Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
File: FqThByM1EnDNjJzGSwlkiOZOIw4.mft (raw, json)
Hash identifier: YV6UXUUgGX0zEc1lda1+TRafxGhaP5QnaeXMnp+PDUE=
Subject key identifier: D2:AF:79:B5:5A:E0:65:05:DC:21:F2:19:40:03:C1:82:14:70:31:98
Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
Certificate issuer: /CN=16a4e10723351270cd8c9cc64b096488e64e230e
Certificate serial: 01993BA7BF4459D5026DDF3C9A329651FB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
Manifest number: 07EF
Signing time: Fri 12 Sep 2025 02:01:13 +0000
Manifest this update: Fri 12 Sep 2025 02:01:13 +0000
Manifest next update: Sat 13 Sep 2025 02:01:13 +0000
Files and hashes: 1: FqThByM1EnDNjJzGSwlkiOZOIw4.crl (hash: GwO95D9HiDZbeb/TtPM2uid6Vs/urn1a+HNG7Z/fJqg=)
2: LHS-1GPmf3JlxOhkC8EvvEXsIio.roa (hash: qJmDzf2hiWRAwgR4H4d0P3HUtRpMHlkEr8kbVnNHB5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:a7:bf:44:59:d5:02:6d:df:3c:9a:32:96:51:fb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e
Validity
Not Before: Sep 12 02:01:13 2025 GMT
Not After : Sep 13 02:01:13 2025 GMT
Subject: CN=d2af79b55ae06505dc21f2194003c18214703198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:af:e8:6a:d4:c5:c9:d8:92:1c:94:b8:d9:
75:88:a8:e4:2c:c2:d2:db:50:a0:da:32:4b:fa:a1:
e2:e4:8e:96:57:32:5a:86:7c:69:06:3a:c0:41:82:
2b:38:02:27:3a:30:a6:46:20:f3:6c:8e:29:69:f3:
0c:4a:b8:f1:02:a1:1a:1b:c9:e4:63:3d:a4:8b:36:
50:98:93:2a:b8:03:f8:d8:96:a2:80:d6:66:09:ab:
55:08:3f:ce:8c:f6:93:14:6a:1a:81:2a:17:a9:9b:
ca:f7:69:37:97:3a:05:0d:0d:01:de:f8:8b:5d:2f:
6e:fc:d1:32:65:51:93:a8:93:d8:02:bf:7e:0e:5c:
3d:de:ae:2e:83:d9:32:b0:d1:a1:36:e9:af:b3:6e:
c7:c2:4e:9b:2e:19:93:28:fe:6a:00:c9:b9:ee:a8:
6a:43:bb:4c:1c:0b:35:a1:d3:a3:98:68:c8:2e:c7:
01:e4:b1:ef:ed:65:bc:0e:10:89:55:41:53:f4:e3:
e3:76:8a:f0:d2:00:0b:47:11:47:2c:d1:4e:7c:c0:
07:23:c2:6f:d1:20:76:dc:e8:3d:fb:7a:8b:4d:83:
50:1e:18:d5:8c:52:ef:6d:97:e1:3e:8e:e1:02:87:
18:2a:0a:47:d9:82:c4:6c:c4:64:77:48:ef:e0:9c:
f1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AF:79:B5:5A:E0:65:05:DC:21:F2:19:40:03:C1:82:14:70:31:98
X509v3 Authority Key Identifier:
keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0e:15:14:cb:79:98:98:83:c3:c6:71:24:6d:7b:7e:2b:16:
