Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
File: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json)
Hash identifier: ZCqKIbq9K5EhxikYTdhId8GUbU6hlE0BIgORHC9RTz8=
Subject key identifier: E9:2C:8A:4F:E9:7E:37:00:D3:78:96:9F:57:87:F0:DA:09:5F:F6:92
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial: 019A706E0261B81B356CB8ECCF8022CA8F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
Manifest number: 172F
Signing time: Tue 11 Nov 2025 01:00:49 +0000
Manifest this update: Tue 11 Nov 2025 01:00:49 +0000
Manifest next update: Wed 12 Nov 2025 01:00:49 +0000
Files and hashes: 1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: RNWRvd6qUEhcawcohJcyDqAZREILnxe1JFg0sIVx3vg=)
2: nS2kJA0lLglIc5uOUfZiV3eL6YA.roa (hash: K783Zb7wLmRXQmApgLlixVva89VTJc2nsPVxHEGUGTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:02:61:b8:1b:35:6c:b8:ec:cf:80:22:ca:8f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Validity
Not Before: Nov 11 01:00:49 2025 GMT
Not After : Nov 12 01:00:49 2025 GMT
Subject: CN=e92c8a4fe97e3700d378969f5787f0da095ff692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:ca:20:09:16:63:ad:48:3d:f6:96:ff:4c:
f1:2a:cb:93:80:a8:69:a2:3c:76:3a:28:c2:f5:f1:
8a:5c:f1:9b:0f:c1:f6:aa:5a:3e:ed:72:12:77:a7:
10:0f:87:9b:5d:80:36:40:6f:ca:e3:bb:bd:42:00:
90:8f:74:6e:72:db:fe:5a:87:44:83:1c:6e:86:df:
f2:93:0f:10:03:dd:72:aa:db:e7:15:53:28:e9:d2:
96:45:e0:b5:25:04:93:89:60:2c:ae:ee:bf:e5:ec:
66:08:f1:1b:31:c4:75:c3:45:2c:07:4d:0c:bd:b4:
ac:1e:a5:88:57:95:d0:64:9f:c8:d7:25:63:d5:e9:
53:1d:fb:3a:38:1e:47:f9:37:59:20:37:58:fc:ba:
f2:ab:c3:4d:0f:f5:56:6e:9f:c8:76:ce:ec:cb:1a:
26:a3:3c:89:5d:60:a3:82:61:63:df:26:0b:a4:a0:
65:b7:03:7a:30:96:72:e3:bd:e4:06:38:2a:43:a7:
e1:35:07:94:f0:c1:91:8e:95:06:0d:d0:d3:51:48:
62:de:8c:f8:ff:c9:be:b3:6d:26:44:6b:f3:a4:77:
df:81:1e:31:6b:d4:e9:2e:21:cc:cb:46:08:5b:6f:
99:73:60:fd:13:42:ce:58:10:0c:42:af:5f:78:a1:
f2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2C:8A:4F:E9:7E:37:00:D3:78:96:9F:57:87:F0:DA:09:5F:F6:92
X509v3 Authority Key Identifier:
keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8b:7c:5b:c9:17:64:16:d2:7f:30:54:ad:82:fb:2d:0a:7b:
10:ac:30:a6:c4:d7:8e:44:3f:5c:ea:b1:3d:01:86:16:ec:0c:
3a:56:63:56:10:1d:f5:39:24:42:ad:34:8f:8c:e8:a0:50:20:
d5:13:5c:4c:fd:6d:f6:5b:90:30:10:e9:1a:33:da:88:94:fd:
b3:1d:57:a6:6d:c6:9b:21:26:b5:4f:3f:19:b8:be:83:32:eb:
8f:38:94:24:d0:11:08:14:21:e5:ed:f9:81:7a:dd:8a:48:50:
74:60:96:3c:b4:74:a9:6d:ef:56:06:9c:f9:1f:14:48:93:3e:
94:03:b5:a8:3d:57:cf:cf:72:71:a7:74:40:48:62:06:5a:4e:
a5:14:3c:3a:76:5a:92:63:dc:83:89:a9:cd:bc:90:f4:79:dc:
ba:58:8e:f2:d6:fd:88:3c:6f:8a:5c:c5:e7:5a:36:d6:04:07:
3f:1a:12:2e:20:09:ad:64:eb:14:95:bb:e2:c2:11:6b:0c:8b:
c3:27:09:d0:99:a7:d4:2f:21:f3:0a:6f:f8:96:5c:68:4a:0c:
83:97:f5:88:c5:7f:7f:bf:b3:81:c1:d7:0a:bc:81:64:77:f3:
76:c2:c9:55:57:e2:e0:c9:48:f0:4c:0a:a5:66:81:ef:6f:6d:
33:5f:a0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:22 2025 by rpki-client