Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
File: FnhcBIzz1bIYafSUNPLTu0fUO6E.mft (raw, json)
Hash identifier: 401zFs46/4sAjG3MMn1EVkWi8b0aiC1Rl1GFAFGMmkw=
Subject key identifier: 62:EF:B7:71:25:E7:8F:5D:0B:2B:48:EC:E2:AC:F1:03:12:DE:26:BA
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Certificate issuer: /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial: 0198752C013CBEA0BF867A200B73DCEFE7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
Manifest number: 1518
Signing time: Mon 04 Aug 2025 13:01:14 +0000
Manifest this update: Mon 04 Aug 2025 13:01:14 +0000
Manifest next update: Tue 05 Aug 2025 13:01:14 +0000
Files and hashes: 1: FnhcBIzz1bIYafSUNPLTu0fUO6E.crl (hash: Y6cpCySkqgYgZhKRFbUD+6BTfM8kV3hUDu84SqqNfuE=)
2: lvXJyQy3nWKTfzu8oFBAWTYMtuo.roa (hash: s4PZbf+hjf3iDmNtbUCQUPc0IiLibPsLSs4quWHg7C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:01:3c:be:a0:bf:86:7a:20:0b:73:dc:ef:e7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Validity
Not Before: Aug 4 13:01:14 2025 GMT
Not After : Aug 5 13:01:14 2025 GMT
Subject: CN=62efb77125e78f5d0b2b48ece2acf10312de26ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:06:51:55:a2:30:d0:65:e0:1f:60:54:9a:
bb:dd:6d:b4:da:9a:b1:27:86:6f:da:7b:10:83:6b:
07:c7:62:70:1d:c8:f0:9a:af:f9:7c:3c:b6:be:5c:
43:5d:1d:ba:62:c9:ca:49:00:0e:67:0c:ad:d1:73:
9b:58:f4:ff:2c:2d:8d:72:9d:27:6f:44:c2:3b:5b:
2b:09:d4:55:64:f9:79:76:9a:d4:88:c5:f7:25:07:
f7:39:75:e4:60:35:4b:c0:62:54:8d:27:8c:3e:93:
9c:94:e0:fa:5d:be:47:d1:de:5a:44:a9:f8:3b:f1:
ab:22:55:a1:7f:3d:31:ff:66:3f:57:5d:a4:be:92:
77:5f:69:31:a2:a8:e2:0c:ea:cc:f3:15:f5:ef:bc:
7d:ca:7d:2d:88:a7:30:e2:b0:82:89:db:3a:38:ce:
9d:a1:61:4b:b4:fe:6b:0e:7f:3b:ef:f7:5a:e6:a4:
74:cc:85:10:f8:f2:32:12:5c:48:18:b0:72:36:64:
73:7f:1c:36:39:71:90:46:67:85:69:dc:a1:fe:47:
7b:3a:e0:2e:dc:47:c7:5e:14:47:c7:82:51:10:28:
fd:be:0c:b1:10:95:1c:33:d4:64:84:79:f3:c3:fe:
4b:5c:d0:99:d3:75:66:9f:8b:09:01:6f:17:41:90:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EF:B7:71:25:E7:8F:5D:0B:2B:48:EC:E2:AC:F1:03:12:DE:26:BA
X509v3 Authority Key Identifier:
keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0f:b1:ac:5d:7b:35:35:87:0d:31:03:21:2e:2f:df:bc:8f:
65:26:a3:4d:fe:a4:97:73:07:8d:d1:9c:0d:92:df:91:62:b6:
b3:b0:4c:00:ac:72:2e:aa:ac:69:bd:fe:05:a2:9b:32:c4:89:
3a:f4:2d:2a:a1:fa:4b:ab:81:2c:45:9c:22:fc:ec:ad:a1:b9:
7a:75:8f:e6:77:28:95:34:1a:c3:04:02:90:2c:eb:4d:2c:1a:
7e:00:62:1b:8e:a7:63:5a:10:77:ac:9d:bf:cd:74:ef:b1:3f:
1e:6e:91:9d:ab:0f:95:2e:8c:b9:55:21:a1:ec:40:12:66:be:
43:b5:00:58:01:cb:bd:72:7e:ef:bc:67:96:2d:3a:c1:24:bf:
43:5e:c6:c1:c6:96:1e:56:44:2e:7c:48:54:ee:b2:bc:e3:a8:
28:4b:86:65:fc:78:c4:92:a5:76:89:3c:6a:d8:80:c6:3c:0b:
7c:97:f1:2e:3f:ce:95:b3:a0:f6:de:2c:63:f3:d7:2c:70:9e:
6b:60:63:9e:34:15:02:03:ed:44:0b:d6:5d:2f:c8:42:71:a4:
61:3c:a7:1b:49:ac:22:d9:99:0a:da:b0:e8:4b:e5:7b:36:4b:
57:46:0a:1b:5e:8f:df:65:4a:c9:f5:9b:45:d1:f8:21:5f:3e:
1d:35:8c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:03 2025 by rpki-client