Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
File: FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json)
Hash identifier: nQS+vKNWRFduCxOkvG20DmwTyeCpkpWzh3cNYB7IQGs=
Subject key identifier: 5E:78:BC:C7:19:05:EF:C3:B2:4D:3E:A9:4E:15:B3:F0:65:CE:86:DF
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 0199228D119A49A0B3F1AAFCFC361068DA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
Manifest number: 11EA
Signing time: Sun 07 Sep 2025 05:01:34 +0000
Manifest this update: Sun 07 Sep 2025 05:01:34 +0000
Manifest next update: Mon 08 Sep 2025 05:01:34 +0000
Files and hashes: 1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: T92CNNhvWAvI2bQHjtvwCi4UNGn8aw0LSxXG85HkteE=)
2: H9dXCbHCAXGOrGOV28k8umzrLKQ.roa (hash: sDapbNuHEvC3TdmduqXaXIUkjYECPGi1w550P+lUprw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:11:9a:49:a0:b3:f1:aa:fc:fc:36:10:68:da:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Sep 7 05:01:34 2025 GMT
Not After : Sep 8 05:01:34 2025 GMT
Subject: CN=5e78bcc71905efc3b24d3ea94e15b3f065ce86df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:0b:79:2a:a9:76:d2:17:8d:3c:48:3f:7a:
31:a8:2e:35:fd:38:d7:10:00:a4:68:fd:53:f9:6b:
e9:c2:7a:1f:3b:9b:d6:1c:0f:86:f1:7d:38:d1:22:
22:33:b0:b1:30:0d:86:2b:3e:d7:29:77:08:9a:58:
79:d3:62:45:74:01:db:8c:16:bc:d9:50:2a:33:03:
d9:ba:0a:f9:1a:3a:9b:cc:a4:68:96:82:9f:be:99:
45:c2:de:8f:6e:46:7f:15:3c:e3:19:ec:43:0e:7a:
1a:d2:16:82:aa:63:fb:1b:ac:f3:55:a6:03:69:4e:
d2:e2:f7:4d:c5:6f:c0:12:b1:d0:e2:27:35:70:8b:
ca:84:8a:f6:2e:0b:de:76:fb:bd:c1:16:86:34:16:
9b:98:e6:7d:7a:cf:62:76:72:6b:1c:64:ae:a9:96:
ef:c1:28:36:d7:10:bc:46:5e:ea:d7:b1:39:55:6c:
8a:4c:b1:ba:8f:d8:17:56:d4:63:ec:96:47:e3:e1:
6a:83:7c:52:e2:4f:26:f4:7d:5f:f2:17:4b:84:6a:
67:57:94:7a:2c:05:c9:d7:42:43:d7:c0:55:1d:a6:
0c:7f:44:24:32:73:cc:07:7b:06:0c:ac:0e:79:3e:
f6:91:3c:24:15:48:7b:7b:b3:83:6d:3f:05:0f:06:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:78:BC:C7:19:05:EF:C3:B2:4D:3E:A9:4E:15:B3:F0:65:CE:86:DF
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:61:a0:0f:87:cb:95:66:2a:67:d3:7d:ac:3a:9e:ae:64:ae:
b9:4d:e3:7a:f2:b2:a6:f2:0e:33:41:c6:5e:8e:a5:86:20:95:
3f:52:7c:af:56:ba:9d:59:43:06:e6:11:79:23:bf:d2:3a:49:
72:07:63:27:e8:fd:2b:dc:56:33:f1:cd:73:54:7c:3d:40:a3:
de:34:0e:5a:fd:60:01:05:19:4a:97:a6:2f:06:ee:25:08:df:
df:cb:f3:b7:fc:f3:6f:64:8f:68:e8:c4:10:ad:92:8a:aa:3b:
36:a1:f6:0a:ef:d9:43:35:4c:1b:31:8f:53:cf:01:1f:09:e0:
c1:07:ee:fe:ab:02:5f:f3:3b:ab:f0:19:39:3f:e6:2e:9a:17:
02:31:13:cd:b8:9b:2f:f0:95:80:3c:56:a4:70:57:b0:69:ea:
25:c1:ca:ab:a5:59:ce:32:69:b1:a8:0e:05:8e:6c:ff:67:c4:
47:c0:8c:40:31:be:af:75:94:6c:94:1b:7e:16:9d:c4:89:b3:
68:27:4c:55:63:6a:96:33:b0:aa:ba:dc:4b:5b:67:ed:04:28:
11:ce:2c:5b:b2:c4:0b:3b:be:4f:49:41:0c:1b:40:55:5f:9a:
5e:18:0c:64:54:78:c2:6f:81:5c:f9:fa:85:b4:b5:4f:20:33:
6b:01:94:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijRGaSaCz8ar8/DYQaNodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YWMxNjBkYTk5YjM0OTRhNTZiNTQ3YzY4YThlMmMwOTE4
NjkxYjUwHhcNMjUwOTA3MDUwMTM0WhcNMjUwOTA4MDUwMTM0WjAzMTEwLwYDVQQD
Eyg1ZTc4YmNjNzE5MDVlZmMzYjI0ZDNlYTk0ZTE1YjNmMDY1Y2U4NmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SALeSqpdtIXjTxIP3oxqC41/TjX
EACkaP1T+WvpwnofO5vWHA+G8X040SIiM7CxMA2GKz7XKXcImlh502JFdAHbjBa8
2VAqMwPZugr5GjqbzKRoloKfvplFwt6PbkZ/FTzjGexDDnoa0haCqmP7G6zzVaYD
aU7S4vdNxW/AErHQ4ic1cIvKhIr2Lgvedvu9wRaGNBabmOZ9es9idnJrHGSuqZbv
wSg21xC8Rl7q17E5VWyKTLG6j9gXVtRj7JZH4+Fqg3xS4k8m9H1f8hdLhGpnV5R6
LAXJ10JD18BVHaYMf0QkMnPMB3sGDKwOeT72kTwkFUh7e7ODbT8FDwZTkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF54vMcZBe/Dsk0+qU4Vs/BlzobfMB8GA1UdIwQY
MBaAFBasFg2pmzSUpWtUfGio4sCRhpG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnF3V0RhbWJOSlNsYTFSOGFLaml3SkdHa2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjQ5NzMtNjBiZi00Mzg2LTk3YTYt
MWU2OTEyNjg5ZGQ4LzEvRnF3V0RhbWJOSlNsYTFSOGFLaml3SkdHa2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZjQ5NzMtNjBiZi00Mzg2LTk3YTYtMWU2OTEyNjg5ZGQ4
LzEvRnF3V0RhbWJOSlNsYTFSOGFLaml3SkdHa2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmGgD4fL
lWYqZ9N9rDqermSuuU3jevKypvIOM0HGXo6lhiCVP1J8r1a6nVlDBuYReSO/0jpJ
cgdjJ+j9K9xWM/HNc1R8PUCj3jQOWv1gAQUZSpemLwbuJQjf38vzt/zzb2SPaOjE
EK2Siqo7NqH2Cu/ZQzVMGzGPU88BHwngwQfu/qsCX/M7q/AZOT/mLpoXAjETzbib
L/CVgDxWpHBXsGnqJcHKq6VZzjJpsagOBY5s/2fER8CMQDG+r3WUbJQbfhadxImz
aCdMVWNqljOwqrrcS1tn7QQoEc4sW7LECzu+T0lBDBtAVV+aXhgMZFR4wm+BXPn6
hbS1TyAzawGU6Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:03 2025 by rpki-client