Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
File: Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft (raw, json)
Hash identifier: pHGlsydMXvASiTw+yZnxIy78GRkqjQPeWyjAWMQRyqI=
Subject key identifier: 5E:C5:CC:2D:47:EA:52:5A:D8:0B:6C:5A:8B:CC:D5:DC:AE:7A:8F:CE
Authority key identifier: 16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
Certificate issuer: /CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Certificate serial: 019A4DAA8775C42AB60F242A240D7A27D341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
Manifest number: 169A
Signing time: Tue 04 Nov 2025 07:00:12 +0000
Manifest this update: Tue 04 Nov 2025 07:00:12 +0000
Manifest next update: Wed 05 Nov 2025 07:00:12 +0000
Files and hashes: 1: Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl (hash: Ovj1M60T+kZGIk+W5M5j20pf2sPbPVawdJZYD93m4Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:87:75:c4:2a:b6:0f:24:2a:24:0d:7a:27:d3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Validity
Not Before: Nov 4 07:00:12 2025 GMT
Not After : Nov 5 07:00:12 2025 GMT
Subject: CN=5ec5cc2d47ea525ad80b6c5a8bccd5dcae7a8fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:32:ec:92:b8:9d:ec:5d:9e:1f:6d:c8:92:1d:
95:23:1c:bd:d8:33:76:2a:60:f3:3b:fb:9f:f6:84:
24:b9:b6:69:4e:dc:9d:5e:6a:99:f5:6a:44:f4:33:
30:a6:9c:c3:80:2a:0e:79:b0:93:b7:1f:d4:73:8f:
5d:56:50:8e:b9:7c:c7:97:6d:94:cd:08:12:40:44:
84:4b:9b:27:ef:45:48:7b:bb:31:48:6a:02:2e:10:
7d:0d:ca:82:a5:e1:26:9c:07:95:e8:07:e9:04:30:
62:6a:30:42:70:ee:0d:f0:54:45:cf:30:f5:39:10:
c8:b6:ca:c0:22:e5:0a:45:f4:46:0a:e2:15:64:46:
64:3c:58:7e:50:b6:31:29:64:01:51:2f:7a:cc:d2:
1d:7f:fe:ac:c1:81:3f:c5:ac:93:02:99:7e:af:b9:
32:38:cc:39:21:38:31:b9:61:09:61:57:56:b4:4e:
28:96:98:6b:d3:04:44:6d:80:ac:13:e5:f5:f5:28:
44:ce:d4:48:e4:78:d1:c0:7c:7d:92:08:89:ca:4a:
78:15:1b:1a:2e:29:12:cc:f9:6d:1f:da:f7:73:b7:
79:dd:b4:20:77:3f:cd:29:d0:77:c5:07:90:cf:19:
70:67:c9:2f:e3:bb:dd:07:93:b5:fd:34:a8:1e:ce:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C5:CC:2D:47:EA:52:5A:D8:0B:6C:5A:8B:CC:D5:DC:AE:7A:8F:CE
X509v3 Authority Key Identifier:
keyid:16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:70:5f:a5:99:42:58:35:a1:b9:41:b0:7b:f8:ba:0c:30:ad:
29:38:12:23:39:13:93:16:30:b7:56:ad:1b:ed:d9:46:5c:2a:
1c:80:9f:2e:a0:67:a8:87:52:3b:7c:60:fd:75:65:c6:a1:32:
86:12:62:06:ca:f1:e5:16:78:4f:99:ee:88:0e:b1:94:8d:05:
85:ea:ef:3b:c4:81:a6:87:22:36:ff:38:78:64:bc:3f:27:78:
58:76:a5:9a:5b:a2:2b:32:e7:87:8d:f6:6b:9c:e5:70:0e:43:
02:7a:d0:81:11:3a:83:2a:7a:0a:35:57:c2:0a:1f:86:bb:07:
1a:3a:0e:b2:6b:3d:37:ef:09:42:52:42:3c:c5:fe:54:7d:1b:
73:06:78:8d:c7:a0:68:21:c7:14:e2:2d:4a:83:15:6f:ed:7b:
af:7a:c1:78:73:1b:26:2a:bf:e5:63:fa:54:32:48:96:eb:90:
ff:14:3c:a7:f9:a3:c0:5b:49:6d:d1:78:9f:04:7c:a9:f1:39:
02:96:48:e2:dd:a5:00:c1:82:ca:22:4b:b8:ad:93:d7:47:67:
e7:f2:16:5f:fc:c6:9e:60:f0:45:00:f6:f2:08:40:ba:4f:74:
e6:81:e5:c4:52:07:ac:06:06:fb:6d:ef:e6:b2:51:81:89:b0:
ad:a2:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:49 2025 by rpki-client