
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: pB2Wi69CKbOWrolN6LsMY4uHyV5FrcjKzO4ADLTGmjk=
Subject key identifier: 64:1D:1B:6E:F4:8C:35:48:07:7E:AC:DC:F1:F4:57:58:09:58:BB:CE
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 0198D40470B7E00AA5D2B213E84C212350B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 0768
Signing time: Fri 22 Aug 2025 23:01:57 +0000
Manifest this update: Fri 22 Aug 2025 23:01:57 +0000
Manifest next update: Sat 23 Aug 2025 23:01:57 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: jQjZkzOfeO2DOw8tvSgo8oTsxn0zsKStaxl2XUw0sZ0=)
2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:70:b7:e0:0a:a5:d2:b2:13:e8:4c:21:23:50:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Aug 22 23:01:57 2025 GMT
Not After : Aug 23 23:01:57 2025 GMT
Subject: CN=641d1b6ef48c3548077eacdcf1f457580958bbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:0b:81:2b:5a:f0:de:22:b5:39:46:1d:ee:
5b:5e:1f:44:62:90:57:36:49:16:8b:e8:0b:d8:68:
ee:bf:54:c9:51:cc:c7:35:94:04:e2:33:84:d4:b1:
0d:a2:36:59:9b:23:a1:07:f6:29:04:10:27:2e:a3:
3a:3c:50:59:af:8b:bb:e1:90:1c:b4:20:e7:48:c8:
f2:73:29:ce:4a:c6:df:71:83:4c:76:2c:5f:ad:f0:
ab:b3:e3:a6:30:f1:9d:ee:a1:fd:ac:61:91:e8:e9:
62:08:ff:ad:6f:50:33:30:21:b4:a2:a9:48:b0:37:
13:ab:32:62:c1:29:6a:d1:3f:fe:5f:aa:79:4d:33:
80:75:df:2a:e7:3a:f5:c7:7c:04:bc:55:d2:a6:b4:
65:55:fc:2b:e5:93:9b:68:0b:a5:dc:22:89:69:9f:
fe:b3:ea:75:65:cd:54:e1:18:1d:50:72:cd:98:6f:
33:42:4e:ed:62:b9:5a:53:a7:33:35:dc:8c:9c:22:
e2:28:75:65:44:71:36:77:1a:e8:60:c8:56:6b:6c:
ff:d2:4f:88:29:56:d4:60:94:8b:51:23:57:c3:f1:
a2:83:13:48:e3:9d:18:20:96:36:dc:8b:c3:89:6e:
20:66:c7:32:9a:b5:db:28:83:d0:a2:6b:70:70:ed:
c6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1D:1B:6E:F4:8C:35:48:07:7E:AC:DC:F1:F4:57:58:09:58:BB:CE
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:98:4a:82:7c:15:3e:2e:71:8a:94:5b:b9:df:ee:92:8b:59:
75:ae:76:93:23:3f:b2:dd:29:03:85:35:34:70:5a:1b:51:ad:
4a:c2:ae:8d:0c:7d:3a:fb:01:21:43:e5:f2:46:8f:4f:41:8a:
8e:0f:cb:c4:a8:8f:19:99:a8:ca:98:84:47:e2:b4:ef:46:db:
ec:45:a6:41:17:43:2b:5b:cc:b0:e2:14:5b:34:22:f6:cb:6d:
28:4c:3d:1b:3f:70:58:42:73:ed:c7:ff:a1:e7:3c:8a:45:14:
ea:80:77:54:a6:40:30:26:9d:9e:40:04:75:ce:cd:19:dc:8f:
a5:d6:89:d9:4b:29:01:b9:58:90:f1:e0:68:84:e3:3e:7e:43:
be:f5:fb:db:3a:c1:9b:43:1b:0e:91:ad:f8:35:b8:7f:67:69:
a3:47:42:6e:a5:47:3f:24:28:55:14:e4:31:60:62:34:14:7f:
10:20:96:38:86:33:5f:13:19:18:2c:af:79:fc:1b:f4:cc:ed:
6f:0a:18:51:c2:24:79:ff:19:b6:57:4c:d9:e2:2a:f4:c9:25:
f9:38:a7:7d:38:19:69:0e:a7:81:74:ce:f8:78:65:fe:7d:9c:
a9:d8:e7:de:55:7c:d5:fd:31:68:67:da:40:bf:3f:22:57:63:
4c:d0:ad:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:36 2025 by rpki-client