
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
File: FqX_fn4arzjlmWnWCYBKOz8Fvog.mft (raw, json)
Hash identifier: bNptBAfrbsAIIe/zwozdkpcT5HBbJ+/I7nR1Lcq2BUk=
Subject key identifier: DD:2A:6C:9D:3B:33:53:5D:F1:73:83:59:19:CD:D4:58:F2:3A:BB:43
Authority key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
Certificate issuer: /CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Certificate serial: 019881D5A33711DA33D7774FB086E30F67DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
Manifest number: 0465
Signing time: Thu 07 Aug 2025 00:01:58 +0000
Manifest this update: Thu 07 Aug 2025 00:01:58 +0000
Manifest next update: Fri 08 Aug 2025 00:01:58 +0000
Files and hashes: 1: FqX_fn4arzjlmWnWCYBKOz8Fvog.crl (hash: XbIHcj8nP+xldqieTqbvM86Q/FXIMIeb4BRGRHk79YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:a3:37:11:da:33:d7:77:4f:b0:86:e3:0f:67:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Validity
Not Before: Aug 7 00:01:58 2025 GMT
Not After : Aug 8 00:01:58 2025 GMT
Subject: CN=dd2a6c9d3b33535df173835919cdd458f23abb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:37:d1:fd:58:43:eb:0a:4f:6f:7d:57:6f:
1b:22:bf:38:03:90:61:82:d7:91:36:14:82:4c:29:
3e:bb:ae:8e:8e:24:cd:cc:79:a0:31:cd:74:c1:ad:
a0:67:dd:39:0c:76:ba:10:0c:1d:78:3e:35:ed:48:
eb:2e:ea:ce:44:b9:ae:66:ce:e2:e1:41:8c:75:81:
1a:76:07:49:17:4f:e0:5c:fe:3b:fa:18:22:df:b7:
80:38:14:1d:64:4f:e3:45:c3:a0:50:0e:80:ee:e3:
9f:f4:3f:d8:cb:77:19:5a:c5:21:fa:27:84:dd:3f:
06:fe:78:8d:49:d3:26:82:72:9c:8f:fb:da:d9:53:
9b:20:12:18:0b:ae:29:46:61:06:63:97:ce:cb:d1:
8d:fe:ce:f3:69:7f:b0:95:2d:12:99:bc:20:32:d1:
1c:2e:16:fb:04:69:d2:b6:78:f2:f7:25:03:aa:b7:
68:f4:6b:4a:83:85:b4:e6:1a:7f:be:a2:c4:59:8a:
fa:6b:29:b1:58:42:9d:7b:03:de:b3:a1:a0:66:11:
3a:c0:a2:91:e6:97:8a:78:a1:84:f5:6a:36:00:1c:
5a:21:73:30:c0:58:62:ca:f3:bd:33:56:27:48:bd:
80:97:b7:40:69:f3:5f:46:3c:70:c3:28:2d:15:8c:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2A:6C:9D:3B:33:53:5D:F1:73:83:59:19:CD:D4:58:F2:3A:BB:43
X509v3 Authority Key Identifier:
keyid:16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d9:ef:98:af:ac:df:49:8d:cc:d8:2d:25:37:22:76:43:46:
b5:41:65:c4:2c:6e:f4:ee:af:b6:55:82:a1:1c:f7:63:a3:54:
16:da:47:74:5b:49:cb:c3:01:82:d3:18:80:46:37:30:46:53:
a1:2c:b9:28:46:86:e7:89:9a:8b:f8:b4:9a:cc:f7:43:62:e3:
98:a9:34:df:dd:f4:ad:94:c5:d7:52:c7:bb:32:49:b1:20:06:
6d:68:99:0b:a2:22:c3:5a:b2:fa:50:5d:31:cf:b2:89:24:12:
8f:16:5e:ce:5f:f2:e6:be:0d:80:7c:74:b7:d1:6a:9c:71:90:
1c:e1:56:9e:b3:6c:57:9e:0f:aa:fa:20:38:4f:a2:f6:8a:e2:
46:c4:e7:b7:ab:21:01:28:84:3b:14:27:f6:11:06:8b:d4:b2:
cb:fa:9b:06:e1:d7:e9:7f:14:f4:9c:41:89:cc:8c:dc:9f:cc:
42:46:9a:36:6f:d4:a9:10:29:17:07:07:c3:22:83:d0:3f:47:
af:cc:d7:27:e4:d2:9b:b0:aa:07:1b:72:6d:d2:26:e6:5a:a6:
1a:d6:a6:d3:5e:ae:39:5d:77:97:9e:93:ee:44:b9:30:bb:71:
9f:cd:c4:aa:eb:7e:f9:c5:c8:73:14:19:a9:11:15:5b:4f:04:
f7:ae:b2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:31 2025 by rpki-client