Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier: yq37N4zRKIpRYKuWCCmDQiYI+FWkf5zjGJ9gIsA9c9g=
Subject key identifier: C6:61:CD:72:2C:79:BE:C9:FF:58:52:7C:78:2E:95:97:10:F2:72:09
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 019893364E82D11CE77CA53FECC6716DF030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number: 0F3D
Signing time: Sun 10 Aug 2025 09:01:06 +0000
Manifest this update: Sun 10 Aug 2025 09:01:06 +0000
Manifest next update: Mon 11 Aug 2025 09:01:06 +0000
Files and hashes: 1: ECVhbk7HslDK7Yab6tRyfcUTM-w.roa (hash: Zu9vU6DdogZHy9494u0UUYh7x1SUMPG2Ju9mrOac5EY=)
2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: 3jdduSv3COb9HL3AihGxvwQ8wwlm6Y6U/Q9Y4LKTgvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:4e:82:d1:1c:e7:7c:a5:3f:ec:c6:71:6d:f0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Aug 10 09:01:06 2025 GMT
Not After : Aug 11 09:01:06 2025 GMT
Subject: CN=c661cd722c79bec9ff58527c782e959710f27209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:6d:18:ca:d9:90:32:2a:ad:38:01:6d:f0:
84:6f:39:e4:a2:64:88:7c:dc:66:91:f5:7a:ef:8f:
71:1d:d7:72:c8:ff:91:ee:71:e0:10:64:99:49:e0:
ce:2c:12:99:42:b9:a5:7a:a9:e4:c0:8c:05:da:ec:
dd:64:ef:06:55:79:77:4d:67:0b:8c:22:dc:d0:2c:
7b:e5:09:9f:3d:a3:9f:00:f2:3d:fb:4f:58:09:30:
41:ea:82:7d:01:ff:d7:65:0f:e1:a2:ad:93:0e:39:
64:4c:da:8b:f9:24:18:ac:4a:f3:9e:89:b2:df:70:
3d:ba:39:ad:20:e6:92:b2:58:2d:c0:dc:58:52:19:
81:1e:84:c9:26:1a:a0:83:ca:f9:41:b3:29:01:36:
c6:3b:30:69:48:67:e4:6f:48:72:a0:62:e9:8d:e5:
99:af:de:a2:ac:33:03:87:14:32:53:46:0c:93:61:
eb:2b:e2:59:47:72:45:e7:2f:e8:b1:e5:be:02:53:
53:a7:35:60:cb:28:2f:8d:63:62:3e:09:c1:cb:92:
be:ad:9e:11:98:7b:0a:4e:80:ef:16:0a:d6:66:15:
c9:5c:cd:34:9e:cf:8c:50:dc:c5:43:b0:d5:a8:a9:
2f:8e:5d:22:5f:b9:45:69:9a:e3:a3:a6:72:26:fe:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:61:CD:72:2C:79:BE:C9:FF:58:52:7C:78:2E:95:97:10:F2:72:09
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f6:52:0b:61:59:31:2c:86:c2:7b:eb:52:14:14:a5:91:af:
11:8f:7c:60:15:24:3e:9e:ee:31:6c:40:e9:79:65:f1:7b:1e:
86:45:68:d1:6a:4b:bf:98:a7:34:aa:34:3b:ae:ad:80:96:f7:
54:e2:ed:9c:e8:9a:f0:08:ea:47:ad:bc:e5:50:59:34:fa:e3:
75:f9:e5:99:e6:56:a9:53:f7:5d:db:7b:86:bd:ae:36:16:aa:
5b:ec:37:df:14:33:8a:d8:13:6b:a5:2c:d4:ea:8d:de:9d:90:
88:fc:15:20:a8:ee:bf:31:fe:cd:19:54:93:b3:be:ec:3c:f7:
c3:7a:83:53:ae:a5:b6:e0:17:23:43:8f:40:7b:7a:d5:4f:b8:
ef:70:2a:53:af:ea:69:84:ea:4f:72:17:a2:90:5d:c4:28:bb:
5b:59:da:a5:d1:40:97:b9:e4:01:4a:a9:b8:ae:73:f8:38:3d:
6c:00:63:f1:a0:db:00:4f:92:18:6a:41:ab:a8:ab:09:4f:cf:
fa:73:a3:ac:a6:66:bb:40:fe:92:f6:3c:35:01:80:9d:81:08:
4a:7f:e3:41:03:a8:82:4c:cb:8b:eb:4a:19:cd:97:1b:1c:ed:
f4:dd:e3:c0:35:9b:d5:67:af:e9:bf:cd:99:28:15:3d:fc:24:
1f:f2:93:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:01:21 2025 by rpki-client