Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: Fkg+4l/dB20AcJaUiFtH6QAnGeCjpK/4JZzeCeTZygU=
Subject key identifier: FC:A7:25:E7:50:3E:35:9B:A0:D4:79:87:55:2D:BB:DF:57:1A:D4:C9
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 019893A3F2F10587AE40E0D646632EDC9628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 0656
Signing time: Sun 10 Aug 2025 11:00:51 +0000
Manifest this update: Sun 10 Aug 2025 11:00:51 +0000
Manifest next update: Mon 11 Aug 2025 11:00:51 +0000
Files and hashes: 1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: qEjwnYwl3wSlMKOWna/bP2UkmqOGwq8UwQmF0TS7TGg=)
2: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (hash: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:f2:f1:05:87:ae:40:e0:d6:46:63:2e:dc:96:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Aug 10 11:00:51 2025 GMT
Not After : Aug 11 11:00:51 2025 GMT
Subject: CN=fca725e7503e359ba0d47987552dbbdf571ad4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:f8:64:97:be:e6:37:28:0a:8d:b7:de:e2:
a7:28:d7:5c:88:36:cd:db:9f:1d:f9:6a:3c:e8:8c:
38:38:bf:03:5b:8d:47:26:e9:34:ca:e5:64:93:4e:
78:ce:c7:50:2e:5c:14:bd:65:48:ef:e9:ce:97:c7:
0f:71:5a:ce:e3:90:8e:a6:4e:7d:6b:01:4b:27:0e:
75:82:f5:95:56:1b:0f:8c:73:52:0d:68:66:01:e2:
66:c4:f1:27:9b:27:8b:40:3d:6b:86:e2:c7:dd:4e:
04:63:70:9a:3b:98:a6:24:81:62:ac:e6:3f:10:0a:
26:64:4a:a7:83:5d:7f:25:86:06:78:bc:93:67:07:
47:0f:2f:5a:ec:04:6d:43:fc:f4:b0:26:61:2d:f2:
c7:1d:03:5e:5f:b7:9d:78:44:7e:52:f6:f4:62:34:
83:56:72:40:db:83:dc:ff:0e:aa:0f:d9:c9:57:93:
18:0f:5c:3d:2f:2a:93:a8:3e:17:02:7f:43:33:57:
98:54:d6:4b:9d:0e:0f:21:1f:46:84:17:6b:f8:65:
7f:35:c7:63:c8:38:a8:fb:24:e8:a3:7d:eb:63:7d:
60:84:f6:12:1e:63:4e:a8:03:fe:4a:43:f0:51:e3:
cd:60:50:d6:7b:48:59:c6:fc:60:c9:d1:fe:0d:3f:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A7:25:E7:50:3E:35:9B:A0:D4:79:87:55:2D:BB:DF:57:1A:D4:C9
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6f:c3:8f:bd:be:cf:d4:e1:7c:6b:76:62:27:f8:34:46:79:
99:4b:d8:d1:f5:24:b1:fb:52:85:db:80:22:83:07:3b:57:e6:
fa:ce:c3:a8:00:c4:bc:55:66:0c:51:fb:9d:18:43:93:b1:79:
cf:2d:ed:94:84:12:36:04:01:fc:8c:62:5b:8a:94:29:b5:23:
91:2d:fb:fc:ec:94:8a:c0:cb:85:78:4d:45:10:bc:82:d8:c6:
d1:ef:7d:96:ed:fa:66:24:23:0f:7d:98:1f:17:12:c4:33:ee:
d8:c0:ac:a2:2f:b3:a9:d2:cc:4d:02:c4:47:97:be:4b:29:10:
3e:a2:af:dd:26:7d:c1:cc:57:4e:94:5b:d9:6f:68:12:16:f2:
37:1c:14:62:ad:24:f3:19:ae:9b:3c:a9:c4:a9:be:04:03:d3:
37:59:9b:35:61:28:c0:73:75:06:34:cc:f1:70:27:e5:d6:1a:
e9:a5:4f:08:7a:09:6f:e5:d3:ff:3b:80:66:ab:fb:ab:13:ea:
ec:b0:58:67:55:1f:f3:36:7f:c7:99:76:60:36:c3:e3:78:9b:
ba:dc:50:7f:4d:eb:90:e0:d1:7b:ae:a3:17:db:23:75:3b:04:
4a:de:76:d7:1b:34:6f:80:8b:4e:06:73:35:a4:d4:b2:f5:aa:
fe:8b:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:00:20 2025 by rpki-client