:18:cf:2c:d7:ae:7a:b8:2e:c0:24:1c:37:
a1:68:aa:94:79:bf:43:6d:6a:f7:1f:63:5c:10:55:65:6c:e5:
4d:d3:6f:0b:17:8e:48:62:1c:79:b0:5f:4b:08:2a:59:0d:e2:
9b:74:17:fc:73:d1:51:77:6f:fc:f8:d0:65:82:7a:88:7d:c6:
59:10:1a:68:21:12:88:c3:12:74:a6:cc:5c:a4:21:85:72:c1:
dd:c3:d0:37:0a:0e:af:da:5a:d9:28:32:4b:4a:52:f8:14:7e:
77:88:e8:cd:10:07:59:fc:b5:92:58:05:7f:3d:2f:1d:e6:2c:
d7:d7:09:db:00:33:f0:85:4e:dd:c6:44:13:3b:ae:9b:40:1a:
28:5a:5f:81:c2:2a:9d:92:4b:d7:13:a5:b1:ab:47:7d:2e:a8:
c5:2c:eb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:12:48 2025 by rpki-client