
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
File: FYlivF2icS8gj8ixXr3CRq9Mvs8.mft (raw, json)
Hash identifier: 2fKRDN4e/FiQpqXMAILP4cUoQ6bQbz0HPxoV4qBEsHo=
Subject key identifier: BD:2A:9B:AB:35:EF:04:68:F4:93:81:D7:93:FB:45:2A:C3:92:65:10
Authority key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
Certificate issuer: /CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Certificate serial: 0199FCC6CCAE9D04AE21C0BBB7F46918F3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:50 +0000
Manifest this update: Sun 19 Oct 2025 14:01:50 +0000
Manifest next update: Mon 20 Oct 2025 14:01:50 +0000
Files and hashes: 1: 7yUkmk2a1THyX00hTlndTIVmtLc.roa (hash: aTNg1uSoSZtKZaAe8w+QZyL4kY8mBpAFfSDQeH8QdZ0=)
2: FYlivF2icS8gj8ixXr3CRq9Mvs8.crl (hash: H6ufzDvesdb4w+Eq3FFt5HQNXlTZD9qYT44QvKtp0Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:cc:ae:9d:04:ae:21:c0:bb:b7:f4:69:18:f3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Validity
Not Before: Oct 19 14:01:50 2025 GMT
Not After : Oct 20 14:01:50 2025 GMT
Subject: CN=bd2a9bab35ef0468f49381d793fb452ac3926510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:dd:b2:20:87:01:ee:29:68:a9:23:7b:af:
55:26:35:31:54:d8:15:e2:43:ef:22:8f:d0:64:da:
03:94:ba:b5:d7:9b:03:36:56:3e:69:59:22:c1:c1:
aa:06:4b:17:ef:62:09:28:f9:95:c3:19:58:cd:d7:
3c:71:7a:41:da:1a:4e:bf:23:b8:f9:55:b8:d6:58:
26:88:6d:79:89:f0:8f:6d:88:3e:ed:9d:4b:2f:27:
ce:f6:4a:68:ac:17:ec:8b:5b:f7:52:40:f7:5f:0e:
59:1c:a8:8e:c9:50:92:20:2e:ba:a7:c1:bf:b1:22:
8f:83:98:e1:52:e7:52:11:cf:03:1b:e8:b9:b7:ec:
fb:d5:e4:92:ef:d5:db:ac:95:bd:39:82:d4:93:93:
ef:ed:05:da:a4:2f:3b:e7:9e:ae:9b:c6:cb:de:34:
4f:50:d7:48:b5:5c:f2:fc:3a:f6:f4:40:5c:7d:d0:
40:12:c2:a6:36:3b:9c:a6:cb:25:b4:4e:74:8f:c1:
d4:43:8d:50:6e:a2:a8:a1:0b:27:2f:87:c1:84:14:
94:35:0b:c6:05:2e:d5:3b:49:5a:55:6b:17:bd:24:
b8:f1:d2:1e:94:b8:22:25:cb:1b:bb:5f:70:91:ae:
a4:b1:4a:c0:bf:51:71:30:9b:d4:dd:64:38:c7:dc:
b0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2A:9B:AB:35:EF:04:68:F4:93:81:D7:93:FB:45:2A:C3:92:65:10
X509v3 Authority Key Identifier:
keyid:15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:71:6d:3c:2b:84:4a:de:98:c7:25:38:37:a2:d4:23:07:48:
d1:55:ad:4a:89:19:76:b9:92:2b:cd:35:ea:e9:ef:ed:92:18:
71:8d:6b:66:d9:06:93:70:cb:d2:27:84:eb:5f:81:24:9d:74:
25:55:8d:f7:96:bf:44:71:e0:d5:47:81:e7:36:fb:22:80:f5:
ec:79:ae:9a:0a:b2:2b:83:38:9f:bd:1c:24:d3:ea:33:ce:e7:
15:27:4a:20:c5:97:ed:53:81:4f:5f:4d:f6:ac:ab:2b:62:ad:
0a:c0:08:e1:b9:16:bf:59:bf:8f:6d:6d:87:50:cc:5a:b9:1e:
08:d7:36:0b:60:a9:77:a1:d1:56:a2:83:de:1b:43:36:70:ac:
ca:40:15:da:7b:07:2e:df:67:45:ae:16:e8:02:27:26:6e:03:
fe:cc:a9:72:98:cf:22:05:c4:38:e2:2b:f6:35:f1:50:bd:41:
b8:31:3e:6a:9a:74:0e:89:ce:cc:b2:36:54:05:fc:6b:71:09:
57:b6:d7:4a:d3:65:e1:a4:ef:40:b5:e6:fd:0e:82:03:b3:46:
57:7c:e5:cf:b3:b6:5c:d6:40:15:a1:33:88:ee:d8:cf:ed:f4:
22:21:da:31:86:18:b4:60:e0:ba:b9:da:dd:9c:f2:76:59:18:
23:38:10:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:35 2025 by rpki-client