Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
File: FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json)
Hash identifier: 3bJ9p5d7Mkx33mIxx4ErVzU1eLATL2DR74AKXhF95/4=
Subject key identifier: F6:B6:08:09:D7:5A:05:D7:FF:E9:1A:FF:E0:2E:38:83:64:96:96:7C
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 019A4FD017FB080CA1B617C88477A210AF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
Manifest number: 1286
Signing time: Tue 04 Nov 2025 17:00:28 +0000
Manifest this update: Tue 04 Nov 2025 17:00:28 +0000
Manifest next update: Wed 05 Nov 2025 17:00:28 +0000
Files and hashes: 1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: l3oRR+ASp48IsWSLsvI4bOr8vQMtYo5pac2QrTeR3CM=)
2: H9dXCbHCAXGOrGOV28k8umzrLKQ.roa (hash: sDapbNuHEvC3TdmduqXaXIUkjYECPGi1w550P+lUprw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:17:fb:08:0c:a1:b6:17:c8:84:77:a2:10:af:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Nov 4 17:00:28 2025 GMT
Not After : Nov 5 17:00:28 2025 GMT
Subject: CN=f6b60809d75a05d7ffe91affe02e38836496967c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:94:5d:60:10:2f:2a:00:7b:a0:02:0e:bb:
33:6d:3a:11:79:66:f6:45:4e:43:65:16:13:0e:0b:
78:47:f6:74:55:12:6f:5b:e4:70:93:10:4b:03:ea:
d9:6c:c5:51:c6:8a:74:07:d6:51:94:18:95:62:33:
af:b7:23:02:23:ce:dc:4b:8a:58:13:d8:dd:33:ff:
eb:65:70:31:e8:4d:c9:c0:89:5a:13:5b:5a:ad:23:
5b:bc:7a:84:fc:0e:01:28:5c:f3:12:4f:c0:bb:ac:
03:85:f0:32:e2:6b:e2:42:b2:cb:79:3d:d1:50:60:
cc:39:97:af:34:48:f1:fd:c1:4c:75:be:eb:1c:53:
22:35:2b:8b:e3:4a:b3:52:03:5b:e7:1f:ef:e0:cd:
23:80:50:6b:b6:23:d3:43:ab:b5:fa:2a:92:18:41:
24:58:66:49:67:d0:0c:28:05:77:25:fb:bc:d5:38:
65:5a:88:99:94:b0:0a:d6:59:9a:ef:ef:a9:46:f5:
1c:c3:0e:27:6a:69:73:13:e1:60:57:a6:5f:f3:ea:
f0:2a:19:7c:e3:f4:d5:fe:8c:79:99:69:8e:0e:56:
8b:f5:60:eb:c5:b4:c1:23:80:d4:63:2e:e8:82:b6:
e1:61:b0:3f:17:4d:7f:ab:4b:e4:8b:aa:fc:4c:68:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B6:08:09:D7:5A:05:D7:FF:E9:1A:FF:E0:2E:38:83:64:96:96:7C
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:62:9b:73:fd:c2:f6:de:a5:24:38:42:a2:27:19:1e:81:82:
09:98:64:fe:7e:57:30:d5:9f:9d:a3:ef:f1:97:3e:47:0c:c4:
2c:7e:d5:7a:f8:a1:69:1e:3b:7a:7c:ce:8a:85:c8:dd:fb:d4:
ae:61:8f:53:04:0b:e4:f0:b7:ec:d8:3e:e4:00:51:f2:fd:7d:
ec:91:12:18:23:45:ec:48:00:86:e0:62:f4:e1:87:f3:8b:6c:
79:38:36:da:4a:59:8d:eb:57:05:0b:39:e3:b0:c0:fb:26:10:
09:5f:3f:80:11:d8:52:44:ae:7b:48:b5:0a:89:1a:30:b3:d2:
22:ed:6a:bc:57:2b:34:e3:7a:0f:28:a2:b4:23:48:dd:f2:67:
61:5a:16:93:fe:dd:12:b5:5c:70:a1:12:f5:00:05:ec:b6:03:
9a:5d:86:9b:cf:d3:99:77:7b:f0:8d:45:b0:4c:d4:4f:a9:69:
e1:2a:92:9c:1e:c7:64:7d:a7:c2:a9:80:94:15:0d:82:96:0d:
fd:02:44:74:fc:3c:85:20:10:3d:b9:3a:8a:60:2f:90:71:6a:
c9:69:81:ea:4d:aa:69:bd:9a:bf:9b:a5:3d:3a:28:2c:36:ce:
81:74:7b:61:33:09:51:d7:09:28:17:ed:2a:09:8c:68:a8:20:
7a:eb:02:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:09:43 2025 by rpki-client