Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
File: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft (raw, json)
Hash identifier: LRqZvvoe07ctMRaEMlXqvYIthxe3Yj5xCujcFW39i50=
Subject key identifier: 09:70:C9:94:39:10:27:24:24:26:85:AC:73:E7:31:00:D6:FE:72:41
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial: 019A006C7AAE7803B2947919E558ADE91C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
Manifest number: 0D21
Signing time: Mon 20 Oct 2025 07:01:40 +0000
Manifest this update: Mon 20 Oct 2025 07:01:40 +0000
Manifest next update: Tue 21 Oct 2025 07:01:40 +0000
Files and hashes: 1: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl (hash: pdFsILNfLukL1pt61iSnbxvxxYiXhEyOqUX8GXw04xM=)
2: krakPppfz7flLx069ZARtir4dzE.roa (hash: rc01bvPv/5+vfBCkfObVuaLV/O1M46ZYkYO5PLG/3iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:7a:ae:78:03:b2:94:79:19:e5:58:ad:e9:1c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
Validity
Not Before: Oct 20 07:01:40 2025 GMT
Not After : Oct 21 07:01:40 2025 GMT
Subject: CN=0970c99439102724242685ac73e73100d6fe7241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:a6:cb:55:15:d0:a1:f8:60:37:28:60:9c:
6f:ec:59:35:e9:e1:e0:08:f0:f5:15:9b:60:8d:fb:
b4:f8:7c:f2:c6:2e:14:ce:71:31:04:3d:78:12:73:
ab:6a:0f:fa:e8:ec:9f:95:26:7d:16:d5:61:5b:9e:
cf:09:5e:b7:a0:87:ae:72:2c:4f:75:95:e6:31:21:
26:7a:31:c5:ce:f5:cb:39:2c:c9:d9:3e:49:8c:40:
fd:ec:f2:a5:f3:ed:b3:30:cb:74:0a:03:ed:2b:c4:
f9:42:99:16:a4:ec:d3:1a:ce:ef:6c:e1:64:db:6e:
17:47:09:ec:8c:63:41:b7:ab:43:9e:28:d5:f5:03:
b1:9d:1a:0e:16:ec:c1:f5:eb:c9:a8:41:77:12:db:
d8:12:4d:53:1b:ad:82:27:b2:fe:9e:af:6d:47:fc:
19:7b:15:be:4f:f2:fc:33:64:c7:08:28:80:c5:56:
77:dc:b7:34:c5:1a:3d:57:81:61:9d:7b:8e:1b:a3:
17:36:14:d5:11:d5:ea:21:2e:db:28:3c:a7:6f:d8:
cd:6d:28:36:d0:b8:55:ac:4c:c0:a7:30:c4:fe:35:
3a:90:13:42:d6:e5:f0:44:39:4d:8d:07:9a:15:60:
bb:30:47:eb:60:83:89:f1:7e:89:f8:5f:2e:9f:d0:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:C9:94:39:10:27:24:24:26:85:AC:73:E7:31:00:D6:FE:72:41
X509v3 Authority Key Identifier:
keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c1:31:b6:f7:8e:3a:6a:7f:fa:29:76:fb:6d:16:82:49:c6:
4e:dd:a9:93:5d:71:d3:bc:92:69:98:4b:dd:84:bd:4f:63:bd:
3e:ed:4a:1e:dd:fa:58:60:ff:c4:03:e4:39:78:06:1a:4b:74:
be:18:25:12:5b:5d:da:8b:01:d7:7c:cb:ee:57:cb:8e:4b:e3:
41:d1:91:0d:95:1b:fe:82:b1:99:a4:54:82:d8:75:95:a2:6c:
25:3f:97:61:8f:e1:a6:45:c9:4a:30:cf:d2:bc:ad:90:6d:d8:
24:d6:77:ac:73:24:f7:f5:ed:10:68:d2:77:46:d7:e8:96:14:
3c:96:98:9b:87:65:76:7a:16:44:6d:56:09:16:fc:7f:89:88:
6f:fe:e8:09:5f:6c:46:75:8b:2c:07:94:3f:cf:68:9a:8e:3f:
eb:72:5b:b7:13:de:94:dd:83:ea:8d:7c:f1:e0:0a:cb:6d:f4:
6f:a4:d8:4e:79:86:54:9d:ff:8b:bf:82:dd:73:da:b9:40:b5:
b8:c3:60:93:56:7e:21:79:8c:d2:c7:51:46:36:44:58:72:eb:
57:2f:69:b5:d0:76:70:01:6b:8a:1c:be:7d:84:56:f3:b4:e4:
e5:a9:38:9a:ec:89:f7:33:68:75:5f:c8:6b:2c:88:8d:f1:0f:
74:19:92:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:12 2025 by rpki-client