Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
File: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft (raw, json)
Hash identifier: /h7PsaZs9I35k1N6idpbblcpNXUcLANf33duDWUYCK8=
Subject key identifier: D3:13:62:3C:B3:88:A7:B5:7D:FF:84:2B:CC:7E:E4:57:7C:41:94:C7
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial: 0198D705F462CE420B56E60BC54965FDEBFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
Manifest number: 0C87
Signing time: Sat 23 Aug 2025 13:02:28 +0000
Manifest this update: Sat 23 Aug 2025 13:02:28 +0000
Manifest next update: Sun 24 Aug 2025 13:02:28 +0000
Files and hashes: 1: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl (hash: j6CI5t2CVrmuhK45+sD21/zl4G+msgLbstqnjY5A7EA=)
2: krakPppfz7flLx069ZARtir4dzE.roa (hash: rc01bvPv/5+vfBCkfObVuaLV/O1M46ZYkYO5PLG/3iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f4:62:ce:42:0b:56:e6:0b:c5:49:65:fd:eb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
Validity
Not Before: Aug 23 13:02:28 2025 GMT
Not After : Aug 24 13:02:28 2025 GMT
Subject: CN=d313623cb388a7b57dff842bcc7ee4577c4194c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:d1:96:28:e7:36:c9:d8:5c:8c:76:f8:23:
fc:f0:77:e0:cb:5c:fc:8d:6a:0e:0c:76:47:d6:5a:
63:91:0c:c4:84:c7:4b:76:97:d8:a6:4d:15:5e:36:
9c:38:b9:93:42:75:f8:39:99:f2:8d:aa:62:b7:e3:
2e:83:e7:58:ac:1d:85:b4:87:47:3d:52:65:0e:dc:
f5:4c:e5:1e:31:e6:35:c9:a4:35:e7:bc:78:f6:8c:
3a:25:cc:db:49:91:7e:e7:e9:1c:3b:c6:fd:e3:0b:
0f:56:2c:8c:26:28:e1:7c:5b:b9:6d:ff:06:a3:5a:
36:9b:48:a0:1e:cf:19:e4:84:75:ad:4d:0b:af:32:
16:c8:86:96:6f:52:5c:be:91:74:17:20:16:bf:90:
b4:d7:a5:3d:a9:19:66:67:35:ef:1b:54:1b:17:85:
02:c0:b8:28:6a:e7:e3:8f:6c:21:77:0e:98:ec:eb:
9e:c3:f2:9e:93:69:1b:dc:64:f8:69:99:1e:35:22:
ed:cd:23:91:92:ab:4a:41:a8:23:a1:64:1b:3c:22:
77:25:74:fe:cf:aa:71:ff:2c:fd:de:05:c8:b5:c4:
f3:69:04:ac:72:69:af:26:18:60:ce:6e:b4:3c:70:
63:87:fd:a1:bc:38:82:7a:b3:bf:3e:5b:9d:a7:8e:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:13:62:3C:B3:88:A7:B5:7D:FF:84:2B:CC:7E:E4:57:7C:41:94:C7
X509v3 Authority Key Identifier:
keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c9:90:a6:d8:4c:c8:e0:8a:0f:a2:40:0a:b2:48:76:64:6b:
76:b6:61:6a:a6:70:43:ac:da:bf:23:64:67:f6:91:fc:0d:43:
48:33:50:d0:eb:af:7a:6c:6a:e1:71:cc:ee:72:fe:e5:1f:47:
ac:70:7e:55:4e:75:a9:e0:68:80:9c:1d:85:13:dd:63:eb:ad:
32:54:a4:65:be:e5:e9:c0:97:a3:7d:fe:89:0e:91:56:15:53:
e6:16:33:da:5c:bc:01:3b:bb:d1:15:ec:45:27:17:7b:67:4f:
59:1c:06:04:c4:25:15:d7:dd:9c:71:c6:f5:08:13:90:59:aa:
49:a6:0f:bf:9a:04:f3:87:12:e8:72:34:18:30:35:89:67:5a:
55:93:3b:91:62:e2:52:e4:27:70:40:1b:f0:50:ed:7f:0d:24:
0e:35:59:d6:3d:28:00:8d:cd:bf:c1:a2:cb:28:77:f9:b3:54:
db:6b:ee:08:f5:f7:ac:a8:a4:96:3e:9a:71:77:77:b7:69:23:
0f:6b:59:8b:db:53:f4:a7:89:45:87:71:7b:02:b3:83:a3:8f:
69:54:6e:02:44:70:83:81:8b:54:7b:2d:03:a6:28:8c:d7:0c:
d2:99:88:e8:ee:2d:b8:41:f7:e0:c5:f7:1d:d8:cd:da:77:9f:
6a:d6:66:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:40 2025 by rpki-client