Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File: FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier: POBl9XAl9doptBgFM+Fo1SEKYbTcJDTRKn/OBSMChLM=
Subject key identifier: 49:81:CD:EA:27:43:D2:5A:E2:44:E8:A0:BB:5D:33:33:C5:A3:84:A9
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer: /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial: 019A4EF4F3B6FC55583396BDAC396455BEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number: 05DC
Signing time: Tue 04 Nov 2025 13:01:07 +0000
Manifest this update: Tue 04 Nov 2025 13:01:07 +0000
Manifest next update: Wed 05 Nov 2025 13:01:07 +0000
Files and hashes: 1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: cWbP8fL+Bu8Hc8lYqKhjaoTaOe3L9CFBffGOfdrXw/g=)
2: o8S7tkvunun9ckbw4BTp3xF4qOg.roa (hash: m5zy4GD9yIfkM+gnTmUFCt3YRr3WAaO9EejYBf8+Bnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f3:b6:fc:55:58:33:96:bd:ac:39:64:55:be:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Validity
Not Before: Nov 4 13:01:07 2025 GMT
Not After : Nov 5 13:01:07 2025 GMT
Subject: CN=4981cdea2743d25ae244e8a0bb5d3333c5a384a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:a5:98:f1:70:dd:26:fa:86:4e:0d:45:aa:
73:0c:08:bc:9b:6a:93:5d:fc:09:15:11:b9:0b:38:
46:45:96:50:d3:ed:e2:c5:bd:8d:52:bf:6b:dc:31:
84:d4:b3:c4:7a:d8:52:8a:c1:dc:96:13:b6:25:0c:
21:2e:7f:d5:35:c8:23:de:ed:fe:2d:9e:9d:de:fd:
83:18:af:ff:70:c3:90:af:a9:f6:af:57:55:50:30:
20:ab:01:0e:d0:d0:75:a4:fa:b6:e0:3a:34:c8:97:
d3:9e:0c:5c:8c:36:e2:44:d8:fd:98:d4:0b:1f:f6:
e8:d8:f4:6d:3a:76:c4:bd:43:23:f8:1a:3d:f2:8c:
97:15:25:2e:72:97:6d:80:05:cd:94:ee:7f:20:54:
3e:d1:f6:d6:d5:61:7b:d3:02:90:b8:f3:00:55:ed:
04:cc:27:ab:fd:7f:de:a4:bc:8a:22:27:ac:03:15:
40:97:3f:ca:25:ae:a6:2c:22:7a:d0:8c:c2:31:28:
dc:59:a8:1a:b4:ff:cd:7d:0b:81:cf:bc:b6:89:86:
52:f7:c1:a7:0b:ec:a1:cf:94:18:fa:56:06:60:b0:
fb:f2:cb:8d:0b:5f:07:52:31:07:25:14:5b:91:db:
8e:21:46:e9:15:3a:37:5a:86:c0:31:64:59:79:b6:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:81:CD:EA:27:43:D2:5A:E2:44:E8:A0:BB:5D:33:33:C5:A3:84:A9
X509v3 Authority Key Identifier:
keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:df:d1:77:0b:66:be:c0:f5:28:4d:59:da:17:ff:18:70:48:
f4:b8:ab:a1:56:21:b9:4a:42:b2:ba:98:d3:4e:f6:55:39:91:
7a:c5:e6:58:5a:c6:6f:e3:3d:b9:3e:af:cb:47:c7:45:8d:7f:
8d:19:a0:25:01:29:a2:03:0c:1b:bf:8b:c5:27:65:63:37:47:
75:5c:4e:89:11:0f:e3:6d:7d:df:b8:8e:0b:c7:34:7b:99:c1:
04:75:e2:7d:fb:59:ad:f1:49:9a:51:3d:dd:4e:25:aa:2b:1e:
bb:c1:ec:80:7f:65:8c:f4:3f:72:51:20:9d:d6:08:40:ae:a1:
d7:c7:21:b2:b0:90:82:94:9d:79:b9:30:96:03:41:ca:2f:54:
8c:06:ea:33:0e:4a:6c:e3:00:53:1c:07:2f:01:c2:39:56:da:
bb:82:9c:07:5c:77:58:13:4e:bc:a8:3b:1a:38:c7:56:65:36:
9f:85:84:a8:7b:ac:8f:43:b7:2f:79:38:19:f1:c1:b2:56:28:
48:7c:9d:37:27:12:da:93:96:21:f9:6a:02:a2:ae:6a:c4:3d:
ed:72:ce:83:e0:a4:4e:1c:99:65:53:a2:44:91:49:62:55:d2:
ff:20:fc:b9:cb:d7:fb:26:f7:2f:0d:35:c5:f9:8d:6f:06:08:
46:ae:0e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:41:17 2025 by rpki-client