Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
File: FqThByM1EnDNjJzGSwlkiOZOIw4.mft (raw, json)
Hash identifier: MBAaM1ebKUXGlR/Vzck14NgztTaMa1maQzWYdNe8iHA=
Subject key identifier: 47:C8:05:BF:B8:BC:DC:3F:5C:0F:DA:45:9C:1A:70:17:76:54:62:BF
Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
Certificate issuer: /CN=16a4e10723351270cd8c9cc64b096488e64e230e
Certificate serial: 01987A8979038DACB423FDAA318838327938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
Manifest number: 078B
Signing time: Tue 05 Aug 2025 14:01:26 +0000
Manifest this update: Tue 05 Aug 2025 14:01:26 +0000
Manifest next update: Wed 06 Aug 2025 14:01:26 +0000
Files and hashes: 1: FqThByM1EnDNjJzGSwlkiOZOIw4.crl (hash: j3B8RQTP4T1xgkvQr0JX1IF03i1c/wX4yk8RnPg+08g=)
2: LHS-1GPmf3JlxOhkC8EvvEXsIio.roa (hash: qJmDzf2hiWRAwgR4H4d0P3HUtRpMHlkEr8kbVnNHB5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:79:03:8d:ac:b4:23:fd:aa:31:88:38:32:79:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e
Validity
Not Before: Aug 5 14:01:26 2025 GMT
Not After : Aug 6 14:01:26 2025 GMT
Subject: CN=47c805bfb8bcdc3f5c0fda459c1a7017765462bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:3e:19:16:c3:7f:4b:f2:6a:7e:1e:77:49:
49:15:a0:c3:55:b3:ce:01:d2:4f:7d:4e:b1:61:cd:
23:b4:f7:35:ab:77:7a:73:fe:90:e8:8c:2e:55:34:
22:50:35:14:72:f5:06:a1:23:78:c4:c0:00:0c:81:
95:f9:f8:44:5d:3b:5e:a0:7a:cd:06:5c:d0:ab:5a:
2a:5e:2b:45:59:b0:42:77:9b:be:36:01:41:28:20:
75:2f:ea:ff:37:42:c4:35:a2:aa:d4:0d:07:c0:66:
82:58:3a:54:69:53:5d:dc:4a:76:f6:c8:63:ea:fe:
49:ea:4c:6b:37:46:d2:84:88:f4:97:d7:f2:2f:97:
8c:f8:17:86:45:45:8f:4b:85:90:70:07:d5:00:45:
35:f8:00:61:3d:96:e4:b3:e7:45:09:44:71:f8:9b:
40:8d:ad:0f:6c:b2:34:74:71:70:ff:ac:92:10:ba:
41:8d:95:09:70:03:6f:bf:10:a7:6f:a1:24:36:08:
1b:29:f4:e4:79:12:00:9a:6a:0d:9e:78:59:eb:10:
1d:cf:bb:d9:74:91:00:3a:1f:c5:cc:9c:23:7c:24:
01:9b:29:94:04:c2:38:7f:af:e0:cd:10:7a:95:9b:
0b:0c:e0:98:1c:3f:e8:bf:bc:73:40:a8:eb:9d:28:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C8:05:BF:B8:BC:DC:3F:5C:0F:DA:45:9C:1A:70:17:76:54:62:BF
X509v3 Authority Key Identifier:
keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:67:01:8e:f7:11:e1:ca:f0:8c:e1:c1:8b:ae:f3:ab:3a:2c:
ea:80:66:3a:d7:0f:a3:1c:18:d5:9c:10:bf:49:1c:3d:d7:6d:
83:93:52:48:cd:c2:51:38:3a:d9:15:39:3e:4a:9e:72:86:d3:
f8:8e:7c:08:a6:dc:f2:a3:2c:83:3a:2d:f9:40:7a:23:c0:35:
3a:3d:8a:9c:d9:cb:87:d3:c0:77:ce:70:a2:01:da:3d:34:a7:
e4:32:97:49:c8:ce:59:b9:cb:0c:b5:58:f1:0e:a2:72:da:cb:
bf:75:e1:f6:48:9d:83:ed:f6:d0:dd:04:67:4a:de:f7:81:22:
36:6a:16:93:45:5f:a2:50:d9:3b:32:ff:a4:89:ab:3d:63:c5:
62:f9:cf:80:7e:15:fa:09:af:1f:c4:16:31:31:99:11:0c:c6:
2d:db:7c:19:14:f2:50:2a:c2:e9:d2:29:5f:87:61:21:ce:07:
3a:39:cc:88:1b:16:85:f0:4a:b2:ca:af:2f:08:c4:61:42:97:
13:70:bd:b7:9f:0a:6b:b7:b1:72:d2:a8:30:85:2d:49:8a:24:
6b:2a:08:53:82:50:7b:a5:4a:84:69:d6:ca:30:cc:a8:19:bd:
d5:d5:21:9f:14:c7:90:35:b9:a7:4c:0a:8b:fc:1d:a7:1d:65:
9f:b8:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:02:44 2025 by rpki-client