Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
File: Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft (raw, json)
Hash identifier: 9u9ISE1opi+BGfvbRdjFhnCW9KsTMKmza+uHpDxZFHg=
Subject key identifier: FF:4A:AA:C8:30:F4:01:D0:25:6C:CE:8A:7A:C9:DC:CE:7B:86:A0:0F
Authority key identifier: 16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
Certificate issuer: /CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Certificate serial: 019A725C6B2322659037AE277428179218CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
Manifest number: 16AD
Signing time: Tue 11 Nov 2025 10:00:50 +0000
Manifest this update: Tue 11 Nov 2025 10:00:50 +0000
Manifest next update: Wed 12 Nov 2025 10:00:50 +0000
Files and hashes: 1: Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl (hash: EiA/pRBlEU+dsUdLQpw85cGsfnB1c3dbrrKCD34TH0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:6b:23:22:65:90:37:ae:27:74:28:17:92:18:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Validity
Not Before: Nov 11 10:00:50 2025 GMT
Not After : Nov 12 10:00:50 2025 GMT
Subject: CN=ff4aaac830f401d0256cce8a7ac9dcce7b86a00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:91:e7:cc:2c:9f:43:53:cc:8e:98:7a:db:
57:17:02:b1:55:74:e7:af:c7:f1:b7:cd:de:60:c0:
e2:a4:f6:bf:16:6c:e9:51:76:fa:93:8e:45:de:af:
11:a5:e0:f6:51:ea:40:8a:15:c3:77:f2:04:b9:82:
c8:7d:20:86:35:3f:0d:f1:b4:be:28:b8:71:b2:c2:
3f:72:c5:17:d1:07:71:0e:d6:35:2c:92:47:04:30:
d0:20:77:eb:6f:be:49:9c:a4:61:a4:f6:54:e0:80:
a2:c0:0f:5f:a8:6b:88:6e:b7:78:a5:9b:9d:f4:18:
29:2a:8a:9a:8b:c6:2e:42:87:05:b7:39:b7:41:a7:
28:a8:a1:33:c6:5e:bb:6d:9a:fe:e0:72:56:02:9c:
1f:c6:a4:6a:c7:3d:bf:05:4b:60:79:52:cf:fb:01:
58:e6:c7:17:82:19:25:be:78:3f:5f:b4:3f:0a:3e:
db:87:77:23:7e:f5:17:40:92:7b:d8:e1:49:76:a7:
56:1a:5f:dc:b1:1e:2c:82:d2:3a:64:41:ec:75:85:
f0:f4:43:0c:3d:fa:ad:9e:6c:c3:e8:93:2d:c9:4b:
b7:ae:fe:7b:f1:68:9c:f0:24:69:aa:73:b0:5d:c5:
cd:14:30:62:ed:0c:1d:c6:56:70:d0:be:8a:10:4c:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4A:AA:C8:30:F4:01:D0:25:6C:CE:8A:7A:C9:DC:CE:7B:86:A0:0F
X509v3 Authority Key Identifier:
keyid:16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c8:00:65:af:8f:d5:06:cb:24:5a:05:e7:8f:9b:ff:45:2b:
86:7c:84:7d:da:3b:46:1d:6c:e2:8e:c7:b0:55:2a:b0:4d:f1:
d8:1b:cf:55:88:ec:24:f9:39:63:d5:2b:3a:61:31:3e:69:a1:
43:45:76:c0:fb:97:1f:03:6a:6f:93:a7:67:c3:2b:21:fe:a3:
22:05:f3:0c:2f:1e:f2:e7:bc:c2:53:f4:23:c7:64:8b:2d:89:
3e:b9:a7:12:da:03:cc:dc:e3:96:e7:a7:fc:c9:bd:c3:6c:ad:
fc:f0:c1:7f:b7:68:5a:2f:09:72:b4:5d:38:de:ed:1e:94:1a:
1c:95:63:02:70:93:b5:f7:75:99:62:76:aa:d9:cd:a1:64:c9:
b9:c2:c4:55:87:b1:4f:f3:e4:34:e4:53:b3:80:fa:4c:11:0d:
57:c5:32:f8:ac:ad:00:31:4d:c0:79:ce:80:7e:9a:39:18:2f:
d6:07:12:40:98:de:6b:f5:4d:97:90:a3:ec:a6:0a:37:28:8a:
34:1f:4f:54:3f:cf:59:a4:b6:bf:45:6b:00:4d:7d:a0:24:e0:
35:26:1f:e4:dd:b0:d9:14:d4:05:5a:d2:c7:d6:52:00:4e:6a:
28:6d:e2:75:07:5c:27:06:49:4e:bc:93:ce:f5:1d:e3:d7:ec:
66:41:66:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:57 2025 by rpki-client