Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier: OZYko5Zc4NI2MDhvnpVHE7xExs1U5YyHMaEHdaiN6yw=
Subject key identifier: 85:B1:25:75:76:C9:8F:26:70:15:39:C5:F7:33:4F:2A:84:81:AF:ED
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 0199FD6B72C0CBA19BD887375AFB6E23E3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number: 0802
Signing time: Sun 19 Oct 2025 17:01:41 +0000
Manifest this update: Sun 19 Oct 2025 17:01:41 +0000
Manifest next update: Mon 20 Oct 2025 17:01:41 +0000
Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: 9OUxZqw0OT9OWsqno6Dc576t9LNOfhF1wzomm4o2wGY=)
2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:72:c0:cb:a1:9b:d8:87:37:5a:fb:6e:23:e3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Oct 19 17:01:41 2025 GMT
Not After : Oct 20 17:01:41 2025 GMT
Subject: CN=85b1257576c98f26701539c5f7334f2a8481afed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:55:09:6d:24:ca:76:a4:a5:c2:58:c5:e0:
9e:1c:eb:6d:47:27:a4:00:bd:23:00:e3:56:92:fb:
db:04:ef:42:9f:94:f8:a7:c5:88:78:20:61:ab:9a:
6d:87:2d:36:45:63:9b:ed:85:c1:57:01:89:25:66:
df:f8:cf:26:a1:59:55:96:e8:d7:11:a6:ae:d8:68:
91:58:88:ea:b9:22:19:76:46:21:fd:c6:ef:66:ea:
1c:ae:c8:93:c2:de:37:84:19:90:cd:b8:7e:ae:15:
fc:e5:20:f0:81:ed:77:35:47:fd:7f:c8:c0:eb:4f:
e1:c5:c3:72:80:56:13:ec:80:56:b7:7b:b7:8f:33:
6d:1c:8a:f7:ee:4a:b0:ce:0a:b7:a9:2d:0b:ce:89:
e2:af:05:8b:e0:59:92:7d:ce:9d:91:0e:32:80:a0:
c3:ac:65:9b:c5:5e:7c:e6:cf:82:ff:37:93:09:c7:
ba:c4:70:1f:26:50:8e:2c:55:ac:ce:df:eb:db:df:
18:ec:05:a1:42:d6:7b:0e:77:51:c2:75:0d:49:98:
b6:3d:15:58:d7:53:e6:fa:ed:02:ea:27:24:45:26:
7f:34:ce:27:d7:5a:81:5f:6d:04:5f:f5:01:23:39:
bd:7f:8e:b0:88:c2:fb:17:80:59:76:fb:42:eb:51:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B1:25:75:76:C9:8F:26:70:15:39:C5:F7:33:4F:2A:84:81:AF:ED
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d1:66:98:7a:f1:04:7e:14:ff:a1:05:df:6d:5b:8d:43:0f:
b3:ef:d6:5c:4d:98:ae:a0:f9:37:1e:80:72:f1:1b:34:0f:6b:
58:59:17:76:5a:a0:b3:d2:15:58:58:05:89:8c:64:64:26:1b:
98:de:9a:45:16:f1:ae:13:06:a3:90:e0:1a:03:38:6d:d4:fa:
f9:83:b7:57:6f:c6:74:a6:69:2d:a9:b6:6d:0e:cc:01:6f:10:
0a:fb:dd:37:6b:99:51:d6:fb:d0:e1:03:4b:ca:e2:8f:33:a4:
39:51:8b:8e:c6:85:a1:74:0b:fa:02:eb:c0:f4:ad:25:c1:dc:
99:9b:4b:e6:fb:dc:12:54:bc:95:4a:05:e3:80:79:85:6e:6b:
0a:7b:9a:4e:50:1a:ef:10:f4:93:14:96:5a:af:4a:72:10:a5:
94:40:08:c3:3e:66:8c:b6:c5:e1:d1:60:e0:f3:64:c0:16:be:
ee:26:c2:74:ed:f3:ca:04:a6:c6:d6:97:56:65:52:9e:3b:f6:
8b:94:ad:20:08:38:f9:6b:95:e9:2a:6b:69:97:95:50:37:5e:
0a:01:dc:8d:3a:24:11:83:0c:e1:2b:8c:c2:9d:31:67:1f:d5:
51:b7:49:66:70:a9:24:a7:78:d5:ad:be:a9:16:07:6a:3e:c7:
8e:47:a7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:15 2025 by rpki-client