Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
File: fm16FsP81nnQXSjtkgk1wIaujP0.mft (raw, json)
Hash identifier: knTgUa4OO7+Fen3boltQ1/4i/MX3+zAvud+qxeJIqpg=
Subject key identifier: 09:5B:18:2B:01:70:48:D6:4E:A0:E2:F9:51:2A:6E:45:A9:96:6F:A4
Authority key identifier: 7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
Certificate issuer: /CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Certificate serial: 019896A5A37E8B66CB2456ECA137E3ECE986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
Manifest number: 1627
Signing time: Mon 11 Aug 2025 01:01:34 +0000
Manifest this update: Mon 11 Aug 2025 01:01:34 +0000
Manifest next update: Tue 12 Aug 2025 01:01:34 +0000
Files and hashes: 1: fm16FsP81nnQXSjtkgk1wIaujP0.crl (hash: baIKxdNmLzN1x92MnQjnHh4pvhjWjXILd15ukmKUd9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:a3:7e:8b:66:cb:24:56:ec:a1:37:e3:ec:e9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Validity
Not Before: Aug 11 01:01:34 2025 GMT
Not After : Aug 12 01:01:34 2025 GMT
Subject: CN=095b182b017048d64ea0e2f9512a6e45a9966fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:7e:50:d6:29:ef:4a:d3:88:25:f9:0d:14:
a6:f2:3b:16:c1:6d:2c:c2:ee:14:16:75:02:48:cc:
a0:64:9e:6e:a9:b7:fa:bc:36:b6:f1:17:35:a4:29:
07:a1:cf:b4:2f:96:2d:ef:0c:db:24:f1:f4:df:05:
66:d1:a2:91:b6:87:be:96:90:f3:d7:65:5e:6b:6a:
25:88:2c:94:15:e9:ae:c0:49:07:8c:e5:c9:b1:18:
77:b4:84:5e:bf:52:ff:01:af:66:70:e0:21:72:4b:
d5:a9:c1:67:88:41:4c:40:20:e5:6f:e5:f3:16:0e:
49:14:2a:a8:80:fe:58:e0:ca:4c:91:d7:71:79:b8:
43:98:0d:43:e1:26:36:e2:8f:9c:19:5d:bc:cd:e6:
d9:73:55:17:55:58:94:c7:b9:d4:1b:f2:96:ba:3e:
47:1c:cc:ee:7d:93:4c:76:7a:51:e9:c2:ff:2e:af:
15:f5:de:94:60:3d:e6:73:ce:21:ab:cc:d3:b6:51:
e6:83:ac:d8:e0:a7:8d:87:44:0b:41:61:a3:ea:a0:
47:ff:58:69:9f:67:45:54:49:8f:29:68:0e:f6:3d:
3f:c9:59:a5:d8:d1:23:09:ed:38:61:90:4b:de:d2:
e5:22:51:ce:e9:96:a5:5a:e7:f2:bf:90:08:bb:3c:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5B:18:2B:01:70:48:D6:4E:A0:E2:F9:51:2A:6E:45:A9:96:6F:A4
X509v3 Authority Key Identifier:
keyid:7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e6:52:bc:33:6b:db:47:aa:41:9b:e4:0e:28:d2:0f:07:46:
1e:aa:0b:8b:13:06:28:89:e6:91:f5:83:0c:e4:58:d3:4b:63:
2f:91:b9:01:9f:b8:b1:fa:d8:e0:7c:c8:43:71:4b:86:86:c1:
d7:d5:e5:eb:84:9d:c0:98:33:f9:d3:d6:03:1d:b6:09:cc:53:
89:7e:bc:a2:2b:01:60:05:f4:40:02:82:5c:bf:4e:66:20:1b:
84:1a:f4:3b:13:82:07:ff:f1:83:17:d2:57:cc:29:8c:a8:37:
3a:35:61:5d:11:d1:7d:bf:99:e4:77:69:d9:66:37:0e:21:34:
11:87:6a:7f:ec:26:d9:68:85:05:29:dd:f6:4f:e8:db:6e:79:
90:8c:9f:79:69:ce:8e:27:9d:b3:b8:91:47:eb:ba:b5:c0:ec:
11:9e:f1:0e:e8:86:88:09:8d:79:35:6f:05:66:95:3b:1c:aa:
fe:91:00:99:92:7b:fc:31:a7:2a:30:ba:dd:00:a6:f8:1f:4b:
1d:ba:db:f0:f2:7d:00:0e:4d:ac:01:39:8c:ad:df:61:c5:13:
3a:e1:24:cf:e4:08:39:88:03:49:2e:5b:a3:2a:65:a7:67:df:
c0:9e:78:34:e2:b9:1a:9c:f0:31:5b:a2:c5:ab:15:f7:33:26:
f1:01:03:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:27:05 2025 by rpki-client