Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier: YTAmQeQGmCG5TgeeVBiHGP6LyqrBOk7W9KOpkzO/bzE=
Subject key identifier: DE:51:04:B2:4C:17:70:4B:86:CD:33:28:A1:56:ED:AF:AE:AC:F0:1E
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial: 019A0B5D3883D9C2ECD0FF07086157F08E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number: 02A6
Signing time: Wed 22 Oct 2025 10:00:49 +0000
Manifest this update: Wed 22 Oct 2025 10:00:49 +0000
Manifest next update: Thu 23 Oct 2025 10:00:49 +0000
Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: JtJXUfzAwjLWeYaMEEmC6SbWO4pfQE4lqqcirMlVLNw=)
2: VjoP5kM-KwhZcj01jM3hl-6r6UA.roa (hash: vqqeCugYqbCnSBb7Wp1fy/fzybkRWWHMWjjnU8HbuEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:38:83:d9:c2:ec:d0:ff:07:08:61:57:f0:8e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Validity
Not Before: Oct 22 10:00:49 2025 GMT
Not After : Oct 23 10:00:49 2025 GMT
Subject: CN=de5104b24c17704b86cd3328a156edafaeacf01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:c7:79:8c:3c:e3:06:53:47:88:37:c8:bf:
c6:e8:bc:42:b2:ee:85:d3:7d:01:79:67:bf:5f:39:
3b:f2:cf:60:1d:c4:bf:bb:0e:bf:14:22:90:49:18:
e5:23:2d:78:cd:08:dc:5e:e4:95:d3:31:98:48:06:
34:ea:0e:40:00:9f:c9:57:30:16:41:c7:f3:ba:59:
d1:eb:05:79:b3:dc:02:4b:3f:1f:cf:a4:36:2f:92:
38:7b:bf:f5:01:2e:16:81:25:f5:85:f4:19:90:fd:
3a:a8:fb:ff:e0:d2:43:3a:a0:a5:03:e0:b0:a3:0c:
84:7a:5d:0b:07:69:a8:75:8a:12:aa:84:49:4b:0e:
c2:b0:04:c4:2e:7d:19:48:bc:c9:f4:07:b9:04:50:
a6:ca:b4:0a:9c:7f:8d:7e:b9:dd:ce:b4:1a:4f:1b:
86:03:e5:1b:18:37:12:a1:52:b3:c6:ac:82:24:52:
74:94:ae:2b:5a:9e:e5:de:e5:a4:44:a2:2b:56:69:
09:e6:7d:c2:05:bb:51:d3:dc:82:37:4f:3f:ff:e1:
f5:7f:36:7d:7f:bd:cd:55:3f:86:b4:b2:5d:59:9c:
f5:bc:86:95:4b:d7:32:16:38:e8:53:c9:62:7e:09:
73:70:cf:15:1d:2a:ae:b8:16:cc:28:12:e3:76:32:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:51:04:B2:4C:17:70:4B:86:CD:33:28:A1:56:ED:AF:AE:AC:F0:1E
X509v3 Authority Key Identifier:
keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:47:1f:02:2d:07:18:68:c8:e6:ee:96:ee:02:14:73:f2:f9:
32:49:79:9d:d3:a5:b9:a9:99:02:d7:28:ff:e7:de:d0:6e:44:
f1:75:8b:8a:87:89:81:e4:fa:41:11:63:03:ba:f2:75:fd:45:
9d:b6:d1:0e:12:b7:d6:ca:aa:6e:5c:5c:f5:40:22:77:7d:54:
51:f9:ae:a6:17:42:94:08:f0:95:d6:7a:18:29:0b:40:c4:3d:
7a:1f:63:40:be:78:f4:85:dc:97:73:0e:83:a5:7c:8a:50:66:
f1:84:9d:31:bd:92:ab:f1:32:b4:2b:d9:32:df:ca:86:90:b8:
36:f4:5d:00:6a:80:5e:72:b4:43:dc:b7:ac:ab:48:c1:c9:6d:
6c:bf:ae:1e:29:1c:c7:58:8a:76:92:2b:43:b6:45:d9:32:b7:
41:b8:b3:f7:a6:46:0f:be:c7:a8:17:c7:10:c6:6c:47:4c:c4:
2e:1f:cb:53:ca:72:a1:13:fe:cd:5d:a5:26:57:12:c4:f2:95:
72:36:83:ed:09:d7:91:88:2d:b8:bc:bc:ed:57:09:c8:4b:f3:
60:b8:26:b6:8f:b4:3a:d1:04:d8:22:4c:00:20:1d:0b:11:44:
f1:5c:bb:4a:4b:ef:69:97:72:dd:db:33:9d:ff:45:f5:ed:20:
06:c3:f8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:39:36 2025 by rpki-client