Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File: FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier: 3Gn9BPspXK3m90qcPtD/ojo2l568AnjFyAQPUzcak6I=
Subject key identifier: C0:F3:2E:7E:01:90:74:73:D8:7A:2F:1D:11:E1:7A:47:0F:44:E4:DC
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial: 019A56096718B8C395FC641EBB7A9877D1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number: 0138
Signing time: Wed 05 Nov 2025 22:00:48 +0000
Manifest this update: Wed 05 Nov 2025 22:00:48 +0000
Manifest next update: Thu 06 Nov 2025 22:00:48 +0000
Files and hashes: 1: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: vwP7PhKyyxXoec8QHqZozKvKPgpwoxsBdkm1YNPek0I=)
2: RyU-tKT6g5iQNEPXbzsjbHBM1_k.roa (hash: 2sFbg6PGW25XBrpSEBIs6U3UJCsY2lOFHoiV3xMg67c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:09:67:18:b8:c3:95:fc:64:1e:bb:7a:98:77:d1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Validity
Not Before: Nov 5 22:00:48 2025 GMT
Not After : Nov 6 22:00:48 2025 GMT
Subject: CN=c0f32e7e01907473d87a2f1d11e17a470f44e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:55:93:a5:54:7f:4a:df:21:01:5c:53:e6:
ed:e6:48:15:d9:b6:3b:e6:5f:e0:0e:06:14:3d:fa:
e5:a5:02:b0:1f:db:17:ee:89:fa:cb:c6:07:77:fe:
8b:00:a1:83:fd:bd:af:c8:ea:db:d0:5d:4b:d0:21:
02:7f:59:f0:1c:10:f6:0c:de:72:31:11:46:30:45:
09:98:60:c2:f3:54:e5:4e:e6:61:94:22:c9:4f:d9:
df:45:a0:eb:74:15:56:a3:2e:8d:c9:30:e6:58:32:
55:31:b9:40:70:80:46:8f:06:a7:c2:47:46:b5:c8:
30:1a:bc:c0:01:f7:2e:9b:23:39:b0:4e:a8:04:f3:
c2:45:4b:59:7d:8d:e4:40:3a:f4:f3:dc:3b:1f:ff:
20:7c:d2:8f:64:d7:ac:38:66:fd:36:a3:b3:a2:0e:
e9:7d:a2:61:51:4d:b7:2d:4e:a6:bd:0c:13:85:6f:
9d:6c:ad:4f:fa:ef:db:0a:2f:df:74:88:0e:1c:7e:
de:ba:1f:89:97:b8:a8:86:3e:1a:c6:a3:01:8f:7d:
66:9f:fe:41:6d:37:8c:2c:f5:45:ed:71:79:3f:bb:
bd:0b:7a:4d:8f:6f:4f:e7:1e:6a:ea:c7:d1:a7:2c:
41:13:52:10:77:ea:27:58:5e:c8:3d:9f:d5:f7:b3:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F3:2E:7E:01:90:74:73:D8:7A:2F:1D:11:E1:7A:47:0F:44:E4:DC
X509v3 Authority Key Identifier:
keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d4:ec:c0:f6:8a:fb:31:2b:1f:5f:29:90:1c:94:1b:b2:f0:
4c:ba:00:24:c0:79:8a:3d:b7:2e:50:9e:d8:b9:43:51:e1:f3:
75:e0:40:9a:8c:3b:c2:9f:d2:f3:c3:01:b0:93:77:6a:26:32:
15:cf:4a:aa:73:e1:4c:2f:09:e5:1b:1d:1a:84:4b:46:72:ba:
07:25:e0:1a:5b:11:ae:75:93:80:9d:3a:4e:1c:6d:de:de:e5:
85:e8:b8:73:7b:f4:bb:52:dc:e7:dd:eb:e4:31:4f:c9:bf:94:
5f:75:e2:7b:24:e9:b8:89:03:74:3e:06:5a:c9:1e:c6:b7:9e:
5d:e1:e2:ac:6b:b8:b6:ec:49:65:f9:41:f2:84:d2:66:e0:8e:
d6:72:27:8c:77:75:a7:d1:d2:7c:cc:3a:ce:84:60:ae:eb:12:
13:9f:b3:20:21:46:0f:4e:82:c5:3c:09:eb:4e:e7:6b:97:76:
ed:d5:e4:a6:c6:33:f1:29:30:a2:d7:ab:c2:59:f0:72:6e:75:
ec:de:51:bf:7d:f4:6f:ba:1e:d2:3d:da:04:9c:e6:d0:0c:29:
19:7a:65:ea:39:4e:6a:58:cd:00:ed:ed:94:27:70:ce:9b:ec:
40:88:84:8e:04:69:28:84:05:f4:7e:39:7f:7a:f2:eb:81:04:
f2:1d:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:19:23 2025 by rpki-client