Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
File: FvFFcn00rmYHphUwEoPu69XWKRw.mft (raw, json)
Hash identifier: Sm/qybFVeusWdMERyMFP2WawX8h5U572EuqJVIOX/IE=
Subject key identifier: DE:02:E5:F6:60:73:B7:44:41:6C:59:7A:8B:5B:BC:A6:3F:0E:62:82
Authority key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
Certificate issuer: /CN=16f145727d34ae6607a615301283eeebd5d6291c
Certificate serial: 0198DA3DB327537E5203B17C2D7B3B388BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
Manifest number: 137C
Signing time: Sun 24 Aug 2025 04:02:13 +0000
Manifest this update: Sun 24 Aug 2025 04:02:13 +0000
Manifest next update: Mon 25 Aug 2025 04:02:13 +0000
Files and hashes: 1: B7T3sZebBoQYg5x0RYsPBj23iEo.roa (hash: O9yZ4KZ+ahHkW7NK8lCiaskHOdR7GD8prEJOvXc4vRI=)
2: FvFFcn00rmYHphUwEoPu69XWKRw.crl (hash: kJtIhsZ8PHW4oMB+uERztBnIF1gySKqFGzZPyl91Caw=)
3: swm48vI840zUfl2DaxMs8hbeLoo.roa (hash: JjFou/0kBbJgWy4DCqB6G2CRT7ZKW8RECYymrqJxYxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:da:3d:b3:27:53:7e:52:03:b1:7c:2d:7b:3b:38:8b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f145727d34ae6607a615301283eeebd5d6291c
Validity
Not Before: Aug 24 04:02:13 2025 GMT
Not After : Aug 25 04:02:13 2025 GMT
Subject: CN=de02e5f66073b744416c597a8b5bbca63f0e6282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:bf:92:18:d2:23:4d:6e:fe:2d:a5:d1:ef:
8f:79:33:1f:55:0c:34:99:0a:de:b9:a2:af:33:2e:
dd:e9:10:92:99:05:65:06:04:5d:1d:cf:4c:37:91:
81:b1:cd:50:63:a8:3e:96:07:bb:71:85:da:e7:5e:
d8:09:b6:0f:c4:b4:9f:a9:2a:88:5c:27:b4:a2:f7:
66:1a:60:2f:3c:21:3f:fd:b6:bf:84:82:05:c3:9e:
d2:8d:0a:7a:cc:a5:29:a2:7a:39:ed:8d:99:d2:18:
ac:1c:b8:b2:99:01:fd:f1:14:ad:53:ae:bf:50:c0:
82:c4:ad:de:a7:2f:e1:54:5c:b8:a2:9a:30:1c:dc:
9a:dd:2c:c2:cb:9a:bd:f5:bf:59:bf:e1:1e:60:28:
68:1c:40:92:af:b9:96:41:4a:be:34:f0:07:91:a3:
0b:fc:33:de:c9:47:ee:3a:71:6b:03:41:99:ca:ce:
5b:25:a4:ad:42:8d:bc:7a:89:70:5e:f6:cb:f7:c2:
4d:49:51:8a:62:11:75:50:00:1f:84:a0:1c:41:e2:
38:a8:64:cc:a0:08:e9:4d:3d:64:31:9d:ec:9c:e5:
cb:ba:06:4c:26:f8:50:12:ac:56:3a:8a:20:1c:ba:
b3:84:a1:df:9e:8a:6d:c4:05:da:36:df:be:34:d6:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:02:E5:F6:60:73:B7:44:41:6C:59:7A:8B:5B:BC:A6:3F:0E:62:82
X509v3 Authority Key Identifier:
keyid:16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:86:8d:0d:33:19:e1:87:54:7b:01:8b:31:d5:64:93:24:d2:
da:ff:8c:1f:46:52:41:1e:8e:d8:62:b9:57:0c:3b:65:17:5b:
b1:70:4f:49:2c:69:de:ca:7b:48:90:be:75:50:c6:2a:05:cf:
ba:ff:3d:28:4d:94:a4:19:fd:e8:de:47:70:b6:02:13:6e:b2:
4a:d3:77:61:62:b5:8f:a1:4c:45:76:cd:9e:c4:10:17:53:4e:
0e:3c:9f:55:d2:0c:77:ed:f2:a1:ba:c0:73:f3:6b:a6:4f:35:
a5:73:d0:17:14:94:2e:20:a0:13:08:00:27:8a:f3:12:38:93:
8b:3d:1e:f9:52:42:c4:94:ae:92:38:47:62:83:ae:32:38:f8:
46:48:19:58:7a:4d:52:5d:e2:0b:c0:0e:37:df:d1:f1:96:e6:
6d:6c:52:ea:83:dd:52:95:15:6a:d0:9e:84:24:b9:20:5c:3b:
40:31:44:de:93:95:b1:d0:11:f2:8e:fb:41:02:f9:3c:eb:22:
e7:de:c8:74:9d:3f:3c:c5:ad:14:ad:e5:e5:bc:72:0b:41:cd:
26:29:0f:c5:6f:64:c7:9f:05:6a:ef:cc:3f:2b:32:82:21:84:
a7:49:a4:6b:10:e6:bb:ab:6d:d8:b9:17:ed:0b:93:56:dd:61:
a6:9a:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:19:09 2025 by rpki-client