Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier: Nlo6nPnjse7iCawhY4xIJlyBJ0r8k+TNTjv6QjfttFQ=
Subject key identifier: 3D:36:E5:88:C1:5F:AE:B0:37:8A:33:DC:73:55:81:91:A1:5F:7F:5D
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial: 019A2A79F36B1F4B4921F7CE200FF03E075B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number: 168E
Signing time: Tue 28 Oct 2025 11:00:26 +0000
Manifest this update: Tue 28 Oct 2025 11:00:26 +0000
Manifest next update: Wed 29 Oct 2025 11:00:26 +0000
Files and hashes: 1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: sys3XBqH/Gmg/QTsjmwLFXZkTsbL/6BeoKlBg4tudUU=)
2: 95gvF9PQMIrb-BKphnns2uDXNiw.roa (hash: MBJ0PohSRVPGJ57dBumqXOfbyvugttOgIAsIwTytItw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:f3:6b:1f:4b:49:21:f7:ce:20:0f:f0:3e:07:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
Validity
Not Before: Oct 28 11:00:26 2025 GMT
Not After : Oct 29 11:00:26 2025 GMT
Subject: CN=3d36e588c15faeb0378a33dc73558191a15f7f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:6d:85:ac:94:0d:de:be:f3:17:7b:9b:04:
52:c6:36:20:5c:f4:dc:24:6b:5a:6d:f4:f7:d0:0f:
67:81:9b:84:cc:26:b6:fb:8b:2f:d1:8f:f9:a7:21:
2c:9b:0a:4b:70:8f:b4:37:e7:2d:09:21:01:8c:8f:
12:80:06:90:fd:dc:d3:51:84:93:ca:91:89:f5:12:
f3:73:0e:0d:1d:ba:a4:ae:96:9a:5b:f3:c8:71:a0:
3e:1b:5f:2a:0f:81:7a:7b:87:b2:f3:66:16:9b:24:
f1:2c:a2:d3:d0:d1:27:27:c5:39:87:f8:32:59:e9:
4c:a5:af:f8:1a:7c:15:af:1f:84:89:27:1f:ea:5d:
9b:14:56:52:db:a9:ca:62:7b:af:1e:99:8b:21:d8:
18:bb:0f:21:7c:9c:b4:71:3e:9e:87:ca:a0:c7:12:
ad:c2:22:2f:65:a5:f9:9a:2e:3f:66:28:cc:be:28:
57:a5:06:97:0a:2f:dc:c1:d5:49:a8:df:e9:9b:2d:
98:65:c2:27:ca:18:c6:90:17:25:3c:bd:71:7b:5a:
d4:c7:41:a7:60:c1:16:7c:bd:e0:6d:3b:1f:79:bf:
1f:8c:11:64:4e:3f:f0:df:5f:55:c3:df:08:63:b3:
ce:9c:b4:48:a3:9b:f5:0a:07:01:5f:1e:c4:0c:1c:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:36:E5:88:C1:5F:AE:B0:37:8A:33:DC:73:55:81:91:A1:5F:7F:5D
X509v3 Authority Key Identifier:
keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0c:0c:64:77:1f:91:3f:aa:22:02:bc:0e:e7:ee:dd:1e:08:
db:1f:46:1d:b7:59:a9:3c:ba:be:46:94:28:3f:95:34:98:6e:
14:34:cf:34:b6:56:f2:15:8c:69:3c:eb:48:69:98:a2:61:58:
65:2f:b3:ca:32:a1:3d:9b:ab:af:6c:3a:3f:d4:7a:7e:53:ed:
10:fd:9a:8f:e4:26:73:82:50:99:76:d8:82:ae:2f:56:23:87:
08:d9:b8:0f:ff:82:e9:bf:5c:09:bf:8a:95:59:eb:87:c5:82:
6e:9f:44:fb:e0:dc:94:94:b6:f9:63:4f:eb:04:3b:c8:a2:67:
2e:bc:97:86:72:4d:07:32:10:ff:ac:12:8c:e2:9f:5b:59:23:
f4:68:ae:39:d3:e4:9a:94:64:27:93:55:b4:60:47:66:70:03:
86:fd:df:ed:46:e2:09:59:04:3c:42:ce:4f:cd:e9:c7:11:fa:
08:ce:32:ae:0b:9a:c6:a6:19:87:99:2e:05:db:62:2e:d9:ab:
0b:e8:89:65:1e:2a:60:2b:e4:29:7f:79:54:90:1f:83:3e:3c:
f2:1e:8d:61:6e:22:d9:c6:fb:4e:7f:51:86:7b:83:3f:47:9f:
e4:79:38:77:ea:6e:a6:f7:fd:0e:1c:e1:8d:31:f0:07:51:1c:
7f:d9:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:30:59 2025 by rpki-client