Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
File: FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json)
Hash identifier: A7LUhqnRdFWHC7b4w9ILLZ8YLaaNP97ybIfLYTeUJqw=
Subject key identifier: F7:55:0D:8C:72:7F:31:95:80:C2:EE:68:6C:D4:3B:F2:7E:27:60:7A
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 019872CF5C37FCFE1326B8E9026394A6A737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
Manifest number: 118F
Signing time: Mon 04 Aug 2025 02:00:48 +0000
Manifest this update: Mon 04 Aug 2025 02:00:48 +0000
Manifest next update: Tue 05 Aug 2025 02:00:48 +0000
Files and hashes: 1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: +JncnelB37RHaiybfqyluMFZFHX4TDw0eIUDgw0Tp/0=)
2: H9dXCbHCAXGOrGOV28k8umzrLKQ.roa (hash: sDapbNuHEvC3TdmduqXaXIUkjYECPGi1w550P+lUprw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:5c:37:fc:fe:13:26:b8:e9:02:63:94:a6:a7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Aug 4 02:00:48 2025 GMT
Not After : Aug 5 02:00:48 2025 GMT
Subject: CN=f7550d8c727f319580c2ee686cd43bf27e27607a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:14:c6:2b:66:9c:76:c0:d0:13:ce:19:ca:
43:d8:44:8c:44:74:6f:ae:9b:b2:b1:3d:e0:e5:bc:
77:a9:22:bf:7e:9f:d8:7e:ed:1c:84:2a:61:54:5c:
ef:cf:ab:11:d5:ea:09:0c:2e:31:e5:4a:de:b9:b8:
1a:80:8f:cf:80:70:0e:1c:ad:3e:cb:ca:fe:61:c7:
4a:41:22:b3:f7:ad:c9:8d:e5:08:55:0f:ae:6a:94:
aa:0b:7f:eb:c1:d8:13:1b:f4:a8:35:ad:90:84:16:
f0:ba:ca:4b:a7:1a:24:a4:79:11:29:18:ac:66:3f:
8a:22:c5:ff:ab:b8:80:c9:69:34:ec:35:ab:2e:09:
e4:b3:f9:df:34:f8:df:43:d0:0d:2d:49:e5:27:15:
84:55:cc:2b:71:4b:c9:96:c9:16:1a:df:1a:8a:64:
86:bb:5a:30:e2:fa:48:a2:42:b8:c8:ee:0e:62:8f:
96:04:99:a9:1d:61:d3:ff:14:cb:c0:d8:3e:ae:bb:
e6:50:2a:c8:bb:d7:3b:3d:14:62:0d:ae:91:ca:51:
4c:d9:fc:af:83:1c:e0:d2:47:21:d8:2b:54:23:23:
18:40:6d:f2:fb:38:93:be:bf:4f:b3:93:d1:87:06:
58:61:ab:c1:a3:4f:be:93:d3:89:15:df:33:b3:bc:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:55:0D:8C:72:7F:31:95:80:C2:EE:68:6C:D4:3B:F2:7E:27:60:7A
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d1:68:6c:ac:38:32:2d:f1:20:3e:cd:4f:9a:52:d9:0b:9f:
2f:ba:24:86:21:1c:2f:67:b0:85:2a:77:22:6c:76:5c:28:7c:
83:a2:53:86:03:90:0d:1c:63:47:19:c7:0c:2d:19:20:ad:aa:
41:06:f5:e3:c2:fb:e0:2d:1e:4a:0c:52:a3:88:e4:80:04:0e:
bd:59:1c:4b:ab:bf:7a:81:19:6f:cd:7e:15:a3:3d:89:2a:fb:
a8:13:17:c7:8b:03:2e:54:46:e1:09:ec:1d:51:b0:81:1e:a6:
9a:49:98:c8:2b:65:be:8f:bf:41:45:b1:51:c2:8c:95:55:1a:
09:02:0e:2e:6c:05:4e:d5:dd:7a:6f:9f:bb:30:db:b6:5a:c3:
7c:64:69:b4:e3:69:38:f1:7b:2a:45:f0:77:cf:b5:25:79:27:
e7:7c:8b:fd:4e:86:c4:8d:a7:58:48:94:5f:20:14:58:ae:45:
e7:fb:14:5e:c9:d3:b2:e4:6a:5c:4f:8d:8d:c2:66:4f:30:8b:
b2:70:67:25:85:4d:44:87:96:46:3b:90:82:a2:1f:97:e5:89:
a1:2c:36:0a:72:e5:d8:7f:a4:95:39:08:dd:41:0b:31:17:9e:
a9:bd:55:d0:7b:81:97:64:05:42:09:6c:dd:b2:e9:6e:32:26:
a8:90:1c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:17 2025 by rpki-client