Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier: Mi5scNKRD0U74UdsPdMfD6EjKO+T/bVrTmk1VtESl+o=
Subject key identifier: 5B:3B:97:0C:BC:A7:D4:E8:9C:32:04:F4:6B:6F:A9:E9:68:A9:1A:71
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 0198820C34BB723BF0FE4E43E71849C6A273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number: 1332
Signing time: Thu 07 Aug 2025 01:01:34 +0000
Manifest this update: Thu 07 Aug 2025 01:01:34 +0000
Manifest next update: Fri 08 Aug 2025 01:01:34 +0000
Files and hashes: 1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: RBVZzI6QO4ylWF7gQZRi/f64yMeTDCsSljLLFf9ipiE=)
2: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (hash: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:34:bb:72:3b:f0:fe:4e:43:e7:18:49:c6:a2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: Aug 7 01:01:34 2025 GMT
Not After : Aug 8 01:01:34 2025 GMT
Subject: CN=5b3b970cbca7d4e89c3204f46b6fa9e968a91a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:f9:9d:13:7c:e4:7c:c7:d9:88:4b:7a:99:
26:99:2a:cb:60:9c:1d:7d:9a:85:9c:fe:73:d0:7b:
be:6e:c5:17:05:03:7f:11:96:41:5c:68:1a:4c:32:
ee:12:9e:aa:a7:2d:50:f3:61:4f:98:72:69:47:4c:
a1:f9:e0:cb:22:b6:2f:87:f8:52:b8:80:b9:29:88:
a1:2d:ae:45:fb:58:c1:bb:e5:c3:39:46:b7:46:a8:
5c:3b:57:32:41:79:e5:5f:46:97:72:10:d6:e8:ca:
4d:39:fa:d8:3c:ea:ff:d8:75:dc:65:ae:25:19:4c:
c6:70:19:d3:d0:27:a1:b5:9b:58:bf:3e:10:c5:ff:
35:8f:b5:bb:58:09:cb:de:1b:69:6c:f3:9c:54:7b:
8b:e6:1e:46:94:6d:5b:fa:3e:0e:4d:dd:24:d9:2a:
c9:33:3d:c4:a5:56:73:b3:4e:64:94:6c:f6:74:90:
f5:21:f8:27:09:37:44:8d:c4:b4:01:76:c8:35:7a:
f5:00:e2:e7:94:a9:e6:ae:ab:61:2d:18:94:2a:f5:
c1:07:80:c3:2e:2e:58:07:1b:cc:9d:96:af:69:52:
de:97:54:ef:51:70:84:1c:ed:c9:08:72:47:b6:df:
70:72:2c:94:da:76:bb:d8:72:aa:65:91:6d:a8:c1:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3B:97:0C:BC:A7:D4:E8:9C:32:04:F4:6B:6F:A9:E9:68:A9:1A:71
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:33:53:9d:c5:66:78:20:b7:d6:81:7e:8e:39:4b:13:77:d1:
27:6b:1a:f1:94:73:14:0a:4e:0e:a2:64:0c:e2:a0:01:a0:a6:
2e:59:00:b4:1d:66:41:d8:b9:95:bb:c9:e2:58:68:de:98:c9:
4d:23:47:aa:76:62:f3:7c:28:9f:4d:3e:60:90:38:e4:79:a2:
a8:69:b9:15:98:c3:13:4e:2d:17:8b:b7:f9:07:1d:07:69:3d:
e7:94:2d:02:95:7f:d6:d7:11:95:57:18:81:42:35:49:f5:7f:
ef:aa:08:07:34:55:49:fb:ad:d9:28:f1:d5:69:65:3a:5e:30:
71:96:2b:aa:f6:7f:98:ca:5b:b6:f3:f8:1c:2e:5e:ce:16:41:
33:bb:3c:45:f5:e0:46:4d:5c:b0:b3:dd:50:fa:30:01:60:f9:
fc:a4:46:00:97:f5:2e:85:f3:7e:12:c3:69:9e:2f:2f:a8:8c:
97:a0:3a:34:7f:af:d5:2c:9a:d7:48:b2:08:d2:f6:97:3e:d9:
77:e8:56:de:0a:61:ef:c0:19:a2:4d:c1:34:b0:00:a0:7e:34:
0b:1e:d6:89:00:51:af:f3:f9:0d:a8:ef:99:93:50:92:85:92:
42:d9:10:1d:2a:96:7a:df:86:83:9a:82:87:45:10:4b:9a:b3:
f0:d2:02:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:16:54 2025 by rpki-client