Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File: FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier: xHoGpbJIwUnKg9uGZ7+QjDkx0m5XbAEq1y4HewBv2TE=
Subject key identifier: 35:ED:72:B3:33:5F:47:F4:24:9C:5A:E6:C1:7E:49:9E:8E:61:AF:B7
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial: 0198944910C105346024923CE8CC56E45376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number: 4F
Signing time: Sun 10 Aug 2025 14:01:12 +0000
Manifest this update: Sun 10 Aug 2025 14:01:12 +0000
Manifest next update: Mon 11 Aug 2025 14:01:12 +0000
Files and hashes: 1: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: eCeAy1vScApxojspqDt/UXgSo/RZ01D1sMA2WwrolAA=)
2: RyU-tKT6g5iQNEPXbzsjbHBM1_k.roa (hash: 2sFbg6PGW25XBrpSEBIs6U3UJCsY2lOFHoiV3xMg67c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:49:10:c1:05:34:60:24:92:3c:e8:cc:56:e4:53:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Validity
Not Before: Aug 10 14:01:12 2025 GMT
Not After : Aug 11 14:01:12 2025 GMT
Subject: CN=35ed72b3335f47f4249c5ae6c17e499e8e61afb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:87:6f:c2:70:27:d1:6e:5c:2a:61:14:2f:
5a:11:f0:61:d1:c5:1c:c9:59:64:d6:32:94:f4:0d:
ce:5e:a5:1f:a1:f0:91:5d:9f:74:58:b3:41:32:9b:
fb:e6:cf:7d:46:6f:c1:72:bb:4d:ce:82:46:3b:a5:
f3:ce:e5:51:64:1d:e4:f5:b4:33:1b:01:e8:f8:18:
1d:57:a7:33:12:41:b7:32:b6:63:72:3b:50:69:94:
72:a5:cb:ae:b4:d0:3c:62:0b:b1:0c:29:c5:d5:9d:
c8:7c:b1:61:da:05:f9:4c:42:81:5c:38:87:55:4e:
ce:aa:0d:3e:41:54:cd:42:78:10:1d:66:aa:e0:30:
00:b0:64:68:01:93:1e:5c:19:b6:36:16:85:8f:8c:
b4:86:96:11:e1:e5:a5:b9:f2:90:e8:9e:b2:b1:df:
8f:ea:67:2e:a6:9b:e0:e6:99:fc:5a:c4:12:4b:ff:
e3:65:21:5a:b8:02:87:01:6f:36:b5:37:71:cf:25:
17:00:60:41:24:4e:c5:51:73:0a:55:dd:f4:d7:d2:
cc:7c:51:0a:d2:0c:73:ed:21:f3:fc:48:1b:48:7f:
de:91:1b:05:56:4d:40:94:03:cc:d4:77:3d:34:2a:
a0:05:d7:83:48:ca:ad:88:a9:67:5b:be:b4:33:98:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:ED:72:B3:33:5F:47:F4:24:9C:5A:E6:C1:7E:49:9E:8E:61:AF:B7
X509v3 Authority Key Identifier:
keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:26:e9:f8:fb:83:98:4e:ac:ef:f4:5a:84:73:11:42:ce:c0:
6c:e4:52:b6:e1:75:9a:79:29:f7:c5:27:31:0a:4e:2a:53:9d:
84:62:09:27:8d:2b:50:8f:a5:b9:38:fb:4e:dd:e0:11:50:f8:
04:fc:ad:74:ac:99:7e:b5:1f:c0:df:50:25:c3:64:09:48:f9:
f8:9a:a3:c7:48:a7:a0:46:ec:2a:a6:32:6d:d5:36:aa:d1:2c:
c4:4f:1b:37:3e:e8:5f:7f:1c:ae:eb:5c:f5:84:81:64:ad:1a:
18:78:58:91:b1:d4:9a:50:d7:9c:8a:a8:b0:e8:ec:8c:4e:1e:
fe:5e:15:8c:b2:ec:70:18:d1:cc:43:84:62:cb:70:c9:41:e4:
93:a0:3e:35:5e:8e:92:18:b5:7d:ed:f4:9c:4d:f5:c7:cc:2f:
06:46:63:84:6b:21:a9:8c:af:c6:70:16:93:c6:3c:94:32:48:
52:20:41:23:fa:5e:09:8c:46:68:4e:74:da:e5:5b:da:0e:36:
4a:39:66:59:c0:5a:a4:97:1e:5a:db:40:83:87:f4:47:22:79:
e5:75:21:18:e7:1b:ca:76:cd:90:6f:29:40:47:70:32:05:28:
7a:79:23:dd:6b:0a:35:13:1d:a7:34:5f:43:c2:4f:5b:ac:80:
64:07:3d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:10:37 2025 by rpki-client