Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
File: FnhcBIzz1bIYafSUNPLTu0fUO6E.mft (raw, json)
Hash identifier: mhzw75AecUdAoRo0SKZsxd+f7hZ97B5MBUqH0PSNsHI=
Subject key identifier: A7:3D:C6:31:28:8A:24:BD:36:F3:CE:81:5B:DC:5F:F3:93:8E:3F:4A
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Certificate issuer: /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial: 019A4E4F79EAB88188548771A0DE583F081C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
Manifest number: 160D
Signing time: Tue 04 Nov 2025 10:00:22 +0000
Manifest this update: Tue 04 Nov 2025 10:00:22 +0000
Manifest next update: Wed 05 Nov 2025 10:00:22 +0000
Files and hashes: 1: FnhcBIzz1bIYafSUNPLTu0fUO6E.crl (hash: UJ+wCKSBxHCxUwCvQg292NB4lKNn1FiIq5Y9X0zOjVE=)
2: lvXJyQy3nWKTfzu8oFBAWTYMtuo.roa (hash: s4PZbf+hjf3iDmNtbUCQUPc0IiLibPsLSs4quWHg7C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:79:ea:b8:81:88:54:87:71:a0:de:58:3f:08:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Validity
Not Before: Nov 4 10:00:22 2025 GMT
Not After : Nov 5 10:00:22 2025 GMT
Subject: CN=a73dc631288a24bd36f3ce815bdc5ff3938e3f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:5c:e7:0f:1d:33:03:ab:db:f1:ef:e7:8f:
06:42:0f:14:46:44:35:e0:0a:ff:81:22:6b:74:4e:
1e:79:6f:f2:48:b3:cc:4e:96:dc:23:a1:9a:d0:47:
9d:ae:2c:eb:95:20:64:b1:9e:fd:1a:39:ec:ff:08:
b4:5a:26:d4:fc:d2:0b:f9:8f:bf:66:83:9f:b1:26:
db:d8:7d:a6:cd:f4:9e:23:02:f0:9f:4e:6b:8a:2f:
f2:33:92:79:43:81:ef:ed:8b:7b:06:f9:f7:36:66:
15:2a:24:7c:c6:85:ee:db:a5:d4:4f:5e:db:d1:22:
ba:04:bd:be:d1:8a:4a:09:db:58:a4:d4:51:73:c3:
a3:4e:b1:43:38:ca:ce:87:4d:12:0e:07:2c:8e:b7:
08:e6:78:c1:84:b6:3a:6b:d3:56:18:7c:62:41:a8:
70:0f:15:52:51:8e:86:b1:48:29:fe:ce:21:86:75:
c4:1c:9f:47:16:18:5a:1f:f5:f2:4c:bb:28:8d:8d:
94:7a:6b:38:1c:f8:de:e4:fc:fd:db:e5:0a:34:3b:
96:8e:80:06:6d:a8:bb:ee:66:3b:23:d8:63:cf:3b:
07:04:69:cb:03:a1:a8:f8:7d:a0:f0:b8:70:22:66:
f7:eb:ff:61:e4:51:46:84:6f:a1:02:d7:ec:45:f0:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3D:C6:31:28:8A:24:BD:36:F3:CE:81:5B:DC:5F:F3:93:8E:3F:4A
X509v3 Authority Key Identifier:
keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:83:2f:7b:aa:85:e9:c5:c9:22:55:80:aa:19:c7:fe:31:c6:
65:e6:16:e6:a8:36:93:69:0a:de:43:b0:10:62:26:0e:fe:70:
ed:f4:16:01:81:aa:86:76:a0:e4:e9:61:b6:86:98:0e:1d:38:
f0:ca:4f:7d:6a:cf:ba:7a:7b:28:de:3d:fb:c6:49:23:54:8b:
ec:71:c6:cc:e9:eb:97:c0:1f:9a:72:a2:fe:39:26:ae:00:cc:
a8:7d:eb:c2:d9:da:44:7f:16:ea:5c:5c:0f:63:a9:24:84:23:
43:94:be:3e:ce:3b:d3:7d:b0:63:91:9d:0d:0a:75:9e:fd:31:
4b:16:6b:c2:1b:25:fc:1f:81:51:30:d8:ee:15:7e:21:71:95:
ec:49:91:92:52:45:a5:1e:69:05:08:35:25:57:c3:d3:32:27:
33:39:b1:fc:0e:e2:7c:92:fb:63:4c:ae:67:7d:d0:f5:19:a7:
98:75:ad:b9:a9:1e:ca:ed:92:dc:2e:98:1d:74:76:67:6d:d0:
95:97:58:5f:db:b4:80:90:d7:00:57:64:84:64:1a:67:79:92:
06:0b:dc:d8:6d:b7:4c:c4:84:94:a2:2c:bd:40:c3:fd:67:e6:
f1:5d:8a:0b:f6:82:4f:68:e4:42:49:bf:49:66:85:b4:ef:49:
4b:4c:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:04 2025 by rpki-client