bf:d8:c3:fa:0f:02:84:9f:3d:f0:d5:68:a7:81:fb:47:78:93:
69:cb:f2:df:c1:0f:a9:55:a3:15:ee:1b:b8:9f:d2:df:91:60:
b0:d9:52:45:5f:dc:16:bf:70:e1:61:71:66:2d:f0:3f:65:ad:
93:2a:95:c9:cd:fc:21:e5:ea:ba:49:19:0d:a3:ee:72:05:a7:
a8:94:a9:30:e1:1d:d1:7d:93:98:ff:47:2e:de:93:e4:d7:57:
c0:32:21:f7:d8:b2:80:82:18:e8:8b:4f:11:63:d5:e3:7a:f9:
28:fc:1a:90:1c:54:86:95:02:61:be:8f:c3:c5:b6:84:88:39:
3b:9e:45:fc:c9:fb:98:e8:a9:62:e8:78:65:49:a6:6a:d3:f6:
36:5c:8a:dd:8e:c3:c4:00:e4:5e:a9:cb:37:9b:50:58:fa:af:
35:7b:02:c5:d0:d6:c1:dd:06:c6:43:a3:7a:e8:7b:98:cd:14:
fb:4b:bd:26:53:62:34:43:d3:4f:34:43:42:6d:bd:e9:ff:83:
a0:5a:1d:80:66:02:48:8d:64:8d:88:65:28:19:c8:a7:7a:26:
02:45:36:31:03:2e:dd:c2:17:7e:37:82:e9:ff:49:e7:22:a4:
6c:ce:ff:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk7p79EWdUCbd88mjKWUfsbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTRlMTA3MjMzNTEyNzBjZDhjOWNjNjRiMDk2NDg4ZTY0
ZTIzMGUwHhcNMjUwOTEyMDIwMTEzWhcNMjUwOTEzMDIwMTEzWjAzMTEwLwYDVQQD
EyhkMmFmNzliNTVhZTA2NTA1ZGMyMWYyMTk0MDAzYzE4MjE0NzAzMTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31yv6GrUxcnYkhyUuNl1iKjkLMLS
21Cg2jJL+qHi5I6WVzJahnxpBjrAQYIrOAInOjCmRiDzbI4pafMMSrjxAqEaG8nk
Yz2kizZQmJMquAP42JaigNZmCatVCD/OjPaTFGoagSoXqZvK92k3lzoFDQ0B3viL
XS9u/NEyZVGTqJPYAr9+Dlw93q4ug9kysNGhNumvs27Hwk6bLhmTKP5qAMm57qhq
Q7tMHAs1odOjmGjILscB5LHv7WW8DhCJVUFT9OPjdorw0gALRxFHLNFOfMAHI8Jv
0SB23Og9+3qLTYNQHhjVjFLvbZfhPo7hAocYKgpH2YLEbMRkd0jv4JzxaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKvebVa4GUF3CHyGUADwYIUcDGYMB8GA1UdIwQY
MBaAFBak4QcjNRJwzYycxksJZIjmTiMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNzVkYzUtNmYxNS00NWZlLTk0MWYt
OWI2NDQ0NGZmNjg4LzEvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8yNzVkYzUtNmYxNS00NWZlLTk0MWYtOWI2NDQ0NGZmNjg4
LzEvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdw4VFMt5
mJiDw8ZxJG17fisWv9jD+g8ChJ898NVop4H7R3iTacvy38EPqVWjFe4buJ/S35Fg
sNlSRV/cFr9w4WFxZi3wP2WtkyqVyc38IeXqukkZDaPucgWnqJSpMOEd0X2TmP9H
Lt6T5NdXwDIh99iygIIY6ItPEWPV43r5KPwakBxUhpUCYb6Pw8W2hIg5O55F/Mn7
mOipYuh4ZUmmatP2NlyK3Y7DxADkXqnLN5tQWPqvNXsCxdDWwd0GxkOjeuh7mM0U
+0u9JlNiNEPTTzRDQm296f+DoFodgGYCSI1kjYhlKBnIp3omAkU2MQMu3cIXfjeC
6f9J5yKkbM7/NA==
-----END CERTIFICATE-----
Generated at Fri Sep 12 03:19:51 2025 by rpki-client