Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier: n2GX5o57AvlCIJgH0CTIWWL52Tmc9/eAXrkcDXMLf8g=
Subject key identifier: 6F:9F:93:FC:9F:36:B1:D7:66:A9:8C:3D:73:FA:7A:11:85:BB:76:6C
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial: 019A51194A24F4D1FC6E648C40A9DAE48C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number: 16A2
Signing time: Tue 04 Nov 2025 23:00:03 +0000
Manifest this update: Tue 04 Nov 2025 23:00:03 +0000
Manifest next update: Wed 05 Nov 2025 23:00:03 +0000
Files and hashes: 1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: A0WN0R5hMW396nWLuij1AOEipzUR5Gdjx8Xg+TEvwG8=)
2: 95gvF9PQMIrb-BKphnns2uDXNiw.roa (hash: MBJ0PohSRVPGJ57dBumqXOfbyvugttOgIAsIwTytItw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:4a:24:f4:d1:fc:6e:64:8c:40:a9:da:e4:8c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
Validity
Not Before: Nov 4 23:00:03 2025 GMT
Not After : Nov 5 23:00:03 2025 GMT
Subject: CN=6f9f93fc9f36b1d766a98c3d73fa7a1185bb766c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:dc:5f:03:77:d7:4a:29:d2:57:6b:f5:f9:
2a:56:57:5c:8f:c3:c3:46:80:88:5f:01:75:9e:59:
b6:50:1b:52:6c:45:2d:61:a7:83:b6:d2:e7:23:c6:
99:4b:32:18:fa:ec:23:fc:c7:16:9c:fd:c3:f6:7f:
67:f0:c3:f5:2d:e1:2c:ae:13:fb:bd:45:e9:c5:8d:
96:61:1c:cb:d6:1e:54:db:66:42:37:f7:18:3b:cd:
30:5d:17:03:ba:5d:bb:13:30:f3:5f:20:1a:2f:d4:
fe:2c:93:bf:7a:3b:8b:12:5f:b4:b8:47:fc:b2:eb:
78:74:55:18:75:4e:f2:33:a2:3d:85:d3:f4:dd:25:
4a:59:7f:6a:2f:78:16:6c:86:06:8e:e4:56:7c:06:
b1:78:23:92:84:61:93:51:59:52:31:99:28:3e:aa:
7c:72:ff:24:d0:3f:5e:54:da:6b:17:75:f4:b5:a5:
a8:2f:5d:c4:ee:5f:ec:6c:c5:2d:7b:c2:59:cc:72:
78:f9:4a:37:46:10:49:09:00:12:85:cc:a1:41:1a:
cd:56:89:28:61:c3:6e:62:2f:ee:cd:59:ac:a6:6d:
7f:a8:3b:d3:1b:56:31:9c:ac:e2:d5:f9:4d:47:47:
33:41:4d:fe:3e:56:d4:30:44:61:d1:cb:4f:57:68:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9F:93:FC:9F:36:B1:D7:66:A9:8C:3D:73:FA:7A:11:85:BB:76:6C
X509v3 Authority Key Identifier:
keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:84:5c:01:69:4e:88:2a:02:b1:53:b9:98:66:86:b9:d9:93:
3b:1a:2c:7b:6d:2b:76:9e:f4:ff:53:05:3a:ac:8d:58:bc:a7:
ad:82:72:0c:2b:39:c9:a6:27:56:dc:15:e3:7d:ee:6f:64:71:
08:63:69:19:a9:99:98:93:95:ce:47:6d:31:b5:b6:23:81:f8:
99:b9:1f:c1:51:75:44:a9:de:d1:3a:e5:03:ec:7f:15:e6:99:
fb:bf:61:9f:93:98:0c:11:f8:7d:5e:db:89:65:3a:4c:85:68:
6a:5b:53:ab:01:c4:41:e4:3e:0c:12:96:ff:1c:5a:42:2c:b9:
c8:9d:73:31:91:4c:58:27:d3:de:5f:8e:8d:1d:34:ef:72:5d:
fd:e0:da:09:26:4b:84:81:0c:5d:82:c4:5d:0e:1d:21:db:be:
5c:ab:65:ef:6b:f5:5d:5f:fe:f4:e7:3e:5e:85:d5:71:6e:58:
ab:05:95:3f:6a:d6:fe:d4:d6:57:62:e1:40:36:a3:fc:ff:70:
cf:ce:dc:a1:72:19:ca:d4:b0:1b:c5:6b:f4:e3:14:f7:17:f1:
5e:04:f6:1b:13:ae:76:aa:7e:cb:e6:07:d2:50:06:d4:a1:b0:
17:52:b8:03:8d:10:f4:e3:7b:84:11:b1:35:e0:2d:b9:e3:38:
64:8a:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:22 2025 by rpki-client